"Informing You Without Watching you."  @digitalprivacy, Fri 10/07:
Government considers centralising digital ID verification on myGov in wake of Optus breach

The Australian government is considering using myGov or its myGovID system to centralise digital identity authentication in the wake of the Optus data breach, but critics warn any single system could have its own cybersecurity weaknesses. The former Telstra chief executive David Thodey was recruited to audit myGov when the Albanese government came into power, and his review would now examine whether myGov could be used to prevent people needing to present ID documents multiple times, a spokesperson for the government services minister, Bill Shorten, said. The federal government will now consider whether to develop a single digital identification service that businesses could use instead. The Morrison government released draft legislation in October last year to expand the use of the myGovID system. She said the system used an identity exchange that mediates all logins, so there was a single point of failure where one server could track every time a person logged in, and every service they logged in to. For more information see our Newsletters may contain info about charities, online ads, and content funded by outside parties. A spokesperson for the ATO said more than 6.5m verified myGovID identities had been created as of 6 October, and there were about 300,000 authentications a day.

Read full article here:
(warning: ads & trackers)

This news aggregator is non-commercial and provided
as a public service by the Magnusson Institute,
a Nevada 501(c)(3) non-profit. All articles
and images are copyright of their respective
copyright owners.