Job board website vulnerable to hacking, data interception

A popular Yukon job board website is vulnerable to hacking because its managers have not put common security measures in place.

A popular Yukon job board website is vulnerable to hacking because its managers have not put common security measures in place.

YuWin.ca doesn’t use Secure Sockets Layer (SSL) that allows encryption of all the data exchanged between a client computer and the internet server hosting the website yuwin.ca

“It’s rare to see (no SSL) these days,” said Martin Lehner, an IT specialist and co-owner of Tangerine Technology in Whitehorse.

“It’s quite surprising they wouldn’t encrypt,” Lehner said. “They’ve had executive directors who have been from the IT industry.”

SSL is becoming ubiquitous as even Google now encrypts all searches by default.

“At some point the entire internet will be SSL (encrypted) anyways,” Lehner said.

Because the data exchanged is not encrypted, an attacker could intercept a user’s login information.

While YuWin doesn’t hold information, such as social insurance numbers, that could be used for fraud or identity theft, hackers could still make use of the passwords used for YuWin accounts.

That’s because people often reuse the same password for different services, Lehner said.

“I would say anybody who has an account on the job board … should know their internet password is viewable at a minimum by the YuWin staff or anybody who has access to the backend,” he said.

And an attacker wouldn’t even need to be on the same internet network to intercept passwords, Lehner said.

All he or she would need to do is capture data flowing between the Yuwin.ca’s server and other internet routers.

“Eventually if you wait long enough, you can pull traffic out,” Lehner said.

The lack of SSL also means an attacker could impersonate the website, and trick people into entering their login information.

It doesn’t matter that YuWin is a Yukon-based website, Lehner said, because hackers will scan the entire internet looking for vulnerable services.

Implementing SSL is neither expensive nor difficult, Lehner said.

“I would suspect that with the government who funds them, they probably expect the data is kept reasonably secure.”

YuWin chair Debbie Parent told the News the board was aware of the situation and working on it.

Parent asked the News to withhold publication of this story in exchange for first crack at a news release to be issued Tuesday. The News declined.

Contact Pierre Chauvin at pierre.chauvin@yukon-news.com

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Mobile vaccine team Team Balto practises vaccine clinic set-up and teardown at Vanier Catholic Secondary School. Mobile vaccine teams are heading out this week to the communities in order to begin Moderna vaccinations. (Haley Ritchie/Yukon News)
Mobile vaccine teams begin community vaccinations

“It’s an all-of-government approach”

The now empty lot at 410 Cook Street in Whitehorse on Jan. 19. As developers move forward with plans for a housing development that would feature 16 micro-units, they are asking city council for a zoning change that would reduce the number of required parking spaces. (Crystal Schick/Yukon News)
Developer asks for zoning change

Would reduce the number of required parking spaces

The Liard First Nation is preparing to enter negotiations for self-governance with the territorial and federal governments. (Jackie Hong/Yukon News file)
Liard First Nation preparing to enter self-governance negotiations with Yukon, federal governments

Chief Stephen Charlie seeking an agreement separate from “dead end” UFA

asdf
WYATT’S WORLD

Wyatt’s World for Jan. 20, 2021

A Copper Ridge resident clears their driveway after a massive over night snowfall in Whitehorse on Nov. 2, 2020. Environment Canada has issued a winter storm warning for the Whitehorse and Haines Junction areas for Jan. 18. (Crystal Schick/Yukon News file)
Winter storm warning for Haines Junction and Whitehorse

Environment Canada says the storm will develop Monday and last until Tuesday

Mayor Dan Curtis listens to a councillor on the phone during a city council meeting in Whitehorse on April 14, 2020. Curtis announced Jan. 14 that he intends to seek nomination to be the Yukon Liberal candidate for Whitehorse Centre in the 2021 territorial election. (Crystal Schick/Yukon News)
Whitehorse mayor seeking nomination for territorial election

Whitehorse mayor Dan Curtis is preparing for a run in the upcoming… Continue reading

Gerard Redinger was charged under the <em>Civil Emergency Measures Act</em> with failing to self-isolate and failing to transit through the Yukon in under 24 hours. (Joel Krahn/Yukon News file)
Man ticketed $1,150 at Wolf Creek campground for failing to self-isolate

Gerard Redinger signed a 24-hour transit declaration, ticketed 13 days later

Yukon Energy, Solvest Inc. and Chu Níikwän Development Corporation are calling on the city for a meeting to look at possibilities for separate tax rates or incentives for renewable energy projects. (Crystal Schick/Yukon News file)
Tax changes sought for Whitehorse energy projects

Delegates call for separate property tax category for renewable energy projects

Yukon University has added seven members to its board of governors in recent months. (Crystal Schick/Yukon News file)
New members named to Yukon U’s board of governors

Required number of board members now up to 17

Yukonomist Keith Halliday
Yukonomist: Your Northern regulatory adventure awaits!

“Your Northern adventure awaits!” blared the headline on a recent YESAB assessment… Continue reading

Yukoner Shirley Chua-Tan is taking on the role of vice-chair of the social inclusion working group with the Canadian Academy of Health Sciences’ oversight panel and working groups for the autism assessment. (Submitted)
Canadian Academy of Health Sciences names Yukoner to panel

Shirley Chua-Tan is well-known for a number of roles she plays in… Continue reading

The Fish Lake area viewed from the top of Haeckel Hill on Sept. 11, 2018. The Yukon government and Kwanlin Dün First Nation (KDFN) announced they are in the beginning stages of a local area planning process for the area. (Crystal Schick/Yukon News file)
Local area planning for Fish Lake announced

The Government of Yukon and Kwanlin Dün First Nation (KDFN) announced in… Continue reading

Most Read