‘Burglar’s shopping list’ security flaw fixed

January 3, 2015

An online service recommended by most of the UK’s police forces has fixed a privacy flaw after being alerted by a security expert.

Immobilise allows members of the public to add records to the National Property Register, detailing valuables in their homes.

But security consultant Paul Moore discovered a flaw that made it possible to access other people’s records.

Recipero, operators of Immobilise, said it had fixed the vulnerability.

The Association of Chief Police Officers (Acpo) is responsible for ensuring websites recommended by police are fit for purpose. It told the BBC that it had been assured, by independent auditors, that the site met the correct criteria.


 Read full story…