Psamathe
Guru
OBR have issued a statement on the early release of their document.
It wasn’t actually emailed or posted anywhere.
“The document was not listed on the OBR website, journalists - including those at the BBC - were able to access it by guessing its URL, which was very similar to one used in a previous official document.”
So it was just a basic phishing exercise which exploited poor file management. But an easy mistake to make for the average administrator who is unfamiliar with such protocols.
They seem unable to distinguish between publishing and listing/promoting.It is piss poor security, who is their sys admin, the CEO's ten year old sprog?
They did publish it on a piublic accessible website. That the didn't tell many people the URL or that they didn't protect it with login protection are quite separate.
Were they to publish confidential personal data about a taxpayer "but didn't tell reporters the URL" is would be a massive security breach.
