The Straits Times

21 April 2015

IT safeguards in place: ICA

WE ASSURE Mr Balasingam-Chow Yu Hui ("Security risk with old software"; last Thursday) that the operating software in the Immigration and Checkpoints Authority's (ICA) passport scanner system at the automated gates of our checkpoints is being upgraded.

The system is also protected by strong security software and backend technologies.

Additional security measures are in place to prevent and detect any compromises of all our immigration clearance systems.

Ronnie Tan

Head, Public and Internal Communications

Corporate Communications Division

Immigration and Checkpoints Authority

 

 

 

<Original Letter>

The Straits Times

16 April 2015

 

Security risk with old software

 

ON TUESDAY, I used the immigration automated clearance system (IACS) at Changi Airport Terminal 1, upon returning from an overseas trip.

 

While scanning my fingerprint, I saw the familiar Windows taskbar on the screen.

 

From the look of its buttons and icons, the taskbar appeared to be from an old version of Windows, such as Windows XP.

 

It did not resemble the taskbar for the newer Windows 7.

 

Microsoft has officially stopped supporting versions of Windows older than Windows XP. If the IACS is running on an old version of Windows, then it is not receiving any more product updates, including the latest security fixes.

 

This exposes the system to potential compromise. A malicious user could scan a "bad" passport that loads a virus into the system. The fallout from such a compromise would be catastrophic.

 

I hope the Immigration and Checkpoints Authority can clarify if what I saw was an anomaly and reassure the public that the IACS is running on the latest software.

 

Balasingam-Chow Yu Hui