TheJournal.ie uses cookies. By continuing to browse this site you are agreeing to our use of cookies. Click here to find out more »
Dublin: 8 °C Sunday 26 May, 2013

Would you trust this man to tell you a website is secure?

Phil Hogan told the public not to worry about security on the household charge website – but his own site is so dangerous that most browsers won’t even open it.

Phil Hogan, website security guy.
Phil Hogan, website security guy.
Image: Sam Boal/Photocall Ireland

IT’S ALWAYS WORTH making sure your own house is in order before you give advice to a friend. Or, in this case, the entire country.

Earlier today, Phil Hogan, the Minister for the Environment, assured the public not to worry about security on the household charge website.

Anyone paying the new charge over the website should be reassured that the site is “fully secure,” said Hogan.

However, embarrassingly, the Minister’s own website isn’t secure enough to be opened on the two most-popular internet browsers.

Visitors who attempt to access philhogan.ie using Chrome or Firefox are met with a warning that the site contains malware – malicious software – and could cause damage to a computer if it’s opened. Oops.

Visitors who attempt to access philhogan.ie using Chrome are met with a warning which says: “Something’s Not Right Here!”.

The site can however be opened in Internet Explorer.

Phil Hogan represents Carlow Kilkenny in the Dáil and was first elected as a TD in 1989 according to the Fine Gael website (which can be accessed from any browser).

Malware on PhilHogan.ie

(The malware message that shows up when users try to access philhogan.ie using Chrome)

Minister for the Environment insists household charge site is “fully secure” >

Data Protection Commissioner ‘concerned’ over household charge collection >

Read next:

Comments (70 Comments)

  • Ha “something’s not right here”! How fitting!!!!

    Reply
  • Yip just tried in on my smartphone…This site may harm your device.

    Reply
  • The phil ‘da bull’ of the property and authority party wants to target people rather than property on a property tax.

    A simple and easy solution would have been to assign a unique random 10 digit alphanumeric identifer to each property. Take all the properties listed by the land registry minus the commerical properties listed by valuation office. Being careful to include company properties used by their CEOs (ala Micheal O’Leary).

    Send out a postcard to each property with a payments bank account number and the unique ID (for the transaction message). Anyone could pay the property tax as long as it is paid. Elderly parents could have it paid for by their children. Have mulitple payment options and no tracking, that is how you build confidence, trust and adherance to a system. Simples.

    Da bull’s idiotic statements about multiple people with the same name in the same town land has nothing to do with uniquely identifying their houses correctly.

    Instead he is responsible for google analytics ‘monitising’ every persons PPSN/address/name/credit card details. A weak website which is just begging to be targeted by mafia from all over the world now know the idiot king does not understand why privacy is a European citizen’s right.

    The real question is #when_will_phil_hogan_resign ?

    Reply
  • Phil hogan is just the latest in a line of headline grabbing attention seekers(Leo V last week). This government is pathetic expecting the Irish people to cough up for all the problems by extorting money out of us instead of trying to help us out like they promised. It’s time for change again this government is exactly the same as the last one just different name. We need real leadership not the ‘go along with mentality’ this government perpetrates. Trust in any of this government is completely misplaced they have sold us further down the Rhine.

    Reply
  • Designed by a cowboy paid for by a cowboy no doubt.

    Reply
  • Aydo 05/01/12 #

    I’d say he found out what a website was in 2005. I wouldn’t trust him with my chewing gun money.

    Reply
  • That web site warning sums up the whole sorry mess it would make a good story line for Val Falvey T D episode but we already have 100 plus in Kildare Street

    Reply
  • Its secure as a fraud (i mean irish tax) website can be, They are robbing your money anyways!

    Reply
  • never trust a fart

    Reply
  • Why is this story in the gossip section and not in the news section?

    The Irish economy – or what’s left of it – is increasingly IT driven. What does it say about the country that a senior government minister can’t hire staff that can put together a paint-by-numbers website? Why isn’t this is a bigger story?

    Reply
  • There is an old saying “think before you open your mouth” would you not ensure your own house is in order before making such statements!!! Why are these people not better advised by those around them?

    Reply
  • Liking the way you didn’t even give him a backlink.

    “Everything is fine my good little flock of sheep (I didn’t even check and in fact I know it probably isn’t but) everything is fine”

    Reply
    • Yeah, I thought about including the link but seemed a bit silly to link to his site given that most people will just get a malware message (or worse, if they’re using IE). Je ne regrette rien.

      Reply
    • Jim Daly 06/01/12 #

      The warning is a Google not a browser one. Both Chrome and Firefox are throwing these warnings due to their integration with Google. IE, Safari, Opera etc. are not integrated in the same way.

      Google found what it suspected to be malicious code via (not necessarily on) philhogan.ie twice in the last 90 days. It may even have been a false positive. Google will throw the warning for a period until it is satisfied everything is okay.

      Plug “philhogan.ie” into a Google search and you will see a similar warning.

      Reply
    • Well done on the explanation Jim – unfortunately, the full details don’t make for an attention grabbing headline!

      Reply
  • I wouldn’t that man or any other of his fellow cohorts in government. They couldn’t organise a piss up in a brewery.

    Reply
  • Ardo Ci 06/01/12 #

    “Would you trust this man…” NO! Not even to sweep the streets.

    Reply
  • Ed 06/01/12 #

    Phil hogan is an auctioneer in his previous life ,not a teacher

    Reply
  • Don’t pay. Smash the system.

    Reply
  • F A C T : Only 5 % of the worlds population are leaders!
    The remaining 95% are followers.
    Don’t be the latter and be intimidated by your government.

    Reply
  • I don’t understand it!! Phil is a qualified politician. To suspect he may be lacking in intelligence is not very charitable to him. Those who held the office before him were equally qualified. Imagionocity a country that spent hundred of millions to find out that a Minister for Finance didn’t even have a bank account. I think this is a storm in a teacup as it is business as normal for our government. Mind you they get well rewarded whether they perform or not.

    Reply
  • trevor 06/01/12 #

    As I suggested in the piece above, doing a whois on the website shows that the domain householdcharge.ie was registered in April 2011.
    http://www.iedr.ie/index.php?option=com_content&view=article&whois=householdcharge&id=86&Itemid=105&Search.x=0&Search.y=0
    Therefore this website/charges has been in the pipeline since April 2011 and more likely a period before that.
    Surely that fact is more interesting that the security of Phil Hogan’s personal site.
    Feel free to follow up on any of the other points that I made.

    Reply
    • Ciaro 06/01/12 #

      Trevor:

      Phil Hogan has defended the integrity of the website while his own personal site has a malware warning.

      This makes him look like a total idiot.

      I have typed this post slowly.

      Reply
  • Hi

    I dont for one minute ignore the fact that the Irish government is under the thumbs of the EU/IMF.
    But I am certain that Ireland has been used as a guiney pig to prove to other defaulting nations that austerities can be fruitful.
    They are only fruitful because your lame Enda Kenny & Co have said yes and amen to all demands.

    Look it up in the German version of Google ( the prospects of Ireland and it’s mountainous debt).
    You will come across truism that should not have been held from the Irish people.
    It more and more requires to read inbetween the lines to figure out where we are heading.

    Reply
  • People still use IE?

    Reply
  • itsme 06/01/12 #

    If it was really secure, why does the site pages contain the source code for PPS number validation, just go to the page where you are requested to enter the PPS number, and do a “view source”.

    Reply
  • That “Something’s Not Right Here” message is referring to Hogan, not his website.

    Reply
  • unsecured websites, possible inappropriate use of esb data, possible inappropriate use of pss no. data, possible illegal taxation of properties, possible further increase of same tax. I don’t think I can safety trust MY details just yet, may have to wait till closer to the end of tax year. too many negative aspects attached to this.

    Reply
  • trevor 06/01/12 #

    I think the article and some comments above are pretty unfair. Phil Hogan said the new householdcharges.ie is fully secure. As minister of the environment, his department should have hired expert web developers through a tendering process and run security tests on the website as part of their contracts. As spokesperson for his department he would be relaying information about the websites security based on the information passed on by professional web companies and possibly an independent security analysts.

    You shouldn’t compare a tendered government website with his own personal website which he quite possibly got a novice to create and paid for himself. These TD websites are often done by students with a little bit of web knowledge. I think it’s unfair to compare the two websites. Was Phil hogan ask could he confirm his website was secure? I doubt he’d give he same response as the householdcharges site.
    I think a much improved approach to an article would have been to see if a security analyst would run tests on the householdcharges.ie and if there was security problems, report the facts and findings. There’s dozens of Irish companies that could run these tests and some run free reviews.
    Or if you are going to get technical why not investigate the tendering process for the website. I never noticed this contract on e-tenders. What is contained in the tender? How much was the tender worth and which company won it? Does the winning company already have a relationship with the department. How much is charged for processing the each payment online? Why is a government website not fully bilingual? Why does the look and feel of the navigation break when you switch to Irish? Why does the website not conform to accessibility standards required for government websites? When was the tendering process for the hosting of the website, or was it just given to the local government computer service board? How much maintenance a year is charged to keep the site up to date? Does the site work without JavaScript turned on? Is the website site semantically correct? Why is Google stats being used? When was the domain name registered In relation to the budget announcement date? What information is stored, how long is it stored for and is the privacy statement valid and legally sound? Who did the branding and when was the tender for that put on e-tenders? All of these questions are more relevant than why philhogans site contain malware -when the answer is probably that he paid some friends child who knows a bit about websites to make it. I think you’d be surprised how many sites contain malware. All of these questions can be answered by freedom of information requests ,by readers in the know and often the department will give information if journalists ring and ask directly.

    In theory some smart Alec could sue the government for not having the site bilingual or fully accessible and they could use the money to pay their household charges.

    Look, we are all annoyed about paying this charge and I don’t dispute that it’s wrong and the way they are going about it is wrong but I think you need to focus on relevant articles rather than half baked stories with loose connections.

    Phew.

    Reply
    • spot on there. some digging could unearth some interesting facts…

      Reply
    • Ciaro 06/01/12 #

      It demonstrates his incompetence. Google have notified him of the issue, however he has chosen to ignore it.

      Reply
    • trevor 06/01/12 #

      @Ciaro: Google hasn’t notified him of the issue of malware on his website. Internet browsers.such as Firefox and Chrome alert users that visit the website that it the page may contain suspicious code that might harm a users computer. It doesnt inform the owener of the website. It doesn’t demonstrate his incompetence, it demonstrates the web developer that created the website’s incompetence.

      Regarding the comments about the different browser types, I think the point is moot as websites should work on as many as browsers as possible. It is simply impossible to get accurate figures on market share but some websites release their stats on website browsers. For example, a company like Google could use their overall Google Analytics from all the accounts they have to create figures but it would be at best an estimate.

      From my experience, large corporations semi-state companies and government organisations still use ie6 as some of their legacy systems will only work in ie6 and the cost of recreating these systems would be considerable and therefore they stick to ie6. It makes the job of a web developer much more difficult. There should be an Irish campaign set up to make Irish organisations move from ie6.

      I find comments like “I’d say he found out what a website was in 2005.” , “I wouldn’t trust him with my chewing gum money.” and “Designed by a cowboy paid for by a cowboy no doubt.” and the whole “phil ‘da bull’ hogan” really uninformed, ignornant and possibly slanderous. Phil Hogan is the Minister for the Environment and makes decisions based on advice from his department colleagues and external consultants. He’s not a website developer. Has anyone emailed him to tell him about the issue? I’d be surprised if anyone did but are happy to spend time slagging him about it. There seems to be some sort of manhunt out for him.

      Even the title of the article is a bit silly and rhetorical – “Would you trust this man to tell you a website is secure?” I would trust him to “tell me” but obviously it might not be true as he’s not a website security expert and can only base his statement on assurances from information given to him by experts.

      Reply
    • In saying that trevor phil hadn’t exactly got the best track record, a politician who consistently refuses to meet with the people will always be regarded with suspicion.

      Reply
  • @ John now you tell me Hic!…

    Reply
  • Ciaro 05/01/12 #

    Christine, how much commission do I get for breaking this story to you?

    Reply
  • This is a minister when in opposition would not reduce his salary for personal reasons yet expects the rest of us to pay a charge to service the sick pay costs of the local authorities…i would not trust him to mind my car in a car park and it parked in front of him.

    Reply
  • http://www.philhogan.ie/uploads/images/home_banner.png that’s where chrome is getting the error from. Delete that or rename it and your back in business phil.

    Reply
  • No one should pay this charge, and Phil hogan I wouldn’t trust him to pick his nose

    Reply
  • Ciaro 06/01/12 #

    Trevor, the following text appears on the warning message:

    We have already notified http://www.philhogan.ie that we found malware on the site.
    You better contact Google and let them know.

    Reply
  • Ian F. 06/01/12 #

    That’s Internet Explorer for you. If you use that shoddy excuse for a browser, you’re gonna pay dearly sooner or later!

    Reply
  • @ JOHN now you tell me,Hic…

    Reply
  • Ciaro 05/01/12 #

    Apologies Gavan, I misread a report on browser usage…. Chrome and Firefox combined are more popular than IE.

    Reply
  • Actually, IE is more used (i.e. more popular) than Chrome or Firefox.

    Reply
    • Ciaro 05/01/12 #

      Chrome is now used more than IE

      Reply
    • IE has the largest market share, but Chrome and Firefox have the most popular editions of browsers. IIRC Chrome v15 is the most popular single browser in the world at the moment. IE6 is still the most popular version of IE, largely because it’s installed on corporate computers where its user doesn’t have the rights to upgrade.

      Reply
    • Cpm 05/01/12 #

      IE is in third place after FF and Chrome http://www.w3schools.com/browsers/browsers_stats.asp

      Reply
    • Cpm 05/01/12 #

      Gavan, not sure where you’re getting that info, only two days ago Microsoft had a ‘funeral’ for IE6 as it’s down to 1% market share in USA. http://www.foxbusiness.com/technology/2012/01/03/microsoft-celebrates-demise-ie6-in-us/

      Reply
    • @cpm those w3c stats are for their own website only.

      “These facts indicate that the browser figures above are not 100% realistic. Other web sites have statistics showing that Internet Explorer is a more popular browser.

      Anyway, our data, collected from W3Schools’ log-files, over many years, clearly shows the long and medium-term trends.”

      Microsoft may have had a funeral for it because it’s dead in the states, the Internet is a big world and some of the most popular sites in Ireland still have a 3-4% IE6 user base due to large financial institutes relying on IE6 to deliver their in-house solutions to their employers. 7.7% of the internet still use IE6 look at this website below (owned by Microsoft themselves):

      http://www.ie6countdown.com/

      25% of Chinese Internet users use IE6, 7.2% in South Korea, astonishing to say the least!

      Reply
    • Cpm 05/01/12 #

      @ neil – it’s not just financial institutions use IE6, many other types of organisations including state bodies use it. I design primarily for IE6 as my company’s biggest customers still use it. Not only is it used by corporations, its also quite popular with disabled users, as updating their browser also means having to update accessibility aids, which can be extremely expensive. Even if it is 7.7%, that certainly wouldn’t make it the most popular version of IE as Gavan said.

      Reply
  • The best site for accessing politicians is Bung. Sorry, Bing.

    Reply
  • Ardo Ci 06/01/12 #

    Tom your smart ‘reply’ is pointless unless of course you’re the guy who created the website trying to save face?it’s things like this that keep morons in power.

    Reply
    • No Ardo, He’s nothing to do with me. I was just bored and had a look at the site. I’ve come across the error before a few times. I’d also like to add that the fix i recommended is only a partial fix. If Phil is reading this and wants the full fix I’m pretty sure eh €100 should cover it ;-)

      Reply

Add New Comment