logoalt Hacker News

idoubtittoday at 1:46 PM1 replyview on HN

The post is verbose, but lacks substance:

- The last two sections (≈20% of the article, 5.Cloud and 6.IA) are barely relevant.

- Some comparisons are questionable. It claims that, since some taxes data was compromised, the trust in the national Federated Identity is eroded "as if Facebook Connect was hacked". That's strange, I think it should be "as the trust in Facebook Connect would be eroded when Facebook is hacked". Anyway, I think most people won't care.

- Some sentences make no sense: "Le piratage de Ficoba semble en être l'exemple type"... But "Ficoba" is not mentioned anywhere, and, though I know what the word means, I can't guess what the sentence points to.

The OP should have mentioned another important hack of French national structures that happened in december 2025 and which is well documented. IIRC, through phishing, a keylogger was installed on a teacher's computer. Then the hackers got credentials to an internal training platform for teachers. Then they exploited multiple security breaches and connections between Ministries to get access to the national police files.


Replies

dolmentoday at 2:16 PM

> t claims that, since some taxes data was compromised, the trust in the national Federated Identity is eroded "as if Facebook Connect was hacked". [... ] Anyway, I think most people won't care.

The taxes services is one of the oldest online government service in France that has existed, with a very wide usage.

As people had already that authentication as an identity provider, it was natural to reuse that authentication (not the password, but 3rd party auth à la OAuth, but a french government standard) to authenticate to government services that went online later.

So if the taxes auth is compromised (so far I haven't seen enough details about the coverage of the leak), that's a real concern.

show 1 reply