Unbelievable that the IRS would have this "Get Transcript" feature readily avail... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

jtzhou on May 27, 2015 | parent | context | favorite | on: IRS says thieves stole tax info from 100,000

Unbelievable that the IRS would have this "Get Transcript" feature readily available via the web without any password, or better two-factor authentication. It's already been taken offline, but was up for a long time.

Will there be punitive lawsuits against the IRS as there were for Target and likely will be for Anthem?

smackfu on May 27, 2015 [–]

I think the hackers were attacking the initial sign-up, not already created accounts. So I don't see how you could use 2FA.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact