Northern Advocate
  • Northern Advocate home
  • Latest news
  • Business
  • Opinion
  • Lifestyle
  • Sport
  • Property
  • Video
  • Death notices
  • Classifieds

Subscriptions

  • Herald Premium
  • Viva Premium
  • The Listener
  • BusinessDesk

Sections

  • Latest news
  • On The Up
  • Business
  • Opinion
  • Lifestyle
  • Rural
    • All Rural
    • Dairy farming
    • Sheep & beef farming
    • Horticulture
    • Animal health
    • Rural business
    • Rural life
    • Rural technology
  • Sport
  • Property
    • All Property
    • Residential property listings

Locations

  • Far North
  • Kaitaia
  • Kaikohe
  • Bay of Islands
  • Whangārei
  • Kaipara
  • Mangawhai
  • Dargaville

Media

  • Video
  • Photo galleries
  • Today's Paper - E-Editions
  • Photo sales
  • Classifieds

Weather

  • Kaitaia
  • Whangārei
  • Dargaville

NZME Network

  • Advertise with NZME
  • OneRoof
  • Driven Car Guide
  • BusinessDesk
  • Newstalk ZB
  • Sunlive
  • ZM
  • The Hits
  • Coast
  • Radio Hauraki
  • The Alternative Commentary Collective
  • Gold
  • Flava
  • iHeart Radio
  • Hokonui
  • Radio Wanaka
  • iHeartCountry New Zealand
  • Restaurant Hub
  • NZME Events

SubscribeSign In

Advertisement
Advertise with NZME.
Home / Northern Advocate

National security defects exposed

By Peter de Graaf
Northern Advocate·
22 Aug, 2014 06:00 PM3 mins to read

Subscribe to listen

Access to Herald Premium articles require a Premium subscription. Subscribe now to listen.
Already a subscriber?  Sign in here

Listening to articles is free for open-access content—explore other articles or learn more about text-to-speech.
‌
Save

    Share this article

Author Nicky Hager's book, Dirty Politics.

Author Nicky Hager's book, Dirty Politics.

A former Whangarei Boys' High pupil who describes himself as a "hobby hacker" has exposed security flaws in the National Party's website.

Josh Brodie, formerly of Whangarei but now living in Wellington, said his discovery left Prime Minister John Key open to accusations of "throwing 'Labour left the security off' stones from within a glass house".

Dirty Politics, a book by investigative journalist Nicky Hager, said senior National Party staffer Jason Ede and blogger Cameron Slater had accessed information from a poorly secured Labour Party computer system.

Mr Key defended their actions, saying it was not hacking because the site's security had been "left off". He compared it to the All Blacks taking a peek at the Wallabies' starting line-up if they had left it unsecured on a private website. However, Mr Brodie said his investigation of political party websites had found private information on National's members-only site was also unsecured.

The security flaw, while not on the same scale as Labour leaving its donor database open, allowed anyone to view or download photos of the 600-700 party members who had added profile pictures to their online accounts.

Advertisement
Advertise with NZME.
Advertisement
Advertise with NZME.

Mr Brodie said he had alerted the party and waited until the problem had been fixed before going public via his blog. National's HQ had moved "pretty quickly", contacting him on Thursday to say the problem had been fixed. A security flaw he had pointed out earlier had also been fixed.

The "hobby hacker" had started looking into political party website security, intending to start a non-partisan conversation about web security, before the Dirty Politics revelations emerged.

In the week between his discovery and the fix, Mr Brodie said he had winced every time he heard Mr Key make a statement about Labour leaving its website open.

Advertisement
Advertise with NZME.

National Party secretary Greg Hamilton confirmed a tech blogger had identified a minor issue with the party's membership website. The party had thanked him for his advice and fixed the issue.

Mr Brodie also found serious flaws on the Conservative Party's website allowing access to anything on the party's server, "which is basically game over as far as their security goes". He had alerted the party before writing in his blog.

"Hopefully it's becoming increasingly clear that political parties need to be aware of threats not only to their website security and member privacy, but to their reputation as being managers capable of running a tight ship.

"I'm not expecting our leaders or their campaign staff to be able to fix this s*** themselves, but I am expecting those in charge to be identifying areas where their knowledge is lacking, delegating to better qualified people and getting assurance that their bases are covered."

He was not a professional security tester, merely "some random guy ... who stumbles across these things".

Save

    Share this article

Latest from Northern Advocate

Northern Advocate

'Tipping point to extinction': Orca expert fears marina fast-track application

Northern Advocate

'I didn’t have time to think': Well-known local rescues woman from rising flood

Northern Advocate

'Frankly dangerous': Gang member's alleged reckless driving near police lands him in court


Sponsored

Solar bat monitors uncover secrets of Auckland’s night sky

Advertisement
Advertise with NZME.

Latest from Northern Advocate

'Tipping point to extinction': Orca expert fears marina fast-track application
Northern Advocate

'Tipping point to extinction': Orca expert fears marina fast-track application

Dr Visser warns the marina could be the 'tipping point to extinction' for orca.

16 Jul 05:00 PM
'I didn’t have time to think': Well-known local rescues woman from rising flood
Northern Advocate

'I didn’t have time to think': Well-known local rescues woman from rising flood

16 Jul 06:00 AM
'Frankly dangerous': Gang member's alleged reckless driving near police lands him in court
Northern Advocate

'Frankly dangerous': Gang member's alleged reckless driving near police lands him in court

16 Jul 04:04 AM


Solar bat monitors uncover secrets of Auckland’s night sky
Sponsored

Solar bat monitors uncover secrets of Auckland’s night sky

06 Jul 09:47 PM
NZ Herald
  • About NZ Herald
  • Meet the journalists
  • Newsletters
  • Classifieds
  • Help & support
  • Contact us
  • House rules
  • Privacy Policy
  • Terms of use
  • Competition terms & conditions
  • Our use of AI
Subscriber Services
  • The Northern Advocate e-edition
  • Manage your print subscription
  • Manage your digital subscription
  • Subscribe to Herald Premium
  • Subscribe to the Northern Advocate
  • Gift a subscription
  • Subscriber FAQs
  • Subscription terms & conditions
  • Promotions and subscriber benefits
NZME Network
  • The Northern Advocate
  • The New Zealand Herald
  • The Northland Age
  • Waikato Herald
  • Bay of Plenty Times
  • Rotorua Daily Post
  • Hawke's Bay Today
  • Whanganui Chronicle
  • Viva
  • NZ Listener
  • Newstalk ZB
  • BusinessDesk
  • OneRoof
  • Driven Car Guide
  • iHeart Radio
  • Restaurant Hub
NZME
  • About NZME
  • NZME careers
  • Advertise with NZME
  • Digital self-service advertising
  • Book your classified ad
  • Photo sales
  • © Copyright 2025 NZME Publishing Limited
TOP