Hacker News Reader

Comment by hnick | Hacker News Reader

I ran into a bug like this in Australia's MyGov system.

I would log in to the main page where we can view government services. Then I would click through to the ATO (our IRS) to see some statements or whatever. I would then close the window and log out in MyGov then log back in with my wife's account. Click through to the ATO would show my details instead of hers. IIRC logging out wouldn't work either since that would mess up the session, I'd have to come back later.

Couldn't find anywhere to report this so I ignored it. I think they fixed it now.

View on HN

Not the first time they've ignored issues in myGov. This guy tried endlessly to contact them about a XSS vulnerability to deaf ears:

https://www.smh.com.au/technology/revealed-serious-flaws-in-...

You've got understand that the orgs involved in myGov, such as Centrelink, Medicare, and the ATO are special bad. They're dysfunctional to a degree most people simply cannot believe.

I was at Centrelink's IT department for just a couple months, and that was the only time in my decades-long consulting career that I had seen an adult man cry. Not for personal reasons. Work-related reasons. Several men, on multiple occassions, for different reasons.

That place crushed their spirits, and the tears just had to come out...

I have known a few people working in IT in government in Australia and it sounds like absolute hell. It takes a special kind of person to work in government. You either have to be extremely incompetent to the point you cant even tell that things around you are a disaster, or you have to not give a shit to the point where waiting a month for someone to press a button does not bother you and you are only focused on what you will be doing when you get home at the end of the day.

This one guy I knew told me that he had seen meetings dedicated to working out how they could spend money since they hadn't spent the whole budget yet. Services run over hundreds of servers when it could be done in one just to keep the whole team of system admins employed.

Government departments are filled with bloat to a level you wouldn't believe.

> meetings dedicated to working out how they could spend money since they hadn't spent the whole budget yet

I think this is fairly common in government outside of Australia as well. With the budget it’s use it or lose it, so you better find ways to spend it, or you’ll have less margin next year when you might actually need it.

I know about this - it’s actually worse and very serious if you underspend.

Almost all the higher ups are paid out of budgets based on how much you spend- so the supervising agency gets their 15 percent admin fee, your managers are part of the indirect cost pool etc.

If you spend 50% of budget it is game over upstairs. And you lose the money at year end, and future allocation is dropped. And all the budgets in long chain up get messed up. Almost nothing gets more attention and priority than this.

I should have said that I don't blame any individual dev or sysadmin for failing to respond. It's a deeply entrenched organisational issue.

Imagine fixing an issue on a Model 204 mainframe, with a perpetually dwindling number of people you can rely on for help, knowing that if you don't fix it, people don't get their welfare cheque.

High stress, low reward. Unsung heroes in my books.

> people don't get their welfare cheque.

A "fun" anecdote I heard was that every 1 day of outage of Centrelink's mainframe would result in 5-7 children with broken bones.

You see, some alcoholic high-strung fathers in rural communities were spending their welfare cheques mostly at the local bottleshop. If the cheques stopped, their booze supply stopped, and their withdrawal symptoms would send them into mad rage. All too often, they'd take it out on their kids.

Apparently someone at Centrelink was tracking this kind of stuff by gathering paediatric admissions data from hospitals.

While I was there they had a 3-day outage that everyone just laughed off. You do the maths.

Terrifying

Reply on news.ycombinator.com