Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Canada's tax revenue agency tries to ToS itself out of hacking liability

riskybiznews.substack.com

Post reply on HN
Print view View original

131–140 of 192 posts

Re: Canada's tax revenue agency tries to ToS itself out of hacking liability

#131

Post by goodcanadian »

grecy wrote: post #92
cbron wrote: post #50

Earlier quoted context omitted.

Yes, but very limited. They are only allowed to ask "are you a US citizen", and walk a dog around the car. I've never had one take more than 60 seconds in either AZ or CA.

> I've never had one take more than 60 seconds In Australia I've been stopped many dozens of times for a "random breath test" where they stop every car and make you blow into the device to check blood alcohol. I've never had one take more than 30 seconds.

As a Canadian, in Australia, I was surprised by the random breath test. That is not allowed at check stops in Canada unless there is another reason to suspect you have been drinking (smell of alcohol, slurring words, that sort of thing).

Re: Canada's tax revenue agency tries to ToS itself out of hacking liability

#132

Post by dghughes »

mitthrowaway2 wrote: post #18
nayuki wrote: post #7

Also noteworthy is that compared to leading commercial websites (Amazon, Facebook, etc.), the Canada Revenue Agency website: Responds an order of magnitude slower (like 3000 ms vs. 300 ms), and has maintenance downtime hours (instead of being up 24/7). > However, the Internet is a public network and there is the remote possibility of data security violations. They conveniently ignore the fact that HTTPS is pervasive…

Revenue Canada's website is slow and often down for maintenance, but at least I find it much easier to find what I'm looking for than on Amazon. It's actually one of the better user experiences I have online, and much easier than tax filing was in the US. But that response time ensures I'll never get addicted to doom-scrolling my tax records, to be sure. By comparison with the province of BC's web services, anything…

99% of the CRA website traffic is now Mar/Apr the site is slammed by probably 20 million of the 38 million of us who adults pay taxes.

Re: Canada's tax revenue agency tries to ToS itself out of hacking liability

#133

Post by 867-5309 »

throwaway59596 wrote: post #125
epgui wrote: post #122

Earlier quoted context omitted.

That is for sure suboptimal, but it is not necessarily representative of most Canadians’ experiences.

Why does that matter? The point is that it can happen and it's normal enough that the principal just did it and the police just followed up, no questions asked no eyebrows batted. That it's hidden enough is worse, not better for Canada, if it was outrageous there would be outrage and everyone would know - but nobody cares.

to bat one's eyebrow

Re: Canada's tax revenue agency tries to ToS itself out of hacking liability

#135

Post by sekh60 »

jonahrd wrote: post #111
vkou wrote: post #90

Earlier quoted context omitted.

> Drug dogs are basically a override-the-law get you into jail free card, and any system that allows them as evidence of probable cause basically does not require probable cause. Police dogs manufacturing search warrants is more of an American problem than a Canadian problem. You might have more rights on paper in the US, but in many respects, you have more of them in practice in Canada. The letter of the law matters…

One of the biggest problems is Canada is the assumption of country wide immunity from systemic issues because "it's worse in the States". This prevents lots of real change from happening and allows lots of really bad laws to exist.

I am Canadian, living in Canada and I really hate this. We constantly compare ourselves to the States. Why can't we compare to a country more with aspiring to? Like one of the Nordics?

Re: Canada's tax revenue agency tries to ToS itself out of hacking liability

#137

Post by giancarlostoro »

This will end badly when they do get hacked and people will suffer for it. I get that you don't want to be on the ball for it, but you're better of spending on annual security audits and ensuring any raised concerns are addressed in a reasonable time frame vs getting a few lawyers together to write something that says even if we "somehow" got hacked, we will not be liable we tried not to!

Nobody expects to be hacked until it happens.

Re: Canada's tax revenue agency tries to ToS itself out of hacking liability

#138

Post by 1over137 »

goosedragons wrote: post #63
greenshackle2 wrote: post #25

Earlier quoted context omitted.

You can still mail in paper forms.

But they might still "email" any reassessment or whatever to your account if you setup paperless beforehand..

No, you don't have to have any electronic account with the CRA, you can file by paper, and they write you back by paper, and you can pay by cheque, or get your refund by cheque.

Re: Canada's tax revenue agency tries to ToS itself out of hacking liability

#140

Post by BeefWellington »

giancarlostoro wrote: post #137

This will end badly when they do get hacked and people will suffer for it. I get that you don't want to be on the ball for it, but you're better of spending on annual security audits and ensuring any raised concerns are addressed in a reasonable time frame vs getting a few lawyers together to write something that says even if we "somehow" got hacked, we will not be liable we tried not to! Nobody expects to be hacked…

Oftentimes it's not even a hack. Many years ago the national student loan lender in Canada lost a hard drive containing seven years' loan details, leading to a class action suit.[1]

[1]: https://www.canada.ca/en/employment-social-development/progr...

Post reply on HN