Sanjib Mitra, an Indian blogger based in Bangalore, has just recently exposed the bugs in the UK visa application website. The bug was recently found by the enthusiastic techie while filing an application for a friend and he found out a way to view the personal details of more than 50,000 applicants who have filed an application form for a UK visa through the website.
VFS is the private undertaking that operates the 11 visa application centers across the country. It was in August 2005 that the website began accepting online visa applications.
Deepti Soni, attached to the press office of the British High Commission in New Delhi confirmed the same by saying:
“We have stopped accepting online applications for visas after security concerns were brought into our notice. Until further notice, applicants can approach our centers for visa assistance.”
Below, the UK VFS visa website shows that they are under upgradation and will be resuming to accept applications for UK visas shortly.
(Screenshot of unavailable Visa site given below)
Meanwhile Sanjay Pandey, a former IPS officer and an e-security expert says:
“Had such a lapse taken place in the US or any other Western country, it would have resulted in heavy punishment. It is shocking and sad. People whose personal details were exposed perhaps do not even know about it. This can have serious implications, even years from now. We need to have privacy laws in place,”
Meanwhile, Sanjib Mitra has a blog as well and has deeply expressed his concerns about the lapse. However, this is not the first time that he saw lapses and loopholes on the website. Sanjib says:
“In December 2005, while filling an application online, I found the details of other applicants could be easily viewed. I immediately wrote to the British High Commission and the VFS informing them, but nothing happened. I just received an acknowledgement from the High Commission after two months,”
Earlier, Sanjib had even reported about the security lapses of the VFS website in the year 2005 but nothing concrete was done at that point of time. The current investigator L M Costelloe Baker has currently taken the same into account.
People like Sanjib Mitra are making a mark by encouraging others to upgrade the security of their websites and have become a motivation to the young Indian techies and non-techies alike to prevent web based threats. Imagine the possible situation that would take place if a terrorists hacker hacks out the UK visa website which is filled with financial history, personal details and other very confidential information. Great work, Sanjib!!!
VFS Global has long crossed 11 offices.
VFS today serves the interest of the diplomatic missions of 18 governments in 37 countries worldwide. The company processes over three and a half million visa applications (contracted) annually and operates out of 235 offices located in Asia, Africa, Middle East and Europe.