Government Representative to the Minister for Digital Transformation, Eric Khair, agrees from the outset: to face the increase
Fast Internet threats, real
Planetary harassment, He needs the cooperation of those he calls
I think the demand was already there, but this demand has been increased by the recent events we know around the vaccine passport, where an ethical hacker had difficulty communicating with the government, where it was very difficult to communicate with the government, Approves the Minister.
To facilitate philanthropic hackers who want to help strengthen the security of government information assets, Eric Khair provides them with a vulnerability reporting platform.
The Minister thus provides the interface
An offer and an official communication channel With teams from the Government Cyber Security Center (CGCD).
Invitation To hack
Ethical hackers To test the security of Quebec State’s digital services to detect vulnerabilities. In other words, the minister encourages them to hack government sites, but only if they do.
For the right reasons. In addition, those who wish can remain anonymous.
When filling out the form of disclosure on the Internet, the beneficial cyber hackers have to perform various duties including not to use the holes discovered for personal gain and not to advertise the infringement. In return, Eric Khair guarantees them immunity.
It is a formal guarantee that the government will not take any legal action, prosecute or launch an investigation against them. This is the basis of the controversy of events known to you, Vaxicode refers to the saga of the application, says the Minister.
We are committed to establishing open communication. We want to talk to them. We want to talk to them. We want to find solutions with them.
Reporting every vulnerability made at the exposure site will create an encrypted file CGCDTo allow the defect to make its own assessment.
To view the impact report site put up online by the Quebec government, Click this link (New window).
The type of action to be taken and the response time will be determined by the extent of criticism of the violation.
There are vulnerabilities in it […] Was born [mettent] Do not affect the system. However […] If it threatens personal information, it is really important and there should be an immediate reaction to it, Explains Eric Khair.
According to the Minister, Quebec is the first province in Canada to have an official interface for ethical hackers. He says the latter have been called upon to co-operate in setting up the disclosure site.