Connect with us

Singapore

Reddit post claims MOE warned of Mobile Guardian vulnerability 2 months before hack

Following a recent hack of MOE’s Mobile Guardian app affecting 13,000 students, a Redditor revealed that he had alerted MOE to security vulnerabilities two months ago. He expressed disappointment over MOE’s lack of action despite multiple emails. Gutzy has contacted MOE and Minister Chan Chun Sing for comments.

Published

on

SINGAPORE: Following a recent hack of the Ministry of Education (MOE)’s Mobile Guardian app, which affected 13,000 students, a Redditor revealed on social media that he had emailed MOE about potential security vulnerabilities as early as two months ago.

In a Reddit post dated August 5, the user shared the content of the email, noting his long-standing awareness of the app’s security issues and the potential consequences.

“So many emails to Mobile Guardian and MOE later, it is disappointing for me to find out that everything I did was for nothing. It still took MOE an actual cybersecurity breach to learn their lesson,” the user wrote.

The user expressed a desire to raise awareness about the issue by sharing his correspondence with MOE.

“Hopefully, this will allow us to take similar incidents more seriously in future.”

Gutzy has reached out to MOE and Mr Chan Chun Sing, Minister of Education for their response regarding this claim and will include their response if received.

Redditor alerts critical vulnerability in the Mobile Guardian App

In the email shared by Reddit user “Hopeful_Chocolate080,” the Redditor described a critical vulnerability in the Mobile Guardian app, which was sent to MOE in late May.

The email highlighted that the vulnerability involved improper access control, allowing unauthorized read and modification of all data within the Mobile Guardian system. The Redditor noted that this flaw could be exploited in under three minutes.

The Redditor suspected that this portal was Mobile Guardian’s internal management system, which, contrary to the information published by MOE, provided full read-and-write access to all schools and users.

This included the ability to impersonate users, meaning an attacker could perform any action that school admins could, such as resetting personal learning devices.

The Redditor emphasized that this was a trivial vulnerability, likely indicative of other similar issues.

The email urged MOE to reconsider Mobile Guardian as a vendor for DMA services, questioning the security and management of sensitive data by foreign companies under contractual obligations.

 

In an email dated 6 June, the Redditor received a brief reply from MOE, stating that they had raised the issue with Mobile Guardian and were reassessing their cybersecurity posture.

 

About three weeks later, the Redditor had to write to MOE again to request an update. In their response, MOE stated that they had reviewed the vulnerability report and “confirmed that it is no longer a concern.”

“However, we take data protection seriously and appreciate all vulnerability disclosures. ”

“Due to commercial sensitivity, we are unable to share information about our future engagements with Mobile Guardian. We appreciate your understanding. ”

r/singapore - Proof of Correspondence with MOE Regarding Mobile Guardian Vulnerability

r/singapore - Proof of Correspondence with MOE Regarding Mobile Guardian Vulnerability

Recently, following the loss of internet access issue involving the Mobile Guardian app, the Redditor sent another email to the MOE Minister.

The Redditor reiterated his belief that Mobile Guardian should be removed immediately to prevent further damage, even if no replacement is available at present.

The Redditor expressed pessimism about the situation, noting that he had not yet received a reply from MOE and doubted his efforts contributed to the app’s removal.

He also voiced disappointment over the cybersecurity breach on 4 August, criticizing it as a demonstration of Singapore’s digital defence failure.

“It is ridiculous how so many students on the ground knew about the vulnerability and tried to alert the authorities, but nobody took it seriously.”

“I cannot help but to be reminded of the attempted assassination of Donald Trump — there is just so much similarity between the two incidents. We have got to do much better than this, Singapore.”

I alerted MOE of an impending cybersecurity attack on Mobile Guardian two months ago
byu/Hopeful_Chocolate080 inSGExams

MOE awarded tender to Mobile Guardian in 2020

Developed by a South African firm, Mobile Guardian, a device management app (DMA), restricts users’ access to apps and websites on smartphones, tablets, and laptops.

In 2020, MOE awarded a tender to Mobile Guardian, which holds the ISO27001 certification, an international standard for information security management systems.

In April, a data leak exposed the names and email addresses of parents and teachers from several Singaporean schools.

Following the breach, MOE pledged to collaborate with cybersecurity experts to prevent future incidents.

However, the recent breach has sparked concerns about the effectiveness of these measures and the continued vulnerability of students’ personal learning devices.

Minister for Education Chan Chun Sing addressed Parliament, stating, “Mobile Guardian assessed that the compromised support account was primarily due to poor password management practices, not the result of an unauthorized individual exploiting vulnerabilities in their systems.”

Mr Chan emphasized MOE’s serious view of the incident, noting that IT service providers are contractually obligated to protect personal data.

“MOE has registered our deep dissatisfaction with Mobile Guardian over this incident. ”

“We have asked them to appoint a forensic investigator to evaluate their systems and processes and provide recommendations to prevent recurrence. Investigations are ongoing, and appropriate actions will be taken should there be breaches of contractual obligations,” he stated in May.

Despite Mr Chan’s assurances, the recent hack of Mobile Guardian raises questions about the pledges made by him and the ministry.

This is particularly concerning in light of claims made by the Reddit user, who alleged that MOE was warned about vulnerabilities in the app months before the current hack.

This post was first published on Gutzy.asia

Continue Reading
Click to comment
Subscribe
Notify of
0 Comments
Newest
Oldest Most Voted
Inline Feedbacks
View all comments

Comments

Redditors question support for PAP over perceived arrogance and authoritarian attitude

Despite Senior Minister Lee Hsien Loong’s warning that slimmer electoral margins would limit the government’s political space “to do the right things”, many Redditors questioned their support for the ruling PAP, criticising its perceived arrogance. They argued that SM Lee’s remarks show the party has ‘lost its ways’ and acts as if it alone can determine what is right. Others noted that the PAP’s supermajority allows for the passage of unfavourable policies without adequate scrutiny.

Published

on

In a recent speech, Senior Minister Lee Hsien Loong warned that “if electoral margins get slimmer, the government will have less political space to do the right things.”

Mr Lee, who served as Prime Minister for 20 years, highlighted the risks associated with increasingly competitive politics.

“It will become harder to disregard short-term considerations in decision-making. The political dynamics will become very different,” he stated during his speech at the Annual Public Service Leadership Ceremony 2024 on 17 September.

“Singaporeans must understand the dangers this creates, and so must the public service,” SM Lee stressed.

SM Lee pointed out that Singapore faces formidable internal and external challenges in the years ahead, with rising expectations and demands from citizens.

As growth becomes harder to achieve and politics becomes more fiercely contested, he warned, “Things can go wrong for Singapore too.”

He urged vigilance in preparing for an uncertain future, noting, “As the world changes, and as the generations change, we must do our best to renew our system – to ensure that it continues to work well for us, even as things change.”

Critique of PAP’s Arrogance and Disconnect from Singaporeans

The People’s Action Party (PAP) experienced a notable decline in its vote share during the 2020 General Election, securing 61.24% of the votes and winning 83 out of 93 seats, a drop from 69.9% in 2015.

A significant loss was in Sengkang GRC, where the PAP team, led by former Minister Ng Chee Meng, was defeated by the Workers’ Party (WP).

In discussions on Reddit, some users questioned why they should support the ruling PAP, criticising the party’s perceived arrogance.

They pointed out that SM Lee’s recent remarks illustrate that the party has strayed from effectively serving Singaporeans and seems to believe it has the sole authority to decide what is right.

Others highlighted that the PAP’s super-majority in Parliament enables the passage of unfavourable policies without sufficient scrutiny.

One comment acknowledged that while many older Singaporeans remain loyal to the PAP due to its past achievements, younger generations feel the party has failed to deliver similar results.

There is significant frustration that essentials like housing and the cost of living have become less affordable compared to previous generations.

The comment emphasised the importance of the 2011 election results, which they believe compelled the PAP to reassess its policies, especially concerning foreign labor and job security.

He suggested that to retain voter support, the PAP must continue to ensure a good material standard of living.

“Then, I ask you, vote PAP for what? They deserve to lose a supermajority. Or else why would they continue to deliver the same promises they delivered to our parents? What else would get a bunch of clueless bureaucrats to recognise their problems?”

Emphasising Government Accountability to the Public

Another Redditor argued that it is the government’s responsibility to be accountable to the people.

He further challenged SM Lee’s assertion about having less political space to do the right things, questioning his authority to define what is “right” for Singapore.

The comment criticised initiatives like the Founder’s Memorial and the NS Square, suggesting they may serve to boost the egos of a few rather than benefit the broader population. The Redditor also questioned the justification for GST hikes amid rising living costs.

“Policies should always be enacted to the benefit of the people, and it should always be the people who decide what is the best course of action for our country. No one should decide that other than us.”

The comment called for an end to narratives that present the PAP as the only party capable of rescuing Singapore from crises, stating that the country has moved past the existential challenges of its founding era and that innovative ideas can come from beyond a single political party.

Another comment echoed this sentiment, noting that by stating this, SM Lee seemingly expects Singaporeans to accept the PAP’s assumption that they—and by extension, the government and public service—will generally do the “right things.”

“What is conveniently overlooked is that the point of having elections is to have us examine for ourselves if we accept that very premise, and vote accordingly.”

A comment further argued that simply losing a supermajority does not equate to a lack of political space for the government to make the right decisions.

The Redditor express frustration with SM Lee’s rhetoric, suggesting that he is manipulating public perception to justify arbitrary changes to the constitution.

Concerns Over PAP’s Supermajority in Parliament

Another comment pointed out that the PAP’s supermajority in Parliament enables the passage of questionable and controversial policies, bypassing robust debate and discussion.

The comment highlighted the contentious constitutional amendments made in late 2016, which reserved the elected presidency for candidates from a specific racial group if no president from that group had served in the previous five terms.

A comment highlighted the contrast: in the past, the PAP enjoyed a wide electoral margin because citizens believed they governed effectively. Now, the PAP claims that without a substantial electoral margin, they cannot govern well.

Continue Reading

Community

Fire at train depot causes second Circle Line disruption in two days

Circle Line services in Singapore were disrupted for the second time in two days after a fire broke out at Kim Chuan Depot on 18 September. The fire, which caused a power trip, was extinguished quickly, with normal services resuming shortly after.

Published

on

SINGAPORE: A fire at the Kim Chuan Depot on Wednesday (18 September) caused a brief disruption to Circle Line services, marking the second consecutive day of interruptions on the line.

The fire, which broke out around 8pm in one of the power system cubicles, resulted in a power trip that halted train services for approximately 15 minutes.

A netizen posted in the Facebook group Complaint Singapore, reporting the latest disruption.

According to SMRT, the transport operator, the incident caused several trains to stall, and lighting within the affected trains was briefly impacted.

Engineers at the depot quickly extinguished the fire, and the Singapore Civil Defence Force was activated to assist.

Power was restored by 8.10pm, and normal train services resumed five minutes later at around 8.15pm.

“We appreciate all commuters’ patience and apologise for the longer commutes over the past two evenings,” SMRT said in a statement posted on Facebook, explaining the swift restoration of services after the fire was contained.

In response to the incident on SMRT’s Facebook page, some commuters expressed frustration, noting that the disruptions were happening just before a planned fare increase.

Others raised concerns about the reliability and safety of train services.

Several also criticised SMRT for poor communication during the disruptions, highlighting issues with announcements and equipment at certain stations.

They urged the operator to make improvements before the fare hike takes effect.

The incident followed a major disruption the previous day, when a power fault at 5.50pm on 17 September halted Circle Line services for nearly two hours during the evening peak period.

Eleven trains were stalled inside tunnels for 15 minutes, leaving passengers without air-conditioning.

However, onboard batteries provided partial lighting and ventilation during the outage.

SMRT gradually resumed services, with normal operations restored by 7.40pm.

In a statement on Wednesday morning, SMRT said that staff worked through the night to diagnose the cause of Tuesday’s fault and ensure that all systems were fully operational.

Continue Reading

Trending