網頁

2023-03-23

「我大姐是中央銀行退休」 典型認知作戰—訴諸無法驗證的權威

【縛雞之論】英文拷到 G / D 找中文翻譯
The rumor that the "registered personal information for tax refund for NTD 6,000.- will be stolen and sold out" has been quickly refuted by the Ministry of Digital Affairs, or MDA, which is commendable. The first sentence of the rumor, "My elder sister is retired from the Central Bank," is a typical cognitive warfare tactic, appealing to an "unverifiable authority."
Based on events in recent years, data stored by government agencies, including the digital collection of the National Palace Museum, have been subject to leaks. Therefore, the public's concerns are not without reason.
Although the MDA responded quickly, its refutability was weak and irrelevant - it did not address the core of the rumor itself. The Ministry relied on self-regulation, such as emphasizing that the personal data would be "deleted" and "strictly protected" only for this specific case. However, such statements are ineffective. The previous government data breach cases were from hacking, theft by staff or information companies, theft by enemy national security departments, and even bizarre unverifiable losses that scare the people.
Ironically, the most effective refutability from the MDA was "it's not the first time using IC National Health Insurance Idenfication Card" rather than their other statements. However, the issue that MDA needs to explain in detail is the external supervision mechanism and civil action against public officials and companies following data breaches.
Finally, since the IC health insurance card has already been widely used to confirm identity several times, why delay the implementation of the IC identity card directly?

所謂「登記入帳個資」會被販賣的謠言,數位部出面反駁,速度很快,值得讚許。謠言的第一句「我大姐是中央銀行退休」,就是典型的認知作戰,訴諸「無法驗證的權威」。
根據這些年來的事件,政府部門保管的數據資料,甚至包括故宮數位典藏,都會外洩。因此民眾的憂心不是沒有道理。
數位部的澄清雖然快卻無效—並非針對謠言本身。數位部澄清「僅限此次」、「由嚴格保護機制」、「資料會刪除」等,訴諸自律,無效。政府資料外洩事件的原因為:被駭客盜取、被承辦人或資訊公司盜賣、被敵人國安部門竊取,以及最離奇的無從查證的遺失等。
數位部比較有效澄清的反而是「又不是第一次」;而最該澄清的是:外部監督機制以及外洩後對於公務員、公司進行民事求償
最後,既然IC健保卡已經被廣泛用來確定身分,那我們延遲推行IC身分證的道理何在?

登記入帳個資外洩是謠言!數位部:資料明年2月底前全刪除    自由 20230323

普發現金「登記入帳」開跑第2天,LINE群組已開始轉傳資料會被販賣的謠言。數位部強調,民眾上網登記的資料,僅限本次發放資料檢核使用,數位部設計有嚴密的資料保護機制;且在普發現金專案執行結束後1個月、預計明年2月底前,蒐集到的相關個人資料即會刪除,絕不保存。

近日LINE群組出現謠言指稱:「我大姐是中央銀行退休,她剛看了一下,上網登記除要身份證號碼,還要健保卡號,健保卡號很少會要求提供,被洩漏機會相對少,但這次登記要1次完整的登入雙證件的號碼有點讓人擔憂,連同銀行帳號一併洩漏後果可怕!」

訊息還強調:「最重要是這次領款的系統是1次性的,用完沒人維護,資料肯定被賣。所以建議不要去登記,領現較安全。」

此次謠言主張有兩大疑慮:登記入帳須提供健保卡號、登記系統是1次性的,恐怕會有資料外洩疑慮。不過這兩點都有爭議,第1,關於健保卡號,數位部表示,這並非第1次搭配健保卡卡號協助辨識身分,像是「1922疫苗預約平台」、「孩童防疫家庭補貼」、使用手機申報綜所稅,都需要輸入健保卡號。

至於為何需要提供健保卡號?數位部解釋,如同辦電信門號帶雙證件的道理,是為了防止有心人士偽冒他人證件號碼而盜領款項。登記入帳官網會檢核民眾輸入的健保卡號與身分證字號之匹配性,若兩個證件號碼非屬同一人,6000官網會拒絕將資料登載,保護民眾申領6000權益。

2,關於1次性系統,據了解,該登記系統並非1次性,而是從去年「振興五倍券」及「孩童家庭防疫補貼」的資訊系統為基礎,擴充而來,未來若有類似政策也不排除會繼續使用。

數位部表示,登記系統設計有嚴密的資料保護機制:包括資料傳輸全程加密、使用資料必須獲得授權、資料存放以加密方式儲存等,請民眾安心。


沒有留言:

張貼留言

請網友務必留下一致且可辨識的稱謂
顧及閱讀舒適性,段與段間請空一行