Security concerns have developed with a state website.
Both the TopekaCapital-Journal and Wichita Eagle say The iKan vehicle registration renewal site has issues because one person can look up another person’s registration information simply by entering personal identification numbers that are slightly different than their own.
Once a PIN is entered, the website will pull up a vehicle plate number, plate type, amount owed and due date. If the information is confirmed as correct once, a registrant’s insurance company and policy number is displayed. If confirmed a second time, the website asks if you want to buy a Wildlife and Parks pass along with the registration renewal and whether you want to add contact information.
Part of the problem may lie in the PINs themselves, which appear to be sequential as opposed to randomly-generated.
State officials are investigating. Officials want to expand IKan to include vital records and voter registration information later.
