Online payroll site PayMaxx took down its automated W-2 site last week when it was revealed that anyone, given one user's ID code, could easily get other users' records, just by adding one to the known ID number. The company's initial reaction was to claim that, "no system is 100 percent secure from a sophisticated and determined hacker." And you do have to be pretty sophisticated to add one, after all. This comes on the heels of the related story about ChoicePoint getting hacked -- not by malicious computer wonks, but by social engineers. So for our small business readers out there, a plea: Invest all you want in security systems, but don't forget, carelessness trumps technology every time.
From my "Business Buzz" on CNET.com - work.cnet.com.