Zombie country: the IRS server farm

You think the tax folks are scary? This is scarier:

The US Internal Revenue Service is putting tax payers at risk by operating thousands of web servers that contain security vulnerabilities or have not received proper authorization, a new report has concluded.

According to the Treasury Inspector for the Tax Administration — a Treasury Department watchdog — the IRS operates 2,093 web servers with at least one vulnerability. It said 540 of those servers contained one or more vulnerabilities rated high risk. The report identified 1,811 internal servers that had not been approved to connect to the network. Some 1,150 of those were being used for non-business purposes.