« Obama To Speak to Press Partisan Supporters at 2:30 Sharp | Main | Politico Magazine Offers Several Reasons Media Dropped The Ball on Vetting Obamacare, But Curiously Never Considers Pro-Obama Bias as a Factor »
December 03, 2013

Security Expert: No Security Built Into Obamcare; Flaws Are Big Enough to Permit Hackers to Use Healthcare.gov to Hack Users' Computers; Could Take a Year to Fix Even Just the High-Priority Flaws

Good God. Video at the link, and it's worth watching.

"We're talking multiple months to over a year to at least address some of the critical-to-high exposures on the website itself."

And that's just to fix the big holes in security, nevermind closing the smaller exploits.

This expert's advice? If you like your identity, you should keep your identity off Healthcare.gov. Period.

“They said they implemented over 400 bug fixes,” he said. “When you recode the application to fix these 400 bugs—they were rushing this out of the door to get the site at least so it can work a little bit—you’re introducing more security flaws as you go along with it because you don’t even check that code.”

“I’m a little bit more skeptical now, and I would still definitely advise individuals to not use the website because it’s definitely something that I don’t believe is secure and neither did the four individuals that testified in front of Congress,” Kennedy said. “I think there’s some major security concerns there around privacy and information, and they haven’t even come close to being addressed, and won’t be in the short term.”

It gets worse, actually. The expert (a white-hat hacker) notes that the federal government is not required to inform users when their security has been compromised.

“States are required to notify in the event of a breach, the federal government is not,” he added. “So in the event that Healthcare.gov gets compromised and all their information gets taken out of it they don’t have to notify anybody.”

I think we can safely predict that Obama will hide this information from the victims of his site, as he's hidden all information from "Obamacare's losers" already.

Legislation Required: The bills floating around Congress should remedy this defect and include a command that victims of security breaches be alerted, and the public generally apprised of how many breaches occur.

And throw in a criminal penalty for responsible officials should they choose to conceal such breaches.



digg this
posted by Ace at 03:46 PM

| Access Comments




Recent Comments
RoyalOil: "This should be obvious to them after all the years ..."

Mudd: ""Wonder if he likes prison food and entertainment? ..."

rhomboid: "So NC's idiot governor has to *ask* for the stupid ..."

Anon a mouse...: " Does anyone have some hopeful news?" Still no ..."

Shep!: "Not just services jobs like under the Boy-King. ..."

Your Decidedly Devious Uncle Palpatine. All Honor & Glory to Kekistan!: "768. CBD's not wronged me sufficiently to warrant ..."

Adirondack Patriot: "No art this morning? ..."

Max Power: "That was beautiful, grammie winger. ..."

FenelonSpoke: "Posted by: grammie winger - I look at the floor an ..."

ScoggDog: "[i]747 Does anyone have some hopeful news? Posted ..."

Marcus T, On a Mission. Leave a message after the beep: "Good news? GDP is about to take a huge leap and jo ..."

TheQuietMan: " I heard there was a poll taken among Republicans ..."

Recent Entries
Search


MuNuvians
Polls! Polls! Polls!
Frequently Asked Questions
The (Almost) Complete Paul Anka Integrity Kick
Top Top Tens
Greatest Hitjobs

The Ace of Spades HQ Sex-for-Money Skankathon
A D&D Guide to the Democratic Candidates
Margaret Cho: Just Not Funny
More Margaret Cho Abuse
Margaret Cho: Still Not Funny
Iraqi Prisoner Claims He Was Raped... By Woman
Wonkette Announces "Morning Zoo" Format
John Kerry's "Plan" Causes Surrender of Moqtada al-Sadr's Militia
World Muslim Leaders Apologize for Nick Berg's Beheading
Michael Moore Goes on Lunchtime Manhattan Death-Spree
Milestone: Oliver Willis Posts 400th "Fake News Article" Referencing Britney Spears
Liberal Economists Rue a "New Decade of Greed"
Artificial Insouciance: Maureen Dowd's Word Processor Revolts Against Her Numbing Imbecility
Intelligence Officials Eye Blogs for Tips
They Done Found Us Out, Cletus: Intrepid Internet Detective Figures Out Our Master Plan
Shock: Josh Marshall Almost Mentions Sarin Discovery in Iraq
Leather-Clad Biker Freaks Terrorize Australian Town
When Clinton Was President, Torture Was Cool
What Wonkette Means When She Explains What Tina Brown Means
Wonkette's Stand-Up Act
Wankette HQ Gay-Rumors Du Jour
Here's What's Bugging Me: Goose and Slider
My Own Micah Wright Style Confession of Dishonesty
Outraged "Conservatives" React to the FMA
An On-Line Impression of Dennis Miller Having Sex with a Kodiak Bear
The Story the Rightwing Media Refuses to Report!
Our Lunch with David "Glengarry Glen Ross" Mamet
The House of Love: Paul Krugman
A Michael Moore Mystery (TM)
The Dowd-O-Matic!
Liberal Consistency and Other Myths
Kepler's Laws of Liberal Media Bias
John Kerry-- The Splunge! Candidate
"Divisive" Politics & "Attacks on Patriotism" (very long)
The Donkey ("The Raven" parody)
News/Chat
Archives
Powered by
Movable Type 2.64