Post by Sailor on Dec 3, 2013 16:13:08 GMT -8
No security ever built into Obamacare site: Hacker
It could take a year to secure the risk of "high exposures" of personal information on the federal Obamacare online exchange, a cybersecurity expert told CNBC on Monday.
"When you develop a website, you develop it with security in mind. And it doesn't appear to have happened this time," said David Kennedy, a so-called "white hat" hacker who tests online security by breaching websites. He testified on Capitol Hill about the flaws of HealthCare.gov last week.
"It's really hard to go back and fix the security around it because security wasn't built into it," said Kennedy, chief executive of TrustedSec. "We're talking multiple months to over a year to at least address some of the critical-to-high exposures on the website itself."
Much more here:
www.cnbc.com/id/101225308
Obviously if you don't absolutely HAVE to go to this site ... DON'T. That's the advice of several "white hat hackers" I've heard over the last couple of days after they've had a look at how the site works without actually trying to break it or break into it. Mr Kennedy was one of those whose interview I heard this afternoon.
On top of every other problem with it, if this site is as vulnerable as they say then it may be in violation of the federal HIPAA law which is intended to safeguard patient information. I'm subject to it since I work in the healthcare field, violations can bring down all kinds of nasty repercussions including fines and jail depending the severity and nature of the offense.
It could take a year to secure the risk of "high exposures" of personal information on the federal Obamacare online exchange, a cybersecurity expert told CNBC on Monday.
"When you develop a website, you develop it with security in mind. And it doesn't appear to have happened this time," said David Kennedy, a so-called "white hat" hacker who tests online security by breaching websites. He testified on Capitol Hill about the flaws of HealthCare.gov last week.
"It's really hard to go back and fix the security around it because security wasn't built into it," said Kennedy, chief executive of TrustedSec. "We're talking multiple months to over a year to at least address some of the critical-to-high exposures on the website itself."
Much more here:
www.cnbc.com/id/101225308
Obviously if you don't absolutely HAVE to go to this site ... DON'T. That's the advice of several "white hat hackers" I've heard over the last couple of days after they've had a look at how the site works without actually trying to break it or break into it. Mr Kennedy was one of those whose interview I heard this afternoon.
On top of every other problem with it, if this site is as vulnerable as they say then it may be in violation of the federal HIPAA law which is intended to safeguard patient information. I'm subject to it since I work in the healthcare field, violations can bring down all kinds of nasty repercussions including fines and jail depending the severity and nature of the offense.
