Comments

You have commented 339 times on Rantburg.

Your Name

Your e-mail (optional)

Website (optional)

	My Original Nic Pic-a-Nic Sorry. Comments have been closed on this article.
Foto

Submit your comments on this article

Science & Technology

ObamaCare - aka - Identity Thieves Full Employment Act

2013-12-04

Expert: Healthcare.gov Security Risks Even Worse After 'Fix'

Health and Human Services (HHS) released a progress report on Sunday following its self-imposed Nov. 30 deadline to repair the website, saying that the "team has knocked more than 400 bug fixes and software improvements off the punch list."

The administration said that the "site capacity is stable at its intended level," though the site continued to crash on Monday. The eight-page report made no mention of the website's numerous security flaws, which experts say put Americans' personal information at risk.

"It doesn't appear that any security fixes were done at all," David Kennedy, CEO of the online security firm TrustedSec, told the Washington Free Beacon.

Kennedy said fundamental safeguards missing from Healthcare.gov that were identified by his company more than a month ago have yet to be put in place.

"There are a number of security concerns already with the website, and that's without even actually hacking the site, that's just a purely passive analysis of [it]," he said. "We found a number of critical exposures that were around sensitive information, the ability to hack into the site, things like that. We reported those issues and none of those appear to have been addressed at all."

After warning Americans when testifying before Congress on Nov. 19 to stay away from Healthcare.gov, Kennedy now says the situation is even worse.

Posted by:GolfBravoUSMC

#6 Obama will pass a Executive Order exempting Healthcare.gov from HIPAA law.

Posted by: GolfBravoUSMC 2013-12-04 19:16

#5 HIPAA Law
from HHS.GOV

Data Safeguards.
A covered entity must maintain reasonable and appropriate administrative, technical, and physical safeguards to prevent intentional or unintentional use or disclosure of protected health information in violation of the Privacy Rule and to limit its incidental use and disclosure pursuant to otherwise permitted or required use or disclosure.70 For example, such safeguards might include shredding documents containing protected health information before discarding them, securing medical records with lock and key or pass code, and limiting access to keys or pass codes. See additional guidance on Incidental Uses and Disclosures.

Posted by: swksvolFF 2013-12-04 13:43

#4 Nah, all the folks signing up are too poor to have credit cards. Just Obamaphones and EBT cards.

Posted by: Bobby 2013-12-04 13:42

#3 Wouldn't it just be quicker and easier for the people "signing up to just go downtown and hand out their credit cards, checkbook, etc., to whatever stranger walks by?

Sure, they'll probably have all their personal information stolen and their credit rating ruined (presuming they even have one), and they won't actually have real health insurance, but that's what's going to happen anyway if they actually sign up at the website, isn't it?

Posted by: Barbara 2013-12-04 13:36

#2 "There are a number of security concerns already with the website, and that's without even actually hacking the site, that's just a purely passive analysis of [it]," he said. "We found a number of critical exposures that were around sensitive information, the ability to hack into the site, things like that. We reported those issues and none of those appear to have been addressed at all."

John 8:32 "Then you will know the truth, and the truth will set you free"

Posted by: Black Charlie B. Hayes 2013-12-04 08:51

#1 The eight-page report made no mention of the website's numerous security flaws, which experts say put Americans' personal information at risk.

The Info-Security of college transcripts, US Passports, associates, financial data, and travel of Indonesian and Kenyan Muslim foreign students must come first. Must I call the White House to sort this out?

Posted by: Uncle Onyango 2013-12-04 05:13

00:00