Hacker Says He Could Access 70,000 Healthcare.Gov Records In 4 Minutes

http://blogs.computerworld.com/cybercrime-and-hacking/23412/insecure-healthcaregov-allowed-hacker-access-70000-records-4-minutes

by f_salmon • 13 years ago

14 5 13 years ago

blogs.computerworld.com

sp3322• 13 years ago

Original link http://blogs.computerworld.com/cybercrime-and-hacking/23412/... Well, it's really a collection of interesting links to other sources, but at least it's useful.

Or, given the numerous vulnerabilities, perhaps a breach already has happened. These are exactly the kind of security flaws bad guys exploit in large-scale breaches.

That's exactly what I've been wondering. Hackers have certainly had enough time to get in there and look around. How much data has been taken, and where will it show up?

fournm• 13 years ago

http://boingboing.net/2014/01/21/70000-healthcare-gov-record...

Except not. This was misreported and spread like wildfire.

theboss2• 13 years ago

No....No he didn't.

https://twitter.com/HackingDave/status/425640931690565632

sp3322• 13 years ago

That says he didn't hack the site to access the data. In the video he says the information was collected using "passive reconnaissance" which means he could get the data without attacking it directly.

theboss2• 13 years ago

Yes. It does say he didn't access the data. There is a difference between passive and active attacks.

Hacker Says He Could Access 70,000 Healthcare.Gov Records In 4 Minutes

Related Stories