Hacker Says He Could Access 70,000 Healthcare.Gov Records In 4 Minutes(blogs.computerworld.com)
blogs.computerworld.com
Hacker Says He Could Access 70,000 Healthcare.Gov Records In 4 Minutes
http://blogs.computerworld.com/cybercrime-and-hacking/23412/insecure-healthcaregov-allowed-hacker-access-70000-records-4-minutes
4 comments
[deleted](1)
http://boingboing.net/2014/01/21/70000-healthcare-gov-record...
Except not. This was misreported and spread like wildfire.
Except not. This was misreported and spread like wildfire.
No....No he didn't.
https://twitter.com/HackingDave/status/425640931690565632
https://twitter.com/HackingDave/status/425640931690565632
That says he didn't hack the site to access the data. In the video he says the information was collected using "passive reconnaissance" which means he could get the data without attacking it directly.
Yes. It does say he didn't access the data. There is a difference between passive and active attacks.
Or, given the numerous vulnerabilities, perhaps a breach already has happened. These are exactly the kind of security flaws bad guys exploit in large-scale breaches.
That's exactly what I've been wondering. Hackers have certainly had enough time to get in there and look around. How much data has been taken, and where will it show up?