HealthCare.gov is making me sick

I have never been a big supporter of ObamaCare because I feel it harms more Americans than it helps. It not only limits the amount of coverage you can get it is causing insurance rates to soar because the subsidies it offers are almost impossible to qualify for. The website designed to make signing up for insurance is one of the greatest disasters of the program. Not only is it making hard for people to sign up it is a hackers dream site. With its poor security standards some IT security experts are calling it "a breach waiting to happen."

David Kennedy, CEO of TrustedSec is testifying in front of Congress about the dangers related to HealthCare.gov. This is his second time in front of Congress talking about the same subject. Last year a number of vulnerabilities were identified and as of today only have of them have been fixed. If that isn't bad enough 20 additional vulnerabilities have been discovered. The only good news for the website is Kennedy formed his opinion based on his experiences working with other companies, and not through an actual hacking attempt.

This doesn't give the website a free pass though. Kennedy asked 7 other IT security professionals to review how work and provide their opinions. "The results were unanimous and unified--it's bad."healthcare.gov-security-a-breach-waiting-to-happen/ Other statements ranged from "I can tell you: this is a breach waiting to happen" to "perhaps a breach already has happened."

Some reasons for the lack of security has been blamed on poor security testing, training, and not following basic IT change management practices.

The security experts are recommending a comprehensive security assessment of the entire website. The assessment is needed to identify where resources need to focused. Of course the website developers have a team trying to counter these revelations. Their main advocate is Lunarline CEO Waylon Krush. Krush who has worked in security roles for the Department of Health and Human Services questions Kennedy's findings even though he has admittedly not reviewed them personally.

Man this really boosts my confidence! This whole undertaking is proving to be another colossal waste of taxpayer money by another subpar administration. It's time to throw the towel in on this fiasco.


http://news.cnet.com/8301-1009_3-57617335-83/healthcare.gov-security-a-breach-waiting-to-happen/