The individual get-hacked mandate
Some things about Obamacare’s website seem to move quickly – such as how long it takes to access someone else’s information. Report in Gizmodo:
“David Kennedy, a white hat hacker and TrustedSec CEO, has been warning anyone who would listen since November that the flawed government website was highly insecure. Now, after using passive reconnaissance, ‘which allowed [him to query and look at how the website operates and performs,’ Kennedy revealed that he was able to access 70,000 records in under four minutes, granting him access to information such as names, social security numbers, email addresses, and home addresses just to name a few. What's more, he didn't even technically have to hack into the website at all.”
He explained to Fox News how it works:
“ ‘Think of it this way,’ he suggested. ‘Think of something where you have a car and the car doors are open and the windows are open — you can see inside of it. That’s basically what they allow you to do and there’s no real sophistication level here — it’s just really wide open. So there’s no hacking actually involved.’ ”
Many more details from his November testimony before the House here.
Is it possible that routinely disparaging the things private companies do – such as conducting e-commerce – might have led the administration to badly underestimate how big a job it is to launch a website?