Preventative Treatment For Heartbleed On Healthcare.gov
As the San Francisco Chronicle reports, "People who have accounts on the enrollment website for President Barack Obama's signature health care law are being told to change their passwords following an administration-wide review of the government's vulnerability to the confounding Heartbleed Internet security flaw." Take note, though; the article goes on to immediately point out this does not mean that the HealthCare.gov site has been compromised: "Senior administration officials said there is no indication that the HealthCare.gov site has been compromised and the action is being taken out of an abundance of caution. The government's Heartbleed review is ongoing, the officials said, and users of other websites may also be told to change their passwords in the coming days, including those with accounts on the popular WhiteHouse.gov petitions page."
Also at The Verge
we bleed hearts..
"no indication ... site has been compromised"
I believe them.
What possible motive would a hacker have for targeting a site containing social security, tax, medical, personal, and financial information?
I'm sure it's all perfectly secure.
Just in case, though, you should probably change your one-factor authentication token so that the next time your "keep me logged in" cookie expires, it's hard to remember.
The word you are looking for is "preventive".
Sorry, heartbleed is actually a pre-existing condition so it's not covered.
Leads to an honest question that cropped up... does the federal government have to abide by any sort of data-breach reporting laws (be they state or federal)?
(maybe they have their own, maybe they're exempt... I'm not a lawyer, but it'd be worth looking up...)
Quo usque tandem abutere, Nimbus, patientia nostra?
I have no love for Healthcare.gov, but honestly just about every site is sending out notices that people may want to change passwords. Heck, Yahoo *made* me change my password.
Like everyone else they don't know if anything was taken. And frankly, Heatbleed is probably the least of the security issues Healthcare.gov has... I'd be way more worried about backbend systems, and then it doesn't matter what your password is.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
This is completely absurd. They have to know right away whether or not their website logins were vulnerable (that is, were they running OpenSSL with the bug) or whether they were running other versions of SSL without heartbleed. It's a black and white situation. There's no gray middle ground.
FISMA/SCAP regulations are the main ones. Data stored there is likely SBU (sensitive but unclassified.)
It is a pretty thorough set of regulations. This is why not many cloud providers (if any!) are FISMA compliant, as it requires random audits by the government.
I'd love to see a standard in the private industry that had planned and random audits of security, with actual consequences (PCI-DSS3 comes close), but most security in the private sector seems to be "does the vendor say it is secure? OK, it is."
Nobody can type "yum update openssl"?
The word you are looking for is "preventive".
No, it's not. The usage you're complaining about is perfectly valid.
"Preventative" has been in use since 1666 as an alternate pronunciation and spelling for "preventive".
In some regions (including where I grew up - almost in the center of the region natively speaking the "radio accent", which has been the de facto standard speech for the U.S. since the advent of commercial broadcasting) it is the preferred form.
If you want to be a spelling NAZI, you should avoid being provincial about it. Check the online dictionaries before correcting others, to distinguish between being helpful and imposing your local speech on others.
Unlike French ("a dead language spoken by millions"), American English does not have a regulatory body prescribing an official standard (though some educators have tried, since at least Daniel Webster). It grows and changes by usage. Dictionaries play a game of catch up and try to document how it's realy used.
(Yes, I know how it grates on your nerves when someone uses a different spelling or pronunciation than you're used to. I feel the same way when my wife pronounces "legacy" as if she was talking about a ledge. But apparently that's actually the first pronunciation listed in The Oxford.)
Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
They traditionally haven't paid much attention to the law, so I'm not certain that they would do much different here.
Because with Heartbleed being introduced early 2012, long before that website launched, it would have been one hell of a pre-existing condition. :P
nor at understanding the CBO, are you?
First, let me explain something about the CBO: The CBO is an accounting organization (NOT a true policy analysis organization) that serves the congress by running whatever numbers the congress asks it to run. In other words, if a member of congress asks for a report that says "Assuming I have a warp drive that can propel any mass through space for free at up to 10 times lightspeed, and assuming Jupiter has a solid surface at a height above the planet's core where 1G would be felt, how much will it cost to colonize Jupiter?" The CBO would dutifully calculate costs and project timetables for the endeavor WITHOUT ANY REGARD for whether the specifics I have provided as a "given" are, in fact correct. Citing the resulting CBO report would then look GREAT on a website but would be sheer insanity. The CBO does not question the presuppositions the congress members give it, as a matter of policy, in order to avoid becoming a partisan entity within a political fight - i.e. they'll generate good results based on good assumptions, or a mathematically-solid pile of crap based upon piles of pre-supposed crap, on a bi-partisan and equal-opportunity basis. CBO analysis is almost always wrong (because politicians always feed it rosy scenarios for policies they like and dismal scenarios for policies they hate). For those engineers reading this: CBO numbers should be take as "figures of merit" which may be used to compare competing policy ideas WHEN THOSE IDEAS COME WITH MATCHING BI-PARTISAN GROUNDRULES.
Second, even though the specific report you linked to was generated with Democrat pre-suppositions, it STILL shows the ACA to be a lie... Obama said the thing would not increase the deficit, but the report you cited says it will cost an extra $1.3 to $1.8 TRILLON over the next ten years with fine-print noting: "These numbers exclude effects on the deficit of provisions of the Affordable Care Act that are not related to insurance coverage." In other words, huge costs involved in oversight and regulation of (1) Insurers (2) hospitals (3) drug companies (4) individual taxpayers and also expenses for things like the website, and the annual marketing to remind people of enrollment periods, plus all the statistical data the plan requires the government to gather and analyze on everybody.... and on, and on, and on is NOT accounted for
Third, even with it's pro-Democrat bias, the report admits that in the year 2024 (ten years from now) there will still be 31 MILLION uninsured Americans even after we've spent the (ballpark) $1.5 TRILLON (plus not-analyzed-but-acknowleged-other-costs) AND after we've kicked MILLIONS of people off the policies that Obama swore they'd be able to keep and cut-off their access to the doctors he swore they'd be able to keep. "Obamacare" was built on lies, sold on lies, will be kept on life support using lies, and will be devestating to younger Americans who will pay far higher taxes over their lives, get worse healthcare, and have many fewer opportunities. Good policies do not need to be marketed with years of lies .... but then this HAS been a long-term goal of Progressives, for whom "the ends justify the means"
Fourth, the report admits that the Republican who yelled "You Lie!" at Obama during his State of the Union speech was, in fact, the one who was telling the truth: Under the ACA, illegal immigrants are not required to spend any money or buy anything BUT they get access to our hospitals - so THEY get coverage without ANY of the requirements the law burdens middle-class Americans with.
Sorry, but I've been reading CBO reports for decades, and I know both how to fully read them and also where to go to see and read the context.... kindly take your dishonest lazy talking points back to Kos and HuffPo where the gullible dupes lurk.
Meanwhile Kathleen Sebelius sneaks back to Kansas and hides in the basement of an outhouse.....
*Repent!Quit Your Job!Slack Off!The World Ends Tomorrow and You May Die!
Yeah, they do, or the Meta-cops will bust them for not doing the right thing.
There are meta-cops, right?
The Fed is answerable, right?
Someone is big enough to do something about it, if they dont , right?
If there is a law they have to obey it or face consequences, right?
We have a long list of examples of this , right?
Bush? Clinton? Reagan? Carter? Ford? NIXON... see, someone got caught, feel better? Johnson didnt get caught because he was funny and Kennedy didnt get caught because he was a soap opera. Only homely Quakers with shifty eyes get caught, WORD!
*Repent!Quit Your Job!Slack Off!The World Ends Tomorrow and You May Die!
ummmm WHAT?
have you seen my sig? there are many others like it but none that are the same
If it was a fine the Supreme Court would have struck down the law. But they recognized Congress' authority to impose taxes, so the law stands.
Semantics. But, whatever. s/fine/tax and my argument stands. You can't force insurance companies to treat pre-existing conditions unless you make people pay for insurance when they're healthy (or have somebody else pay for it for them).
If you want to understand how insurance works, first look at what the insurance pays for. Then figure out the total annual US cost of paying for that thing. Then divide that by the total population of the country, and add a few percent. That is the cost per-person of insurance if everybody buys it (whether they think they need it or not).
On the other hand, if you only want people who need it to pay for it, then instead of dividing it by the total population, divide it by the number of people who think they need insurance, and since you're dividing by a smaller number you get a bigger insurance premium.
In the case of health insurance, if only people who get sick want to pay for insurance then the cost will be something like 20x higher, and then the sick people won't want insurance since it costs more than their care.
Insurance is normally just voluntary socialism. The problem with healthcare is that we don't like making people die without treatment when they get really sick, so we don't want to make it voluntary. Insurance only works as a voluntary program if you actually let people who don't buy in suffer the full consequences of their decision. As soon as you create a "safety net" you've basically created an insurance program where all the taxpayers are paying for insurance for everybody, and that only works if you tax them enough to pay for it. However, Obamacare expects private insurance companies to actually pay the bills (aside from subsidies applied to premiums). So, you can't have a "safety net" in that case.
A tax on living.
Guess that makes large numbers of the homeless etc into tax evaders too now.
What do you think socialized healthcare is? Socialism only works if you don't let people opt-out.
Granted, the homeless folks aren't really the problem, since for the most part they're the recipients in any socialized benefit. The issue is the person who makes plenty of money and doesn't feel they need to pay taxes (which mostly benefit others).
Required purchase of health insurance is NOT Socialism!
Many will still not be able to afford it or obtain sufficient assistance to do so.
True, on its own it isn't. ACA does include subsidies for the poor which is a form of socialism, though limited in scope.
Prices will continue to go up.
Well, they don't have to under a system like this if it is done right (aside from inflation, or rising levels of service). I don't think the ACA was really done right - it was a compromise all-around. The US health system is a nest of problems, and ACA really only hits a few of them. There is no one thing that you can do to fix it.
The vast majority of medical spending is on chronic illness for the elderly. You should have your argument focus on this type of common outcome rather than "suddenly gets sick/hurt".
Sure, but it doesn't really change anything. In fact, most people become elderly so it only stands to reason that most people are going to need insurnace, and the money they pay in when they're young makes up for the money they take out when they're old.
All part of the Fed Ramp program. http://cloud.cio.gov/fedramp
Probably one of the smarter things the government has done.