Page 7 - Security Test News Today

Shows, one republican did bring up security concerns. the response was, this is about politics. youre making this political. this is a political fight. and lets face it, there are politics involved in the conversation about this website. if we stride to strip that away, though, how safe is the site? >> when we testified in front of congress, the question was asked, and this was all the witnesses, do you think the site is secure? all four said no. they said would you use the site? all four of us ...

>> any concept of how much this is going to cost you? >> they cant measure what they have right now with 500 million lines of code because thats whats in there. they havent done an end-to-end security test. they have no concept of all the issues. so until you get a firm baseline of whats there, theres no way you can come up with a price to fix this thing. >> 500 million lines of code. give me an idea -- i mean, since im not -- im not a computer expert. how big is that? give me something to compa...

Down the system and do a security test -- >> no, sir. >> joining me now, monica crowley, host of the monica crowley show and president and ceo of whitman insight strategies. this is a serious charge. basically forget the technicalities about the website which we assume will will get fixed eventually. that this personal security information of the people who have gone on there is ready for the plucking by some hacker. >> and they knew ahead of time and went ahead with launching the website becaus...

Down the system and do a security test -- >> no, sir. >> joining me now, monica crowley, host of the monica crowley show and president and ceo of whitman insight strategies. this is a serious charge. basically forget the technicalities about the website which we assume will will get fixed eventually. that this personal security information of the people who have gone on there is ready for the plucking by some hacker. >> and they knew ahead of time and went ahead with launching the website becaus...

>> as code it loaded, you need to retest over and over and over again. whether its retested i cant -- >> you need to test the code. has any end to end security test been conducted since healthcare.gov went live on october 1st? >> my understanding is there is continuous testing as -- >> yes or no. has an end to end security test on healthcare.gov went live, yes or no? >> i will find out exactly what testing theyre doing. i know theyre doing simultaneously testing as the code is loaded. >> are the...

Why? because youre constantly adding new code every night to protect the functionality of the system. you have exposed millions of americans because you all, according to your memo, believed it was an acceptable risk. dont you think you had the obligation to tell the american people that were going to put you in this system but beware, your information is likely to be vulnerable? would you commit today, secretary, to shut down the system and do an end-to-end security test -- >> no, sir. if you r...

Backup systems. they had no encryption on certain boundary crossings. you accepted a risk on behalf of every user of this computer that put their personal financial information at risk because you did not even have the most basic end-to-end test on security of this system. amazon would never do this. pro flowers would never do this. kayak would never do this. this is completely an unacceptable level of security and heres the scary part. we found out after the contractors last week that an end-to...

I have to fix this problem. >> you have confidence dm november 30th? >> i do. >> it was testing -- temporary authority -- >> yes or no. yes or no has an end to end security test on healthcare.gov went live, yes or no? >> i will find out exactly what testing they are doing. i know they are doing simultaneous testing as new code is loaded. >> kathleen sebelius this morning on the websites. technicali technical issues, the system was down again today. they were suggested to apply by phone instead. ...

That as code is loaded, you need to retest over and over and over again. so whether its pretested, i cant tell you. >> you need to test the code. >> its simultaneous -- >> have any end-to-end security tests been conducted since healthcare.gov went live october 1st, yes or no. >> my understanding is there is continuous testing as -- temporary authority to op ralt calls for. >> yes or no, has an end-to-end security test on healthcare.gov went live, yes or no? >> i will finding out exactly what tes...

To end test on security of this system. amazon would not do that. pro- flowers would not do that. this is unacceptable and here is the scary part. we found out after the contractors last week that an end to end test was not done on security, not functionality. if it is not functioning, it is not secure. ongoing hot patches without end to end test. private contractors told us a have thorough two months for an end to end security test that did not happen today. why? because you are adding new code...