4 ms·
Is this before or after it was moved from usds to a contractor?
by dmead 8y ago
Is this before or after it was moved from usds to a contractor?
- fjsolwmv 8y agoHealtgcare.gov wasn't hacked. It's users' systems were hacked, and the hacked client systems logged in to healthcare.gov through normal means.
- khazhou 8y agoThis distinction is not useful to the people whose information was accessed. Perhaps healthcare.gov could have been designed in such a way that sensitive user information was not available to client systems, or somehow required that clients have higher levels of security to prevent this from happening.
- CobrastanJorji 8y agoThis is big, east coast, many-contractor design. By the time things made it to the point that somebody was thinking about security, a rule like "providers will be given access to the following fields for a client upon request" was likely already written into a half dozen contracts between seventeen sub-contractors.
- isoskeles 8y agoYes, take note east coasters. This doesn't happen on the west coast.
- dpkonofa 8y agoIt is explicitly limited by geography. The magnetic pull of the earth on the west coast, because of the San Andreas fault, prevents this from happening there.
- CobrastanJorji 8y agoIs that not a thing? I had thought "west coast" described startupy, in-house, vaguely agile type of software development, and "east coast" described government contracting, sub-sub-sub contracting, waterfall-style development. Maybe I just picked it up from the folks around me and thought it was more universal.
- gloryless 8y agoUsds never "had it", it's always been handled by MULTIPLE contractors. This last version one contractor works on backed, one works on frontend, one is responsible for documentation and testing, and none of them communicate.