Sign In | Create an Account | Welcome, . My Account | Logout | Subscribe | Submit News | School Lunch Menus | Contact Us | All Access E-Edition | Home RSS
 
 
 

Security experts identify MNsure vulnerability

December 12, 2013
Associated Press

ST. PAUL, Minn. (AP) — Internet security experts have identified flaws in Minnesota's online health insurance marketplace that could compromise sensitive consumer data.

Minnesota Public Radio reports (http://bit.ly/1fnjRQH ) the MNsure website is vulnerable to "rogue access points." Such devices can masquerade as a standard wireless connection to the Internet. But when a user connects to the device it strips away security measures, allowing the hacker to see information passing between the user and MNsure's site.

When sensitive information is involved, websites typically offer encrypted connections so no one can eavesdrop. Some websites sever connections if the customer's computer or smartphone fails to use encryption to secure the communication. But MPR reports MNsure's site allows unsecured transmissions to go through.

The state's chief information security officer says the threat of this kind of attack is low.

___

Information from: Minnesota Public Radio News, http://www.mprnews.org

 
 

 

I am looking for:
in:
News, Blogs & Events Web