Thread

1. binlog · 1790222273 · focus · HN ↗

   Zero technical details on what the "hack" actually was. Willing to bet it was something as stupid as the data being accessible by changing the query parameter, and rather than own up to their own shoddy security (no doubt built by an offshore contractor) they are going to blame the one who found and reported the bug.

   1. MichaelDickens · 1790223028 · focus · HN ↗

      Does it matter whether the data was poorly secured? LLMs should not be hacking into government medical websites, and if they do, the companies responsible should disclose the incidents as soon as possible.

      1. uoaei · 1790223157 · focus · HN ↗

         Yes, it is their responsibility as stewards of their citizens' data. What point are you making with the word "should"?

         1. selcuka · 1790224877 · focus · HN ↗

            Sure, it is their responsibility, but that doesn't answer the question "Does it matter whether the data was poorly secured?"

            If your house is robbed, does it matter whether you didn't have a state-of-the-art lock? A robbery is still a robbery.

            1. noosphr · 1790232183 · focus · HN ↗

               <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=pbKUv0701vE" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=pbKUv0701vE

               It very much does matter.

Unofficial Hacker News client; not affiliated with Y Combinator.