Saying "Medicare Portal" buries the lede a little here.
Medicare is part of "Services Australia", the larger social services government agency that looks after unemployment, support payments and public health. We access all of that through the one portal
Accessing "non-public" data through that is endictment on their infra security more than it is OpenAI
> Accessing "non-public" data through that is endictment on their infra security more than it is OpenAI
No, it is not. Medical/health information is pretty much the most sensitive and confidential information possible on a personal level. You do not let a system already known for unwanted intrusion near any such system. Unless, of course, you're a sociopathic reckless money-grubbing cowboy, which is a long-winded way of writing "CEO".
What you are arguing is essentially if people have weak locks, its their fault if they get broken into. Or if a bug doesn't taste bad, then it's their fault if it gets eaten by a bird. This thinking puts the blame on the victim, which is 100% the wrong place.
Yes, I agreed that the Australian Government should have better security, but in government that's actually pretty hard when people see a government contract as license to charge $200 for a hammer. See the Australian Bureau of Meteorology website upgrade for an example of that kind of debacle.
'In mid-2014, IBM, one of the biggest global ICT companies was contracted to provide a relatively simple e-Census application, ensure the application was available to the public over the 8-week Census response period, provide sufficient capacity to deal with the peak response load expected on Census night of August 9 and ensure effective security for the e-Census system. The contract to IBM was worth around $10 million, within the total Census budget of around $500 million.
IBM failed to deliver the contracted service to the necessary standards, and they have provided financial recompense to cover the additional costs we and the Government have had, and will still incur as a result of this incident.'
https://www.abs.gov.au/websitedbs/d3310114.nsf/home/Australi...
This is insane to read. The agent(s) were looking for Australian medical data, so what better place to look than Medicare. What makes them so good at their tasks (their relentlessness) is what also makes them so dangerous. We are going to keep seeing more of this
Saying "Medicare Portal" buries the lede a little here.
Medicare is part of "Services Australia", the larger social services government agency that looks after unemployment, support payments and public health. We access all of that through the one portal
Accessing "non-public" data through that is endictment on their infra security more than it is OpenAI
Basically hacked the Australian Government.
> Accessing "non-public" data through that is endictment on their infra security more than it is OpenAI
No, it is not. Medical/health information is pretty much the most sensitive and confidential information possible on a personal level. You do not let a system already known for unwanted intrusion near any such system. Unless, of course, you're a sociopathic reckless money-grubbing cowboy, which is a long-winded way of writing "CEO".
What you are arguing is essentially if people have weak locks, its their fault if they get broken into. Or if a bug doesn't taste bad, then it's their fault if it gets eaten by a bird. This thinking puts the blame on the victim, which is 100% the wrong place.
Yes, I agreed that the Australian Government should have better security, but in government that's actually pretty hard when people see a government contract as license to charge $200 for a hammer. See the Australian Bureau of Meteorology website upgrade for an example of that kind of debacle.
Don't forget the 2016 Census by IBM.
'In mid-2014, IBM, one of the biggest global ICT companies was contracted to provide a relatively simple e-Census application, ensure the application was available to the public over the 8-week Census response period, provide sufficient capacity to deal with the peak response load expected on Census night of August 9 and ensure effective security for the e-Census system. The contract to IBM was worth around $10 million, within the total Census budget of around $500 million.
IBM failed to deliver the contracted service to the necessary standards, and they have provided financial recompense to cover the additional costs we and the Government have had, and will still incur as a result of this incident.' https://www.abs.gov.au/websitedbs/d3310114.nsf/home/Australi...
https://www.reuters.com/article/business/ibm-apologizes-for-...
https://www.abc.net.au/news/2016-11-25/ibm-to-pay-over-$30m-...
This is insane to read. The agent(s) were looking for Australian medical data, so what better place to look than Medicare. What makes them so good at their tasks (their relentlessness) is what also makes them so dangerous. We are going to keep seeing more of this
Time for the Open AI CEO to be charged for his crimes.
Some more discussion: https://news.ycombinator.com/item?id=49822556
Was this another case of a pentesting agent breaking out of its sandbox and accessing the open internet?
They should sue OpenAI.
*explode
They should explode OpenAI? I don't want my FBI agent to get the wrong idea.