Re: Anthem Healthcare Hacked

2015-02-08 Thread Anne Lynn Wheeler
since there is no way to unhash it since all that is needed is to hash the value you think it is and compare the two hashes. re: http://www.garlic.com/~lynn/2015.html#96 Anthem Healthcare Hacked an issue is something you know shared secrets for authentication, pins, passwords, as well other

Re: Anthem Healthcare Hacked

2015-02-08 Thread Robert A. Rosenberg
At 11:00 +0800 on 02/08/2015, Timothy Sipples wrote about Re: Anthem Healthcare Hacked: Tom Brennan writes: Maybe someone can tell me what difference it makes whether the data was encrypted on disk or not (as some news reports are talking about). I mean, if I do a SELECT * from an admin id I

Re: Anthem Healthcare Hacked

2015-02-08 Thread David Cole
=17923 Thanks, Mark Regan, USNR-Ret, 1969-1991 - Forwarded Message - From: Mark Regan netsfw-ibmm...@yahoo.com To: IBM Mainframe Discussion List ibm-main@listserv.ua.edu Cc: Sent: Friday, February 6, 2015 7:51 AM Subject: Anthem Healthcare Hacked http://www.darkreading.com/risk

Re: Anthem Healthcare Hacked

2015-02-08 Thread Tom Brennan
More bits and pieces of information in this report, but nothing that really tells me if a mainframe was involved. http://www.usatoday.com/story/tech/2015/02/07/anthem-hack-80-million-lawsuits-data-privacy/23037879/ -- For

Re: Anthem Healthcare Hacked

2015-02-07 Thread Timothy Sipples
Tom Brennan writes: Maybe someone can tell me what difference it makes whether the data was encrypted on disk or not (as some news reports are talking about). I mean, if I do a SELECT * from an admin id I must be going through the decrypt process, right? No, that's not a given. Many financial

Re: Anthem Healthcare Hacked

2015-02-07 Thread Jake anderson
One of an article says the hack assumingly happened from an external Web storage. So not a mainframe ? Jake On 8 Feb 2015 08:31, Timothy Sipples sipp...@sg.ibm.com wrote: Tom Brennan writes: Maybe someone can tell me what difference it makes whether the data was encrypted on disk or not (as

Re: Anthem Healthcare Hacked

2015-02-07 Thread Tony Harminc
On 7 February 2015 at 22:00, Timothy Sipples sipp...@sg.ibm.com wrote: I'm assuming customers use IBM mainframes and use these wonderful capabilities (and others) IBM provides. Big assumptions, sadly violated too often. Now it's (sadly) a violation to not use an IBM mainframe?! I know IBM has

Re: Anthem Healthcare Hacked

2015-02-07 Thread Sam Siegel
According to Anthem's website, it was formed by the merger of Wellpoint and Anthem. According to http://mainframes.wikidot.com/, Wellpoint is a mainframe shop. Hopefully as additional details will become available. It seems, that unless you are in the know, which I'm not, that facts are in

Re: Anthem Healthcare Hacked

2015-02-06 Thread Jousma, David
616.653.2717 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Tony Harminc Sent: Friday, February 06, 2015 3:34 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Anthem Healthcare Hacked On 6 February 2015 at 14:22, Tom Brennan t

Re: Anthem Healthcare Hacked

2015-02-06 Thread Tony Harminc
On 6 February 2015 at 14:22, Tom Brennan t...@tombrennansoftware.com wrote: Maybe someone can tell me what difference it makes whether the data was encrypted on disk or not (as some news reports are talking about). I mean, if I do a SELECT * from an admin id I must be going through the decrypt

Re: Anthem Healthcare Hacked

2015-02-06 Thread Tom Brennan
I believe they do have mainframes - but I haven't yet seen anything indicating whether this is mainframe, unix, windows, or what. The only detail I saw reported (which may or may not be true) was that a database admin saw his id being used for things he did not initiate. So if we assume the

Re: Anthem Healthcare Hacked

2015-02-06 Thread Longabaugh, Robert E
: Anthem Healthcare Hacked I'll be honest. I do not understand the need for encryption at the disk hardware control unit level. I get it for tape, if tape is being transported, or handled by humans. Seems like that would *only* protect data if the DASD box was being transported somewhere

Re: Anthem Healthcare Hacked

2015-02-06 Thread Tony Harminc
On 6 February 2015 at 15:47, Jousma, David david.jou...@53.com wrote: I'll be honest. I do not understand the need for encryption at the disk hardware control unit level. I get it for tape, if tape is being transported, or handled by humans. Seems like that would *only* protect data if

Re: Anthem Healthcare Hacked

2015-02-06 Thread Anne Lynn Wheeler
Anthem's stolen customer data not encrypted; But under federal law, health insurance companies don't have to encrypt user data. http://www.cnet.com/news/anthems-hacked-customer-data-was-not-encrypted/ In early part of century, I was co-author of financial industry privacy standard ... and we had

Re: Anthem Healthcare Hacked

2015-02-06 Thread Mike Schwab
Discussion List ibm-main@listserv.ua.edu Cc: Sent: Friday, February 6, 2015 7:51 AM Subject: Anthem Healthcare Hacked http://www.darkreading.com/risk/a-mere-eight-days-after-breach-anthem-healthcare-notifies-customers-/d/d-id/1318979 Watch the wrap. Are they a mainframe shop? Thanks

Anthem Healthcare Hacked

2015-02-06 Thread Mark Regan
http://www.darkreading.com/risk/a-mere-eight-days-after-breach-anthem-healthcare-notifies-customers-/d/d-id/1318979 Watch the wrap. Are they a mainframe shop? Thanks, Mark Regan, USNR-Ret, 1969-1991 -- For IBM-MAIN

Re: Anthem Healthcare Hacked

2015-02-06 Thread Mark Regan
@listserv.ua.edu Cc: Sent: Friday, February 6, 2015 7:51 AM Subject: Anthem Healthcare Hacked http://www.darkreading.com/risk/a-mere-eight-days-after-breach-anthem-healthcare-notifies-customers-/d/d-id/1318979 Watch the wrap. Are they a mainframe shop? Thanks, Mark Regan, USNR-Ret, 1969-1991

Re: Anthem Healthcare Hacked

2015-02-06 Thread Aled Hughes
Subject: Anthem Healthcare Hacked http://www.darkreading.com/risk/a-mere-eight-days-after-breach-anthem-healthcare-notifies-customers-/d/d-id/1318979 Watch the wrap. Are they a mainframe shop? Thanks, Mark Regan, USNR-Ret, 1969-1991

Re: Anthem Healthcare Hacked

2015-02-06 Thread Peter
, 1969-1991 - Forwarded Message - From: Mark Regan netsfw-ibmm...@yahoo.com To: IBM Mainframe Discussion List ibm-main@listserv.ua.edu Cc: Sent: Friday, February 6, 2015 7:51 AM Subject: Anthem Healthcare Hacked http://www.darkreading.com/risk/a-mere-eight-days-after-breach-anthem