I now have an official residence in North Carolina (as of last Thursday) so I decided to update my address and state of residency in my application.
Because I’m making such an important change, it demands that I supply answers to all three of my security questions. It fails with an unexpected error.
Figuring it might be a mismatch (are answers case sensitive?). I go back to my profile and it has my three security questions listed (without the answers). There is an [edit] button next to my questions and it gladly agrees to update my three security questions – WITHOUT having to answer any existing questions. The only thing I needed to change my security answers was to enter my password that I obviously know since I’m logged in.
How do you spell clueless in Canadian?
So, how difficult would you estimate it to be to hack that site? With all the personal data one needs to give it would get scary to give up all your personal data and not know that answer.
I don’t have the sense that they were at all focused on security. There is a general promise that they’ll keep your data private and the general threat that HIPAA has stringent rules about misuse of data.
I wonder if there is even a need for the website to be exposed outside of the United States. Expats wouldn’t be able to sign up, would they?
Expats living in another country, or countries, are not required to sign-up. I’m sure they could sign-up.
What personal data? Do they know the name of your favorite teacher? The name of your first pet? The make of your first car? Those are the keys to security now that everyone knows your SSN and your mother’s maiden name.