Apologies to anyone who is having issues downloading this episode!

In this episode...

• The ACLU encourages the government to get into bug bounties
  • Read the original letter: https://www.aclu.org/sites/default/files/field_document/aclu_-_iptf_recommendations_submitted.pdf
  • Points 1 & 2 are at sane
  • Point 3 makes a hard left into into crazy-town
  • http://thehill.com/policy/technology/243265-aclu-says-government-should-offer-rewards-for-finding-security-flaws-on-its
• The massive taxpayer data fraud (not really a breach) is believed to be the work of Russia, says the IRS
  • Does it really matter?
  • Was this a breach or an abuse of functionality?
  • Would your company have caught this?
  • http://www.cnn.com/2015/05/27/politics/irs-cyber-breach-russia/index.html
• CareFirst says their recent breach affects only about 1.1M people
  • Healthcare is clearly in the "bad guys" target zone
  • Quick to point out what the attackers did not get access to
  • Of course it was a sophisticated cyberattack
  • http://abcnews.go.com/Technology/wireStory/carefirst-data-breach-affects-11m-people-31187250
• CNA Financial business unit refusing to pay out claim to Cottage Health System
  • Claims hospital "failed to continuously implement procedures and risk controls identified"
  • CNA unit alleges many failures -- but is this fair?
  • http://www.businessinsurance.com/article/20150515/NEWS06/150519893