3 ms·
Forget about hacking devices. We once walked into a hospital to talk to nurses and show them a tablet app to access notes lab results etc. The scary part was t
by rjzzleep 11y ago
Forget about hacking devices. We once walked into a hospital to talk to nurses and show them a tablet app to access notes lab results etc.
The scary part was that the server room with the PACS and everything else in the building was unprotected with unlocked doors and nobody particularly caring we were there.
Imagine walking into a random law firm and walking into the server room with the ability to copy all data from all the clients.
Not cool, at all.
- bcostlow 11y agoMost PACS get data from devices and send it to workstations unencrypted. The security model implemented on them is usually no more than a white list of IP addresses the PACS will talk to. (To be fair, many of the servers have better security available now, but hospitals haven't taken advantage of it). Combine that with insecure, unsegmented networks, and hackable WiFi, and you don't need physical access to the server room.
- larrys 11y agoBack in the early to mid 90's the root DNS servers were also left in unlocked rooms of some Universities according to stories that I read around that time. Also for .info domains when they first came out I happen to be at the headquarters of the registry (Afilias when it was in the US) and they had their servers sitting out in the middle of an office that was quite unprotected like you would any tower computer. The janitor could have taken it off line with a vacuum cleaner. (This was early 2000's iirc.)