3 ms·

> You can't steal everyone's paper records all at once in the way you can with electronic records, for example. You're assuming you can steal the entire databa

> You can't steal everyone's paper records all at once in the way you can with electronic records, for example. You're assuming you can steal the entire database at once which most certainly will also be noticed and stopped swiftly.

j16sdiz 8y ago
Maybe. But how about those already stolen? Photocopying paper records are slow. If you can get the original copy back quickly, you can be quite confident they are not copied. Not so for e-records.
- Avamander 8y ago
  > But how about those already stolen? Digital records can most likely be duplicated much more easily.
pjc50 8y ago
History is full of massive data breaches which were only noticed when the dump turned up being sold. Few places have decent exfiltration detection on their IDS. Or there's the classic "health records left on train" incident: http://news.bbc.co.uk/1/hi/uk/7449927.stm http://news.bbc.co.uk/1/hi/uk/7449927.stm
justinclift 8y ago
> ... most certainly will also be noticed and stopped swiftly. That's not necessarily the case. It very much depends on how it's "stolen", the cluefulness of the attackers, etc. For example, if the data is pulled out of the live system via (say) some kind of SQL exploit, then intrusion detection gear has a possibility of noticing and reacting in a reasonable time frame. However, if (again, for example) the data is copied directly from backup tape when the tapes are transported to secondary storage, or are (in)correctly disposed of. That's extremely unlikely to be detected. Ever. There are just so many attack vectors. :/
pvaldes 8y ago
Hum... The real danger here is the possibility of silently target some people of interest and remotely change a small part of their health data. People could be even killed remotely from other countries before the trick would be discovered. Old politicians or oppositors could be killed faking a natural death. Even more, any country could enter in a future war, or send soldiers somewhere in the future. The possibility of the enemy remotely mixing or changing the medication of the soldiers would be devastating. In a single strike, somebody, somewhere could close down all the hospitals in the area and the chaos could last for days or weeks. All that is needed is to take one city with one hospital connected to the same net and asking for the password to one of the prisoners.

j16sdiz 8y ago

Maybe. But how about those already stolen? Photocopying paper records are slow. If you can get the original copy back quickly, you can be quite confident they are not copied. Not so for e-records.

Avamander 8y ago
> But how about those already stolen? Digital records can most likely be duplicated much more easily.

pjc50 8y ago

History is full of massive data breaches which were only noticed when the dump turned up being sold. Few places have decent exfiltration detection on their IDS. Or there's the classic "health records left on train" incident: http://news.bbc.co.uk/1/hi/uk/7449927.stm http://news.bbc.co.uk/1/hi/uk/7449927.stm

justinclift 8y ago

> ... most certainly will also be noticed and stopped swiftly. That's not necessarily the case. It very much depends on how it's "stolen", the cluefulness of the attackers, etc. For example, if the data is pulled out of the live system via (say) some kind of SQL exploit, then intrusion detection gear has a possibility of noticing and reacting in a reasonable time frame. However, if (again, for example) the data is copied directly from backup tape when the tapes are transported to secondary storage, or are (in)correctly disposed of. That's extremely unlikely to be detected. Ever. There are just so many attack vectors. :/

pvaldes 8y ago

Hum... The real danger here is the possibility of silently target some people of interest and remotely change a small part of their health data. People could be even killed remotely from other countries before the trick would be discovered. Old politicians or oppositors could be killed faking a natural death. Even more, any country could enter in a future war, or send soldiers somewhere in the future. The possibility of the enemy remotely mixing or changing the medication of the soldiers would be devastating. In a single strike, somebody, somewhere could close down all the hospitals in the area and the chaos could last for days or weeks. All that is needed is to take one city with one hospital connected to the same net and asking for the password to one of the prisoners.