3 ms·
My employer (a large healthcare company) has been shown over and over that they're broadcasting PHI in the clear over pagers, and that this is bad, and their re
by dmd 6y ago
My employer (a large healthcare company) has been shown over and over that they're broadcasting PHI in the clear over pagers, and that this is bad, and their response every time has been "the paging company assures us it is secure". Evidence doesn't matter, only the word 'secure' in their contract with the paging company does, so it's "not their fault".
- 77pt77 6y agoWorse. If you show that it's trivially insecure, you are now the suspect/perpetrator. Never break these illusions. Keep your mouth shut.
- WrtCdEvrydy 6y agoEven as the dedicated security contact whose job is it to test this shit, you will be looked at as a dickhead for pointing that we just spent 30k on something we can't use.
- somedangedname 6y agoI once asked a med student why pagers continued to see use in a medical setting over mobile phones. The response: doctors could use a phone to receive urgent notifications but the lower delivery guarantee for messages meant that they wouldn't be covered by their hospital's malpractice insurance for cases arising from late or non receipt of messages. Not sure if true but could be a strong incentive to ignore security complaints.