3 ms·

>it’s not practical to not trust anyone and maintain a functional life. I'd say it's very practical to not exchange medical information over an insecure channe

>it’s not practical to not trust anyone and maintain a functional life. I'd say it's very practical to not exchange medical information over an insecure channel. I don't email naked pictures of myself or even worse share pictures of a child's genitals in some google drive folder anyone can copy or share. my life is perfectly functional. Anyone who deals with email should treat any email they write like they're public, because there's always one dude who copies some entire chain into a reply or forwards something to a hundred random people that weren't supposed to get it. When you mail something like this you don't even know if the doctor or the secretary opens them. If they're immediately backed up to some remote server now some tech worker has access to naked pictures of your kid. You can't request to delete that information, there's no ownership. That's a completely insane way to treat your most sensitive data. For tele-medicine there's strict regulations on the safety of apps and how patient data are treated. Consult doctors through one of those. I'm not even sure if it's technically legal for a doctor to interact with patient data as described in the article.

Gigachad 4y ago
The majority of people these days have their photos backed up to cloud services which happens without any user action other than taking the photo itself. I don’t think there is any user error here. The user used the services and devices how they are meant to be used and google majorly messed up.
detaro 4y ago
I'm curious why you go on about email here? They used an upload platform by the medical provider.
- hericium 4y ago
  Sorry to reply off-topic here, but FTC is not the same as SEC. The SEC complaint, as I understand, is a new thing. Reponding here only because HN blocked my ability to respond to your 8-minutes-ago comment or post a new one in thread that you have flagged.
  - detaro 4y ago
    the complaint was sent to multiple agencies, including the SEC. This is clearly stated in the CNN article (which Schneier also links to) already. Even if the detail that it was also sent to SEC were new, it'd still be a dupe. Even if it was entirely new complaint, a 4 sentence blogpost saying that other media has reported something isn't the thing to submit to HN over the original source.

Gigachad 4y ago

The majority of people these days have their photos backed up to cloud services which happens without any user action other than taking the photo itself. I don’t think there is any user error here. The user used the services and devices how they are meant to be used and google majorly messed up.

detaro 4y ago

I'm curious why you go on about email here? They used an upload platform by the medical provider.

hericium 4y ago
Sorry to reply off-topic here, but FTC is not the same as SEC. The SEC complaint, as I understand, is a new thing. Reponding here only because HN blocked my ability to respond to your 8-minutes-ago comment or post a new one in thread that you have flagged.
- detaro 4y ago
  the complaint was sent to multiple agencies, including the SEC. This is clearly stated in the CNN article (which Schneier also links to) already. Even if the detail that it was also sent to SEC were new, it'd still be a dupe. Even if it was entirely new complaint, a 4 sentence blogpost saying that other media has reported something isn't the thing to submit to HN over the original source.