4 ms·
It's fail-safe instead of fail-secure. While I'm _surprised_ that the system works the way that it does (we're typically pretty willing to let people drop dead)
by Arubis 1y ago
It's fail-safe instead of fail-secure. While I'm _surprised_ that the system works the way that it does (we're typically pretty willing to let people drop dead), if someone on a life-critical medication isn't capable of going to pick up their own rx, they can send just about anyone in their stead.
- johnisgood 1y agoYes, my parents pick up my medications because I have mobility issues. But on the other hand, my grandma MUST talk on the phone (even if my mother is there) if we want to talk to the ISP's customer service. Then my grandma has to tell customer service that she is giving permission to my mother. Sure. What if something happens to my grandma? Pharmacies are too lax, ISPs are too strict. Certainly there should be a middle path, similarly to how post offices do it.
- Arubis 1y agoThat all makes sense given industry history. ISPs are accustomed to their threat model being more about fraud than patient death. And pharmacies have been around a lot longer. Not disagreeing with your conclusion that both could improve—just that the paths to arrive at the current local maxima are rational.
- johnisgood 1y agoOf course, but that is assuming that many people did not "steal" other people's medications which in turn worsened their symptoms or they ended up dead because of lack of medications. I think it is safe to assume (I would hope) that this did not happen, otherwise surely they would have made it more strict.
- yencabulator 1y agoPharmacies are less susceptible because you have to perform the "attack" physically present, under video surveillance. And you get very limited tries at one physical location until they start recognizing you. ISP contacts are remote and go to call centers.