2 ms·

The problem with your logic is that it invalidates every security measure. The reality is this: If the client’s browser or the server’s infrastructure is compr

The problem with your logic is that it invalidates every security measure. The reality is this: If the client’s browser or the server’s infrastructure is compromised than there’s no security measure that will prevent a system from being compromised. Think about it. Login info has to get in somehow and if someone has unlimited access to either the system that enters that data or the system that authenticates it how would you possible prevent a security breach? So the end result of your concerns is that there’s just no way to share medical information.

tptacek 18y ago
So, three responses: First, yes, there's no secure way to share medical information. We should recognize that, and by doing so, I think you'll see my argument about your employer being right is pretty strong. Second, my argument isn't the slippery slope you're making it out to be. In fact, there are likely scenarios in which an application flaw exposes your database, and likely scenarios in which XSRF/XSS flaws will coerce users into exposing medical information. My argument does not depend on some hypothetical killer zero-day bug. Finally, I'm not advocating a world in which we don't provide access to medical information. I'm just saying, there's no way to do it casually. Any project that does it is going to need a steering committee, and special insurance.
- TomOfTTB 18y ago
  So basically by your own admission your opinion has no consequence. Because your initial point was that my suggestion wasn’t secure. That’s fair. But then you went to "there’s no secure solution but the data will be put out there anyway". So if the solution is destined to be insecure what’s wrong with my insecure solution? Or I guess more to the point: what would you do? You’re an intelligent person who knows the issues so give me a solution. Because saying "lets form a committee" isn’t an answer it’s an evasion. It’s what people say when they don’t want to be bothered with coming up with a solution.
  - tptacek 18y ago
    I think we're arguing two different issues. You're arguing that it should be possible to make medical information (including mental health information) available to patients over the Internet. I agree. I'm arguing that, confronted with your specific proposal to put that information onto the Internet, your employer made the right call. The considerations you came up with to defend patient privacy aren't convincing; your suggestion, which I concede is probably abbreviated, is insufficient for an application which handles credit card information, let alone irrevocable patient mental health information.

tptacek 18y ago

So, three responses: First, yes, there's no secure way to share medical information. We should recognize that, and by doing so, I think you'll see my argument about your employer being right is pretty strong. Second, my argument isn't the slippery slope you're making it out to be. In fact, there are likely scenarios in which an application flaw exposes your database, and likely scenarios in which XSRF/XSS flaws will coerce users into exposing medical information. My argument does not depend on some hypothetical killer zero-day bug. Finally, I'm not advocating a world in which we don't provide access to medical information. I'm just saying, there's no way to do it casually. Any project that does it is going to need a steering committee, and special insurance.

TomOfTTB 18y ago
So basically by your own admission your opinion has no consequence. Because your initial point was that my suggestion wasn’t secure. That’s fair. But then you went to "there’s no secure solution but the data will be put out there anyway". So if the solution is destined to be insecure what’s wrong with my insecure solution? Or I guess more to the point: what would you do? You’re an intelligent person who knows the issues so give me a solution. Because saying "lets form a committee" isn’t an answer it’s an evasion. It’s what people say when they don’t want to be bothered with coming up with a solution.
- tptacek 18y ago
  I think we're arguing two different issues. You're arguing that it should be possible to make medical information (including mental health information) available to patients over the Internet. I agree. I'm arguing that, confronted with your specific proposal to put that information onto the Internet, your employer made the right call. The considerations you came up with to defend patient privacy aren't convincing; your suggestion, which I concede is probably abbreviated, is insufficient for an application which handles credit card information, let alone irrevocable patient mental health information.