Re: getting started with encryption

From	Jerry Stuckle <jstucklex@attglobal.net>
Newsgroups	comp.lang.php
Subject	Re: getting started with encryption
Date	2014-10-12 11:13 -0400
Organization	A noiseless patient Spider
Message-ID	<m1e5qa$21e$1@dont-email.me> (permalink)
References	(4 earlier) <m1bvn7$bjj$1@dont-email.me> <c9utqmFr7dU1@mid.individual.net> <m1drgk$g83$2@speranza.aioe.org> <m1dt9m$5s9$1@dont-email.me> <m1e59p$7d2$1@speranza.aioe.org>

Show all headers | View raw

On 10/12/2014 11:04 AM, bill wrote:
> On 10/12/2014 8:47 AM, Jerry Stuckle wrote:
>> On 10/12/2014 8:17 AM, bill wrote:
>>>
>>>>
>>>> I just pity his customer, who will suffer quite a lot of this and
>>>> it seems they have not got the best service, a lot of &nbsp; to
>>>> place elements, meta refresh to redirect to the new wordpress
>>>> page (looks cheap when you get to see the old page before the
>>>> wordpress page loads, which seems to have some misconfiguration).
>>>>
>>>>
>>> Before you jump all over me you should know:
>>>      I didn't code nor do I maintain the public website.  That was coded
>>> by one of the docs who loves WordPress.
>>>      The site about which I am speaking has no public presence on the
>>> internet.
>>>      The docs are psychiatrists and can spend 2 hr blocks with patients
>>> and refuse to sign on every time.  This seems reasonable as they are in
>>> the room with the client (human and computer) most of the time, and when
>>> they are not, physical access is protected by staff.
>>>
>>> The LAN is behind a firewall, but it is still theoretically possible to
>>> have an intrusion so we are going to increase security somewhat.
>>>
>>> good enough ?
>>>
>>> BTW, despite gratuitous attacks, I still very much appreciate the
>>> assistance I get here.
>>>
>>> -bill
>>>
>>
>> No, it is not good enough.  You REALLY need to get someone who is HIPAA
>> certified and understands HIPAA involved (just being certified doesn't
>> mean all that much - but it is a step in the right direction).
>> Otherwise both you and the doctors could end up with VERY hefty (as in
>> six figure or more) fines.  It can and does happen - unfortunately, with
>> a fair amount of regularity.
>>
>> If you can afford such a penalty, fine.  Keep going like you are.
>>
> 
> Thanks Jerry
> The chances of a 3 doc company hiring a certified consultant are not
> large, but a good recommendation.  I live, eat, and sleep HIPAA (a major
> part of my job).
> -bill

That may be - but you have huge security holes in your proposal.  A
HIPAA audit will result in large fines, to both you and your client.

-- 
==================
Remove the "x" from my email address
Jerry Stuckle
jstucklex@attglobal.net
==================

Thread

getting started with encryption bill <william@TechServSys.com> - 2014-10-10 14:46 -0400
  Re: getting started with encryption Matthew Carter <m@ahungry.com> - 2014-10-10 16:36 -0400
  Re: getting started with encryption John-Paul Stewart <jpstewart@sympatico.ca> - 2014-10-10 18:53 -0400
  Re: getting started with encryption "J.O. Aho" <user@example.net> - 2014-10-11 09:07 +0200
    Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-11 07:59 -0400
  Re: getting started with encryption Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-11 10:36 -0400
    Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-11 10:42 -0400
      Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-11 11:45 -0400
      Re: getting started with encryption "J.O. Aho" <user@example.net> - 2014-10-11 18:38 +0200
        Re: getting started with encryption Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-11 15:16 -0400
          Re: getting started with encryption "J.O. Aho" <user@example.net> - 2014-10-12 10:53 +0200
            Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-12 08:17 -0400
              Re: getting started with encryption Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-12 08:47 -0400
                Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-12 11:04 -0400
                Re: getting started with encryption Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-12 11:13 -0400
                Re: getting started with encryption "J. Clarke" <jclarkeusenet@cox.net> - 2014-10-12 15:12 -0400
                Re: getting started with encryption Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-12 21:45 -0400
              Re: getting started with encryption "J.O. Aho" <user@example.net> - 2014-10-12 15:53 +0200
                Re: getting started with encryption Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-12 10:07 -0400
                How - off topic bill <william@TechServSys.com> - 2014-10-12 11:05 -0400
                Re: How - off topic "J.O. Aho" <user@example.net> - 2014-10-12 17:27 +0200
                Re: How - off topic Denis McMahon <denismfmcmahon@gmail.com> - 2014-10-12 17:23 +0000
                Re: How - off topic Tim Streater <timstreater@greenbee.net> - 2014-10-12 18:49 +0100
                Re: How - off topic bill <william@TechServSys.com> - 2014-10-13 09:24 -0400
                Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-12 11:01 -0400
                Re: getting started with encryption Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-12 11:19 -0400
                Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-13 08:38 -0400
                Re: getting started with encryption Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-13 09:18 -0400
                Re: getting started with encryption - now off topic with gratuitous insults bill <william@TechServSys.com> - 2014-10-13 10:36 -0400
                Re: getting started with encryption - now off topic with gratuitous insults Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-13 12:14 -0400
        Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-12 08:15 -0400
          Re: getting started with encryption "J.O. Aho" <user@example.net> - 2014-10-12 15:52 +0200
            Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-12 11:17 -0400
              Re: getting started with encryption "J.O. Aho" <user@example.net> - 2014-10-12 17:45 +0200
                Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-13 08:58 -0400
                Re: getting started with encryption Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-13 09:23 -0400
                Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-13 10:44 -0400
                Re: getting started with encryption Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-13 12:20 -0400
                Re: getting started with encryption "J.O. Aho" <user@example.net> - 2014-10-15 21:52 +0200
                Re: getting started with encryption gordonb.1o7q6@burditt.org (Gordon Burditt) - 2014-10-16 12:13 -0500
                Re: getting started with encryption Matthew Carter <m@ahungry.com> - 2014-10-16 15:25 -0400
                Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-18 08:13 -0400
                Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-18 07:52 -0400
                Re: getting started with encryption "J.O. Aho" <user@example.net> - 2014-10-18 14:46 +0200
                Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-19 07:47 -0400
  Re: getting started with encryption Denis McMahon <denismfmcmahon@gmail.com> - 2014-10-12 17:30 +0000
    Re: getting started with encryption bill <william@TechServSys.com> - 2014-10-13 08:59 -0400

csiph-web