This morning, I went to the doctor for a scheduled appointment. While she was looking at the results of blood tests from two years ago on the screen (and suggested repeating them for a follow-up), I realized she was using Windows 11. A detail came to mind. The doctor is extremely polite and friendly, so I asked her, “How do you handle the feature called Recall?” The doctor was taken aback and had no idea what I was talking about. I was about to drop the conversation, but she, being a serious professional, immediately called the technicians who manage their PCs to ask for clarification. They downplayed it, saying it’s not an issue and that it’s a feature “on all PCs, so we can’t do anything about it.” She started to express that she didn’t like it and wanted it deactivated. No luck: they won’t proceed because, according to them, even deactivating it is “a hack that could compromise future updates.” She’s furious and will talk to her colleagues and the decision-makers. She wants secure systems because “there’s patient data involved.”
In reality, patient data is stored on servers (which I haven’t investigated), but everything that appears on the screen is, in my opinion, at risk.
I’ve offered to help them find a solution—because, if I’m right, all they need is LibreOffice and a browser. In that case, I’ll suggest one of the *BSD or Linux systems and do it for free.
I don’t want to make money off my doctor. I just want patient data to be (sufficiently) secure.
#IT #Recall #Windows #OwnYourData #Security #Privacy #RunBSD #Linux
@stefano using Windows to browse a hospital web and edit some documents is like driving a 1-ton truck to buy bread in a corner shop.
She could use less than a half of computing resources and energy, yet achieve the same without Windows 11.
I can understand why Windows is popular in home computing. But at industry level? Do they use kitchen knifes to perform surgery too?
@[email protected] I agree. the problem isn’t the doctor, here. The problem is that the (small) shop that is providing and maintaining those PCs is treating them as a normal, home installation
@stefano Weird. Isn’t it clear to the clinic that they’re also bound to follow a guide to good practice for information security in handling personal health data?. Haven’t they heard about the GDPR?.
What’s worse, don’t they realize that their insurance company will have a clause in the contract to screw them over if they mess up like this?
@release_candidate
@[email protected] My 2¢? Dumb terminals for small/medium clinics. Yeah, I know. Unpopular 😂
@[email protected]