Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×

Comment Re:Microsoft is right (Score 3, Informative) 105

From the PCI Security Standards Council "PCI Data Storage Do's and Don'ts":

Do not store any payment card data in payment card terminals or other unprotected endpoint devices, such as PCs, laptops or smart phones

And

At a minimum, PCI DSS requires PAN to be rendered unreadable anywhere it is stored – including portable digital media, backup media, and in logs.

Based on that information, I would say that PCs and, certainly in this case, game platforms (since the Xbox is really just a PC) would fall under the "endpoint device" category. Especially since the end-user has no control over whether or not that information is stored on their device because only Microsoft can alter the code that allows or disallows the storage.

Comment Re:Microsoft is right (Score 4, Informative) 105

Fortunately "reasonable" doesn't have to come into play here. PCI auditing standards exist so the human fallacies (potentially) of reason and common sense are mitigated by explicitly defined controls that anyone who deals with credit cards at all must adhere to. Someone like Microsoft, thankfully, would probably be even more scrutinized by auditors, not only because they are Microsoft, but because Microsoft would want to make sure they are compliant.

That being said, PCI, in part, states that credit card info must never be stored, cached, saved...etc., in any device that is directly accessible to the customer or attached to the vendor's network unless sufficiently encrypted with even more controls guarding the public and private encryption keys. Basically, no XBOX should ever store credit card information, only account information at the very least. Even then, the credit card info that CAN be saved on Microsoft's servers can contain the CC number, cardholder name, service code and expiration date (cardholder data), but it CANNOT store the PIN, magentic stripe data or CAV2 code (card authentication data).

Comment Re:Google Health (Score 1) 211

Excellent point, although I was speaking specifically about the release that a patient has to sign before having their records faxed over to another provider. There would have to be another type of approval set in place to allow a doctor to access the information, or some type of override by emergency workers in a situation where the patient is unconscious. I'll let the guys getting paid figure out the logistics.

Comment Re:In America... (Score 1) 211

That's goddamned hilarious, I hope you are modded appropriately...but you also kind of have a point. Would whomever develops this technology need to have separate storage for each patient's records, or could there be a central database of all the commonly used diagnoses that they could just link to? Otherwise, you're right...if you have to repeat "this patient is a fat ass" a bazillion times, it could take up quite a bit of space. I suspect, however, for security purposes and continuity (imagine if a table gets linked to the wrong patient and they are treated for a diagnosis that was meant for someone else) they would have to keep the data separate.

Comment Re:Google Health (Score 2) 211

I think the goal here is to make it so patients can see this information regardless of the physicians' practice management system. Granted, it's very cool that some EMR systems will produce these records, but wouldn't it be even better if they could all produce a standard format that could be read by other systems and not in some proprietary format (as they all currently are, except maybe a few open systems like OpenEMR)? This way other medical providers, not just patients, could have access to ANY patients' chart without having to get a signed release from the patient (assuming they are conscious) and then having to wait for their primary care physician to fax the barely-legible records over. Imagine the time saved in an emergent situation if all this information was just a few clicks away.

Of course, any time data is widely available like this you run the risk of having it leaked or stolen, but it's really the inevitable solution and the company that comes up with the standard format and develops a way in which all these practice management systems can share their electronic records while providing reasonable security for transmitting and storing these records, is the company that will change the way medical information is shared and will ultimately save lives, whilst no doubt becoming very, very rich.

Comment Fast, or big? (Score 1) 367

I understand what is being asked here, but shouldn't the correct phrasing be something like "How much throughput do you have?" or "What's your bandwidth?". Packet speed, which is what I hear when someone asks me how "fast" my internet connection is, has nothing to do with how many bits you can transfer in a given second.

Slashdot Top Deals

All power corrupts, but we need electricity.

Working...