This system was built on Drupal in 2010. I'm guessing the more they modified the drupal core, the more bugfixed versions behind they fell behind (not to mention the rest of the LAMP stack). They've lost all customer data, meaning there was no airgapped, off the net backups. What scares me about this breach is, I have about 30,000 patients in my database alone. If this company has 1000 more customers like me, even half of that is still 15 million people on a list of people that "Smoke pot" potentially floating out there on the net. I guess because we're "Medicinal" it's no better than someone knowing a person takes Xanax for their nerves.
I feel like this company is playing on the ignorance of the general public when it comes to these types of IT security issues. I don't think people get how serious this is.What should I do? Do we still have lawyers on this site? (oldcountrylawyer?)
Anyone who defends this convenience-over-privacy should download and print Jihadi-type information, nuke plans, bio-weapons info, etc. through this service and see how long it is before there is a knock on their door.
Who on their right mind is going to spend hundreds of dollars for some minor functionality?
Back in the 1980s, I remember thinking "If only there was a way to have my girlfriend (at the time) send me her pulse so I could feel her love on my own wrist in real-time. Of course the technology wasn't there, and wouldn't be for some time, so I had to settle for her bloody heart in a jar and 25 years in a psychiatric hospital.
Yep. I have a friend who worked for a now-defunct ad placement firm. They hired people specifically for the purpose of figuring out ways around ad blockers. Of course that was dumb, because for people who are determined not to be tracked and force-fed ads, that simply makes them more determined to find ways to block things.
I recently went to renew my/. subscription because it has been some time since I last had. They are no longer offering subscriptions, not sure if it's temporary or not. One of the nice things with it was the option to turn off ads. I still run uMatrix and uBlock Origin on the site but still wanted to support them.
So it seems like they may be going straight for an ad & tracker supported model.