Thursday, March 22, 2018

Going Off-Grid (part 4)


I use a program that monitors all the scripts that try to run in my browser (Firefox. Don't get me started on Microsoft! ;) It automatically blocks all scripts unless I give permission for them to run, which can be sent as a permanent or temporary permission. Recently, I've had some minor health concerns, and I had blood work done. The lab gave me information to set up a private account into their portal so I could see the results of my bloodwork and the doctors who have viewed it, including their notes to me. The first thing you want to look for when logging into a site that involves private information (medical or financial, for instance) is whether the web address begins with http or https. Https:// is what you want to see preceding the www address that you type. The “s” stands for secure, which means that your data is being encrypted by Transport Layer Security. It's not hacker-proof, but it's a layer of security that should be there. Imagine my surprise, as I was loading up my personal medical information on the https website, when my script blocker notified me that google analytics was trying to run! Why should Google be anywhere near my private medical data? I don't know what kind of information google analytics was set to analyze on that site, but in my opinion, that's possibly a HIPAA violation.

No comments:

Post a Comment