Rich Hickey on Datomic: Datalog, Databases, Persistent Data Structures

Post by siavosh » Thu, Apr 05, 2012, 5:15 AM UTC

tednaleid wrote: post #10

siavosh wrote: post #9

Earlier quoted context omitted.

I never understood Amazon's stance. Their whitepaper and case studies just says medical companies have built applications on our cloud. What they fail to mention is whether they were only able to do so by anonymizing the data prior to upload which means in fact there isn't any PHI on their clould. They seem to circumvent these disclosures for the obvious reasons of liability and the fact that today you really need a…

I worked for a company that had a large amount of HIPAA data on Amazon's EC2 platform. We did significant encryption (including field-level encryption) on the data to help mitigate security concerns. We were able to pass security inspections by 4 fortune 500 health companies with this model (though a couple of them needed significant hand-holding). It made querying that data a pain in the ass because you couldn't do…

Post by tednaleid » Thu, Apr 05, 2012, 4:18 PM UTC

siavosh wrote: post #11

tednaleid wrote: post #10

Earlier quoted context omitted.

I worked for a company that had a large amount of HIPAA data on Amazon's EC2 platform. We did significant encryption (including field-level encryption) on the data to help mitigate security concerns. We were able to pass security inspections by 4 fortune 500 health companies with this model (though a couple of them needed significant hand-holding). It made querying that data a pain in the ass because you couldn't do…

Thanks for the info. Just curious were the encryption keys stored on EC2 as well? Dataomic client/peer model is definitely interesting.