Live data from Hacker News

Medical cannabis patient data exposed by unsecured database

wired.com

21–30 of 73 posts

Re: Medical cannabis patient data exposed by unsecured database

#21
post #6

my neighborhood weed guy would never betray my trust in this way.

Mine once asked if I'd like a referral to a doctor who was quite liberal in approving people for medical cards in my jurisdiction. I said, "And end up being tracked as a known user in a government database? No thanks." Safer on the streets.

Re: Medical cannabis patient data exposed by unsecured database

#23
post #22

Why is the database not named?

Because they want you to click one more time to the other article that names it. https://www.websiteplanet.com/news/ohio-medical-alliance-bre...

I did click that -- it didn't have it listed either...

I think I wasn't clear, I wanted to know which database system people were using (i.e. Postgres, Mongo, etc). You can't even run Postgres in a container without a password these days, how could someone do a whole production deployment without a password.

Re: Medical cannabis patient data exposed by unsecured database

#25
post #11

Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to Website Planet about an unencrypted and non-password-protected database that contained 957,434 records. The database belongs to an Ohio-based organization that helps individuals obtain physician‑certified medical marijuana cards. The database held PII, drivers licenses, medical records, documents containing SSNs, and other internal potentially sens…

More evidence cannabis needs to be recreational. We can let people use their FSA money for it and/or give a steep discount to people who "really" need it, like cancer patients... but I think a lot of people who bounce between Anyways, there are a LOT of little fly by night outfits that "help" you get a medical card in many states. It's a joke, and all it does is empower the same type of person who used to be a pill d…

This seems totally unrelated to whether cannabis should be recreational. If my insurance company leaked my PHI, that would certainly not be evidence that any of my prescriptions should be OTC.

Re: Medical cannabis patient data exposed by unsecured database

#26
post #11

Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to Website Planet about an unencrypted and non-password-protected database that contained 957,434 records. The database belongs to an Ohio-based organization that helps individuals obtain physician‑certified medical marijuana cards. The database held PII, drivers licenses, medical records, documents containing SSNs, and other internal potentially sens…

More evidence cannabis needs to be recreational. We can let people use their FSA money for it and/or give a steep discount to people who "really" need it, like cancer patients... but I think a lot of people who bounce between Anyways, there are a LOT of little fly by night outfits that "help" you get a medical card in many states. It's a joke, and all it does is empower the same type of person who used to be a pill d…

I could get behind this so long as there’s still limits on your person and in public places. Colorado has a great system. However, legalization has only created weed monopolies by abuse of the law language. Essentially making it illegal for smaller shops to compete.

Those same people are the ones contracting out these systems with local governments.

Re: Medical cannabis patient data exposed by unsecured database

#27
post #9

free bank accounts for money laundering (new account online, new coinbase account online, stuff new account with cash, transfer to coinbase, transfer onchain, swap to monero, wait, access all with new mac address, new wifi, new browser session, or Tor if the services allow) daily reminder that KYC is a joke, the institutions and enforcement agencies that think it works, don’t know when its not working as long as a re…

Now show cashing out. This isn't meant to be a gotcha or a takedown, as I appreciate that you're one of the few HN users knowledgeable about crypto who isn't a shill or dismissive of crypto out of hand. For those who aren't familiar with this industry, there are folks whose job it is to solve these problems with KYC being less effective than it ought to be. Many work in industry as devs, and many do the same as part…

You cash out in your personal account by launching a memecoin and buying a tiny bit on launch (or minting extra for yourself)

the baked xmr funds are once again swapped into virgin addresses that all buy your memecoin, with your clean funds you sell your position into the liquidity pool of the pumped coin

it looks the same as any other launch. are they bots, are they retail degens? who knows, pay capital gains tax and move on.

you can modify this by having the virgin addresses with dirty funds launch and pump the coin too, as long as your clean address buys near the beginning and sells into liquidity

this can all be scripted and done with unlimited amounts, a “bundler” can manage many virgin addresses with a nice GUI now, specifically to be multiple buyers and sellers of a launch

you can unlink your clean funds in less (or equally) restrictive ways for other reasons and privacy, but its clean enough to pay taxes on and be free and clear

Re: Medical cannabis patient data exposed by unsecured database

#28

Earlier quoted context omitted.

Now show cashing out. This isn't meant to be a gotcha or a takedown, as I appreciate that you're one of the few HN users knowledgeable about crypto who isn't a shill or dismissive of crypto out of hand. For those who aren't familiar with this industry, there are folks whose job it is to solve these problems with KYC being less effective than it ought to be. Many work in industry as devs, and many do the same as part…

You cash out in your personal account by launching a memecoin and buying a tiny bit on launch (or minting extra for yourself) the baked xmr funds are once again swapped into virgin addresses that all buy your memecoin, with your clean funds you sell your position into the liquidity pool of the pumped coin it looks the same as any other launch. are they bots, are they retail degens? who knows, pay capital gains tax an…

That isn’t cash, that’s just more crypto, or am I reading you wrong?

The liquidity pool will get you back into mainline cryptos, but then what?

Re: Medical cannabis patient data exposed by unsecured database

#29
post #11

Earlier quoted context omitted.

More evidence cannabis needs to be recreational. We can let people use their FSA money for it and/or give a steep discount to people who "really" need it, like cancer patients... but I think a lot of people who bounce between Anyways, there are a LOT of little fly by night outfits that "help" you get a medical card in many states. It's a joke, and all it does is empower the same type of person who used to be a pill d…

This seems totally unrelated to whether cannabis should be recreational. If my insurance company leaked my PHI, that would certainly not be evidence that any of my prescriptions should be OTC.

IMHO only reason cannabis is illegal is it's a threat to Pharma Industry, Pharma Lobby, aka organized, legal crime.
Post reply on HN