You should join our great online community now - you can win great prizes
Register now
You should subscribe to our free MyBroadband newsletter


+ Reply to Thread
Page 1 of 4 1234 LastLast
Results 1 to 15 of 58

Thread: Discovery HealthID: kiss your medical history's privacy goodbye

  1. #1

    Exclamation Discovery HealthID: kiss your medical history's privacy goodbye



    I would like to draw everyone's attention to the security flaws in the Discovery Health iPad app: there is no security at all. Furthermore, Discovery's servers will automatically trust any iPad that claims to provide "permission" from the client, and tell the iPad user anything they want to know about the user's medical history, claims, chonic conditions, and so on.

    My blog article gives more details, but essentially the problem is this: Discovery Health will publish your medical history to anyone who requests it, and you can't prevent it from happening. You can authorise it in advance, but you can't stop it in advance.

    If the doctor happens to lose his iPad on a plane, or have it stolen from his office, or even just accessed by someone in his office, there is nothing in place to prevent this from happening. And there are plenty of life insurance companies who would be most interested in knowing exactly what medication you claim for, how often you visit a psychologist or psychiatrist, and so on. Not to mention marketing companies.

    Right now we are protected because the information is scattered in diverse paper files and offline accounting systems, but the HealthID app aims to centralise it all on Discovery's servers, where they can look at the data captured by your doctor, along with their own.
    Donn Edwards
    Security Now! listener
    So We’re In Agreement Maxim: If you’re happy with your security, so are the bad guys.

  2. #2

    Default

    Are you sure there isn't a login required for each users information each time it is needed? Discovery is a smart company, I wouldn't expect them to put out an app with such a serious flaw.
    "The only things that are infinite are the universe and human stupidity, and im not sure about the former"
    Albert Einstein

  3. #3
    King of de Jungle LazyLion's Avatar
    Join Date
    Mar 2005
    Location
    District 9
    Posts
    96,668
    Blog Entries
    21

    Default

    This is great! Where can I download this app?
    Quote Originally Posted by Swa View Post
    It's ignorant to think that reason and science necessarily leads to progress.

  4. #4

    Default

    And there are plenty of life insurance companies who would be most interested in knowing exactly what medication you claim for, how often you visit a psychologist or psychiatrist, and so on.
    I cannot see that this will be a bad thing? Unless you are dishonest and claim fraudulently?

    Are you sure there is no login procedure?

    "The fool hath said in his heart, There is no God."

  5. #5
    Fudzy
    Guest

    Default

    Centralising the data is never a bad thing, access control is though. I'd wait for the system to be up officially. Have you tried sending these security findings through to them?

  6. #6
    Super Grandmaster
    Join Date
    Apr 2004
    Location
    Durbanville, Cape Town
    Posts
    29,721

    Default

    If this is true they should start scheduling court appearances.
    -
    Quote Originally Posted by lafrica View Post
    they (criminals ) are just trying to make a living .

  7. #7

    Default

    Sounds good. I like the idea. Is there an Android app?

  8. #8
    Super Grandmaster Hemi300c's Avatar
    Join Date
    Dec 2009
    Location
    PTA East
    Posts
    15,351

    Default

    In terms of the law and being a Financial Services Provider they will need to abide by the law and client information and the allowing of the information to get out will not be looked on lightly by the powers that be.
    ALL POSTS ARE IN MY PERSONAL OPINION
    "Pray for Our President Zuma and his party, Julius Malema, and Zimbabwean Robert Mugabe... Psalm 109:8".

  9. #9

    Default

    Quote Originally Posted by Hemi300c View Post
    In terms of the law and being a Financial Services Provider they will need to abide by the law and client information and the allowing of the information to get out will not be looked on lightly by the powers that be.
    Discovery Health is not a Financial Services Provider.

  10. #10

    Default

    Quote Originally Posted by 2012 View Post
    Discovery Health is not a Financial Services Provider.
    Yes, they are.

  11. #11

    Default

    Quote Originally Posted by Griz View Post
    Yes, they are.
    Last time I checked, Discovery Health didn't offer any Financial services - they are a medical aid scheme. The financial services are provided by Vitality/FNB.

  12. #12

    Default

    Quote Originally Posted by 2012 View Post
    Last time I checked, Discovery Health didn't offer any Financial services - they are a medical aid scheme. The financial services are provided by Vitality/FNB.
    Medical Aid = short term insurance -> Financial service.

    Check again.

  13. #13
    Fudzy
    Guest

    Default

    www.discovery.co.za

    Clear distinction between the different operating bodies.

  14. #14

    Default

    Discovery credit card...
    If your still here... You've still got mistakes to make.

  15. #15

    Default

    Quote Originally Posted by Le^stat View Post
    Discovery credit card...
    Re-branded FNB card

    here you go:

    In South Africa, we operate in the health insurance market through Discovery Health, the life assurance market through Discovery Life, the financial services market through Discovery Invest and DiscoveryCard and in the wellness arena through Discovery Vitality. All operating subsidiaries are 100% owned by Discovery.

+ Reply to Thread
Page 1 of 4 1234 LastLast

Similar Threads

  1. Replies: 54
    Last Post: 15-08-2012, 08:20 PM
  2. MWEB, you can kiss my money goodbye
    By louiss in forum ADSL and VDSL ISP Discussions
    Replies: 62
    Last Post: 09-06-2010, 09:36 AM
  3. SA kiss your cheap Xbox goodbye
    By tinman in forum Gaming Consoles: PS4, XBox 360,PS3, PSP, Wii, PC Vita, Wii U, 3DS, 3DS XL
    Replies: 0
    Last Post: 03-02-2009, 11:36 AM
  4. Discovery Medical Aid
    By Fuma in forum Off Topic
    Replies: 8
    Last Post: 30-08-2007, 08:54 PM
  5. Discovery Medical Aid
    By Angstrom in forum Off Topic
    Replies: 15
    Last Post: 15-01-2006, 10:30 PM

Tags for this Thread

Bookmarks

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •