[ale] Two talking stories

[Jonathan Rickman]

On Mon, 20 May 2002, Thompson Freeman wrote:

> Just for chuckles and grins, give the words a chance. They may be
> instructive for the rest of us

I don't think they'll be very instructive, but I had a few words with an
attorney friend (who also happens to be a geek) about this over lunch the
other day and he had some alarming thoughts. We were discussing the new
HIPAA regulations that apply to the health care world. We were
specifically discussing the liability issues with regards to compromised
health records and the litigation that could follow. He asked if I'd read
the article and pointed out that a crafty lawyer could make good use of
that testimony in a case against a health care organization that had
suffered a compromise involving MS software. He outlined a few arguments
that could be used. Now, I'm not a lawyer, but I must admit that the
arguments (if allowed by the judge) would be VERY convincing. Most of us
have known for years that if you choose to run MS software on critical
systems accesible on the Internet, you do so at your own peril. This
certainly puts a new spin on that issue.

-- 
Jonathan Rickman
X Corps Security
http://www.xcorps.net


---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.