Re: [Gnumed-devel] Hosting an encrypted pythonic simplehttp GNUmed server

[Karsten Hilbert]

On Sun, Aug 01, 2010 at 09:14:27PM +0200, Hilbert, Sebastian wrote:

> > On Sun, Aug 01, 2010 at 09:58:08AM +0200, Hilbert, Sebastian wrote:
> > > For access from an untrusted PC it might be reasonable to set up some
> > > sort of limited database where you would export only the patients you
> > > are likely going to access during your out of office visit.
> > 
> > Why not lug around a netbook if you intend to go to that length ?
> 
> It is far fetched. Often all you have available is a PC with internet 
> connection. You cannot control anything except the browser. So since you 
> cannot control it you only have the option to limit the data a hacker can get.
> 
> Before we start thinking about attacker there needs to be some code to attack 
> :-)

Before we worry about attacks on non-existing functionality
- why not use existing functionality with which we already
have some experience regarding the attack vectors ?

IOW, carry an ultra lightweight netbook which, these days,
are likely to be able to run GNUmed.

Karsten
-- 
GPG key ID E4071346 @ wwwkeys.pgp.net
E167 67FD A291 2BEA 73BD  4537 78B9 A9F9 E407 1346