News for hackers. Stuff that matters.

A comment on Equifax IT staff had to rerun hackers' queries to work out what was nicked. Parent comment

Re:Equifax IT staff had to rerun hackers' queries to work ou... by sterwill on Thursday September 20, 2018 @07:59AM (#18031586)
Although at-rest encryption of health data is an addressable part of US health regulations, not a required one, it's almost always done because it's easy and effective. Most electronic health records are encrypted at-rest.
[ Parent | on HN ]
Re:Equifax IT staff had to rerun hackers' queries to work ou... by specialist on Thursday September 20, 2018 @09:57AM (#18032466)
I should have been more clear.

I'm advocating Translucent Database techniques, where patient data is encrypted at the field and row (document) level. Much like a salted password file.

System level encryption still means the admins can still see the data. Therefore, breaches remain inevitable.

[ Parent | on HN ]