News for hackers. Stuff that matters.
Re:FCC will require phone carriers to authenticate calls by ... by munk-a on Tuesday March 31, 2020 @06:49PM (#22743605)
I just wish various Doctors and Dentists could jump on the text/email bandwagon. Those two groups are responsible for nearly all of my phone usage - with a slim minority (that is itself mostly spam) being calls from my bank.
Re:FCC will require phone carriers to authenticate calls by ... by divbzero on Tuesday March 31, 2020 @07:05PM (#22743725)
Even with banks I do not trust incoming calls and always return the call using an official phone number from the bank’s HTTPS secured website.
Re:FCC will require phone carriers to authenticate calls by ... by dahart on Tuesday March 31, 2020 @07:34PM (#22744001)
> I just wish various Doctors and Dentists could jump on the text/email bandwagon.

Mine have already, and I assumed it was becoming ubiquitous already.

I'm frustrated with it because I get multiple texts, multiple emails, and multiple voice calls & voice messages for every appointment I make. I want maybe one text reminder the day before or a couple of hours before and no more, just in case I forgot to set my own reminder. But usually I do have it in my calendar reminding me anyway, just two more notifications on top of the 10 the doc/dentist sends me... :P

Re:FCC will require phone carriers to authenticate calls by ... by gumby on Tuesday March 31, 2020 @07:23PM (#22743883)
They are subject to HIPAA comstraints.
Re:FCC will require phone carriers to authenticate calls by ... by athenot on Tuesday March 31, 2020 @10:48PM (#22745113)
More precisely an over-cautious interpretation of HIPAA that happens to annoy patients and is specifically called out by HHS.

Note that an individual has the right under the Privacy Rule to request and have a covered health care provider communicate with him or her by alternative means or at alternative locations, if reasonable. See 45 C.F.R. § 164.522(b). For example, a health care provider should accommodate an individual’s request to receive appointment reminders via e-mail, rather than on a postcard, if e-mail is a reasonable, alternative means for that provider to communicate with the patient. By the same token, however, if the use of unencrypted e-mail is unacceptable to a patient who requests confidential communications, other means of communicating with the patient, such as by more secure electronic methods, or by mail or telephone, should be offered and accommodated.

Patients may initiate communications with a provider using e-mail. If this situation occurs, the health care provider can assume (unless the patient has explicitly stated otherwise) that e-mail communications are acceptable to the individual. If the provider feels the patient may not be aware of the possible risks of using unencrypted e-mail, or has concerns about potential liability, the provider can alert the patient of those risks, and let the patient decide whether to continue e-mail communications.

https://www.hhs.gov/hipaa/for-professionals/faq/570/does-hip...

Re:FCC will require phone carriers to authenticate calls by ... by ianmcgowan on Tuesday March 31, 2020 @08:01PM (#22744187)
There's something in HIPAA saying how the provider is to contact you? Over which channels? I'm sceptical. I get texts from my dentist and in-app notification from doctor.
Re:FCC will require phone carriers to authenticate calls by ... by gumby on Tuesday March 31, 2020 @08:09PM (#22744252)
You have to ensure a channel that doesn’t gratuitously leak. Email took a very long time to be accepted, especially after things like hotmail and especially gmail arrived.

This is why fax is still so common in medicine and law (in law there’s also a belief that a fax confirmation says it’s been delivered, if not read, while email is considered less reliable / more easily deniable.