-
Thanks :)
The challenge is that the platform is kinda niche: it's for people who need to prove their health indicators to someone who doesn't intrinsically trust them. So for example, cleaners, buildings surveyors etc, or perhaps your ex with whom you share childcare. You just want to know they're probably not infected and at least taking the time to monitor their health.
The issue is that only way we can prove that someone's health indicator is what they say is by using timestamping which requires data to be uploaded to a server somewhere. I agree this does mean full and regular pen testing, security audits etc..
That said, the whole platform is pseudo-anonymous, so for the most part there's not a lot that a hacker can do with pictures of your thermometer readings. If / when we start timestamping copies of official test results then we will need to be even more careful.
You are reading a single comment by @freddo and its replies.
Click here to read the full conversation.
freddo
this sort of thing is not for me but site looks pretty good dude. even the clinical panel ;-)
but the FAQ about where data is stored. I would feel nervous about where I was putting my health data and would want to know more about where it was stored, if it was covered by GPDR etc. I would want to know you had pen tested the fuck out of it too
glws etc