An anonymous reader writes: It appears that most pharmacies in the US are interconnected, and a breach in one leads to access to the other ones. A security advisory released [Friday] shows how a vulnerability in an online pharmacy granted access to prescription history for any US person with just their name and date of birth. From the description linked above: During the signup process, PillPack.com prompts users for their identifying information. In the end of the signup rocess, the user is shown a list of their existing prescriptions in all other pharmacies in order to make the process of transferring them to PillPack.com easier. … To replicate this issue, an attacker would be directed to the PillPack.com website and choose the signup option. As long as the full name and the date of birth entered during signup match the target, the attacker will gain access to the target’s full prescription history. Read more of this story at Slashdot.
See more here:
Hacking the US Prescription System
An eReader lets travelers bring thousands of books with them on their journeys, but what if each of those stories was customized to wherever they happened to be at the moment? Read more…
If you ever thought Hulu was only half-heartedly committed to winning the streaming TV wars, think again: the online service just slapped down “just under $1 million per episode”, securing the rights to every minute of Seinfeld ever aired. Read more…