Healthcare security: The Dangers of Writing Login Details on Whiteboards
Bork!Bork!Bork! Today's bork is entirely human-generated and will send a shiver down the spine of security pros. No matter how secure a system is, a user's ability to undo an administrator's best efforts should not be underestimated. This is especially true when it comes to healthcare security, where sensitive information is at stake.
Imagine a whiteboard in a medical center, displaying usernames and passwords for system access. This is not a rare occurrence, as our eagle-eyed reader discovered. While it's a step up from a Post-it note stuck to the screen, it's still a major security risk. After all, not only is the account exposed, but anyone can use it, rendering an access log somewhat redundant.
The National Health Service has guidelines regarding passwords, but these rules do not include 'for goodness sake, don't put the username and password on a whiteboard for everyone to see.' It's a simple yet crucial reminder that security measures should be taken seriously.
Thankfully, passwords are on their way out. According to the UK's National Cyber Security Centre (NCSC), passkeys 'solve the main security problems we have with passwords.' They are generated securely, can't be guessed or phished, and are unique for each website, reducing the risk of one compromised website affecting others.
While passkeys are not a perfect solution, they are a significant improvement over public displays of private credentials. So, the next time you see a whiteboard with login details, remember the dangers and the importance of secure practices. And if you see one, don't be afraid to speak up - it could save someone from a major security breach. But here's where it gets controversial... What do you think? Do you think this is a minor issue or a major security risk? Share your thoughts in the comments!
