Why would that be a problem? This is just a list describing a method. It can just as well be nailed to the door of the main entrance to Meta’s headquarters.

Presuming the software is working ans secure, is the time that passed since the last commit importang?

Maybe but openvpn is a complex beast with a huge attack surface. Wireguard is beautiful, minimal and even in your use cases no real problem to setup?

Why? Wireguard i a great protocol and Mullvad best in class with regards to privacy.

Debian-based custom built thing. Nothing special.

I have no such advice. I use a Linux basedd NAS myself.

What are those categories/apps?

Seems you also use a bit of freeBSD in your setup besides Linux. Still FOSS though!

The problem with incorrect transceiption exists with my secretary too. In the system I work in the secretary write my recordibg, sends it to me, I read it. I can edit the text at this point and then digitally sign it with a personal private key. This usually happens at least a day after being recorded. All perscriptions or orders to my nurses are given inannother system besides the raw text in the medical records. I can’t easily explain the practical workings but I really don’t see that the AI system will introduce more errors.

But I agree that in the event of a system failure, there will be a catastrophic situation.

Ah sorry, I mean removing the option of using the keyboard as an input method in the medical records system. The keyboard itself isn’t physically removed from the computer clients.

But I agree that in the event of a system failure the hospital will halt.

Unfortunately the interface of the medical records system will be changed when this is implemented. The keyboard input method will be entirely removed.

Thats another issue and doesn’t lessen the importance of this issue. Both are important but separate. One is about patiwnt data, the other about my voice model. Also in thsi case I have no control over the mesical records and it’s already stored outside the hospital in my case.

Sure that’s another problem but this data is already sent beyond the hospital. We have a national system in place gatjering all medical records.

My biometric data, in this case my voice. Training an AI, tailored to my voice, out of my control, hosted as a cloud solution.

Of course there is an aspect of patient confidenciality too, but this battle is already lost. The data in the medical records is already hosted outside of my hospital.

I take this as humour - I understand my situation and IT suite isn’t more insecure than many others :)

I don’t know if it’s common practise in other countries. In Sweden where I work it is. I think the rationale is the following:

• It’s a lot faster to use a voice recorder.
• A doctor’s time is worth a lot more than a secretary’s (in the sense of pay and rarity)
• Using a voice recorder lets us review lab results, radiology etc at the same time as recording, not having to switch between tasks. -Doctorss wont have to be good spellers or think about building well thought out sentences. We also dont have to look up classification codes for procedures and diagnoses. All this will be done by the secretary.

Of course we have to review the teanscribed result. At my hospital, all doctors carry smart cards and use the personal stoed private key to digitally sign every transcribed medical record entry.

I agree and I suspect this planned system might get scuttled before release due to legal problems. That’s why I framed it in a non legal way. I want my bosses to understand the privacy issue, both in this particular case but also in future cases.

Yes I agree. Broadening the scope a little, I frankly just wait for a big leak of medical records. The system we use is a birds nest of different softwares, countless API:s, all sorts of database backends. Many systems syem from MS-DOS, just embedded in a bit more modern integrated environment. There are just so many flaws and I’m amazed a leak hasn’t happened (or at least surfaced) yet.

I’m not sure what exact service will be used. I won’t be able to type as the IT environment is tightly controlled and they will even remove the keyboard as an input device for the medical records.

I understand the fight will be hard and I’m not getting into it if I cant present something they will understand. I’m definetly in a minority both among the admin staff and my peers, the doctors. Most are totally ignorsnt to the privacy issue.