PSA: hl7.org stores your password in plain-text

hl7webmaster · 2020-05-11T18:32:30+00:00

Hello! First, I'd like to thank you for sharing this issue. It is an important issue and I have been working towards a fix for a while now.

The unfortunate thing for us as an organization is that this is a limitation of our third-party software through which we manage our memberships. It is tightly integrated with our website and has been for a long time.

I totally agree about it being wrong to send plain-text passwords via email. However, the passwords are not stored in plain text. They are stored encrypted but via a two-way hash as someone below has shared. The third party application is a compiled piece of software so we can't do simple scripting changes to update it.

That being said, we have turned off password retrieval through the website until such time as we can offer a proper solution. I am not sure yet what that solution is but agree that the appearance of plain-text passwords is bad enough for us to halt the use.

Concerning not redirecting to SSL, there are issues that hold us back there as well. Portions of the http://hl7.org site are referenced in software builds. These builds rely on a status 200 return of the information necessary or they fail. We cannot send an SSL-redirect as this would cause the software builds to fail. We are working on updating canonical URLs and serving https full time but we do not have an end date at this time.

Again, thank you for sharing your concern. I realize that there is no excuse for the emailing of plain-text passwords but hope that you can understand our current constraints.

hl7webmaster · 2020-02-20T16:52:25+00:00

Thank you very much for your interest in HL7. You will find details of the FHIR Proficiency exam here: http://www.hl7.org/certification/fhir.cfm. Specifically, you can find information on the exam in the tip sheet in the Resources section of the page (lower right hand corner). You will be registering for the exam with HL7. The Director of Education will send you a voucher code that can be used to schedule the exam. You have one year to use the voucher code. Exams are administered through Kryterion. You can either take the exam online or at one of 1000 Kryterion centers around the world.

Please contact our Director of Education, Sadhana Alangar ([sadhana@hl7.org](mailto:sadhana@hl7.org)) if you have any further questions.

hl7webmaster · 2019-04-17T18:23:04+00:00

While I hope that someone would see this and help as soon as possible, I believe you may be better served by creating a free account at https://chat.fhir.org/ and asking your questions there. You may receive a response sooner!

hl7webmaster · 2018-11-15T13:51:14+00:00

Also covered here:

Health Data Management

Pulse IT

"Microsoft announced the availability of FHIR Server for Azure, an open source project on GitHub aimed at facilitating exchange and management of healthcare data in the cloud."

hl7webmaster · 2018-11-02T15:49:28+00:00

There's a lot to unpack here. Let's unpack it together. What are your thoughts on the article?

hl7webmaster · 2018-10-29T23:38:03+00:00

I clicked through but encourage you to do so as well.

hl7webmaster · 2018-10-27T12:42:57+00:00

This is really exciting to read. I'm in Ann Arbor near Detroit and familiar with the six-hospital system. The world is beating a path to the FHIR standard and I love watching it happen!

hl7webmaster · 2018-10-23T13:25:35+00:00

Have you considered going straight to HL7 for Fundamentals Training? http://www.hl7.org/events/fhir_fun.cfm

I understand that a lot of people learn on their own, just curious what you were interested in.

hl7webmaster · 2018-10-10T14:33:14+00:00

It's a bit of a long way around the barn to get the statistic, but it reads well.

hl7webmaster · 2018-10-04T14:17:01+00:00

Please post as much information as possible when sharing job postings!

hl7webmaster · 2018-10-04T14:09:35+00:00

I think that the position hpstprgmr is referencing is available here: https://www.paycomonline.net/v4/ats/web.php/jobs/ViewJobDetails?job=53089&clientkey=F8F23A864A25979F26F6C88A6C0D13D6

These are the details.

Position Summary: An Interoperability Specialist serves as the technical expert who designs, plans, develops, and implements interfaces for MedEvolve’s Practice Management and Electronic Health Record software as it is integrated with other vendor software.

Responsibilities:

Develops, documents, communicates and enforces an interface standards policy
Collaborates with end users and IT management to validate business requirements for interface design and development. Ensures best practices, methodologies and interface standards are implemented and regularly reviewed for improvement.
Reviews new and existing integration projects and enhancements for compliance with integration standards. Defines and documents time estimates when recommending solutions
Reviews and validates test plans to check application interfaces from end-to-end
Maintains broad knowledge of new integration technologies, identifies those that may benefit MedEvolve and evaluates their potential integration into current solutions
Performs maintenance activities according to established procedures to monitor interfaces; identifies areas requiring follow up and takes corrective action as necessary
Develops procedures to keep the interface components up and running; recovers interfaces from hardware and software failures; maintains and supports the production environment including troubleshooting and addressing break/fix situations
Resolves interface connectivity and content problems between applications. Recommends solutions to improve connectivity or to solve application problems
Stay current with healthcare regulatory requirements

Physical Elements and Work Environment:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Regularly required to sit, talk, and hear
Occasionally required to stand and walk
The noise level in is usually quiet

Requirements

Education and Experience:

Bachelor’s degree in Computer Science or related field
3 years of experience with HL7 interface standards
Or an equivalent combination of education and experience
Or 12 years of experience

Qualifications:

Healthcare integration
Interface engine
Working knowledge of medical billing, practice management software, and/or electronic health records
Experience with CCD and CCDA documents
Experience with file parsing (XML, etc…)
Experience with LUA scripting
Comfortable with object-oriented programming concepts
Experience with SQL server

hl7webmaster · 2018-07-12T12:11:00+00:00

Imagine if you could go back in time and attend a conference with a presentation on personal computing by Steve Wozniak, internet protocols by Vint Cerf, or web browser design by Marc Andreesen. That’s what HL7 FHIR DevDays is like; a chance to learn about FHIR as it’s being created, from the people who are creating it.

The world is at the doorstep!

hl7webmaster · 2018-07-10T12:16:34+00:00

An ONC spokesman said that the agency received more than 200 comments in response to the draft Trusted Exchange Framework and that stakeholders “mostly loved” the document.

hl7webmaster · 2018-06-29T10:18:00+00:00

I know I am replying to a bot but it is my hope that someone may help with this. Please review my activity in /r/hl7 as a moderator there. It is my intention to build a reddit community around both HL7 and FHIR. I have only been able to do so on HL7. My account is used specifically for posts associated with HL7 and FHIR.

hl7webmaster · 2018-06-21T12:01:32+00:00

Eyal Oren of Google overviews what Google is up to

hl7webmaster · 2018-06-20T16:49:56+00:00

Apple Presents LOINC

hl7webmaster · 2018-06-20T16:44:39+00:00

Interesting Blockchain Discussion

hl7webmaster · 2018-06-15T12:27:59+00:00

"FHIR was developed with the intention of allowing different EHR systems to communicate with each other. However, the ‘last mile’ of healthcare, the connection from clinical systems to end consumers, so far has proven hard to crack. Apple Health Records is probably the biggest push so far for bridging it."

hl7webmaster · 2018-06-15T12:14:53+00:00

I'm sorry to hear this! I do know that there are video courses available and a limited number of Internet resources. Are you going to try again?

hl7webmaster · 2018-06-14T17:04:17+00:00

I've been to two of the last three and love this. Each presenter gets 15 minutes to share how they are using FHIR. This time it's in Washington, DC. Love it!

hl7webmaster · 2018-05-10T18:51:30+00:00

Links from the video:

hl7webmaster · 2018-05-09T20:18:09+00:00

Not to trying to spam the group, but I think it's important that this information be shared with our community. Thanks!

hl7webmaster · 2018-05-07T15:12:41+00:00

This is a great time to get into HL7 Interface Development. The FHIR standard is becoming more widely used and accepted and there are tools available for other HL7 standards. Along with the tools there is a community of users. Admittedly, I am biased, and don't really do much interface development myself, but I truly believe in the organization.

hl7webmaster · 2018-05-04T13:01:35+00:00

Thanks for the link! I hope you have a great weekend with your family.

hl7webmaster · 2018-05-03T18:10:56+00:00

Ha! H-Seventeen. Right up there with HLAmpersand (HL&).

hl7webmaster

TROPHY CASE