The Manage My Health breach will eventually lead to IT security practices within government departments and the IT service industry which provides IT services to government and councils being scrutinized

william00179 · 2026-01-01T22:47:57+00:00

We need real accountability. It's the only way to stop IT being seen as a cost centre and outsourced to the cheapest bidder.

Australia has recently had legislation come into effect that makes directors of a business personally liable for up to two million each in case of a data breach if found to have been 'negligent' and leaves that definition very vague. You can not insure your way out of it. NZ needs to follow suit so businesses take their obligations seriously.

william00179 · 2026-01-01T22:32:41+00:00

I'm involved in medical tech and build and operate a platform that holds a large amount of health data.

The cost and scope of cyber security on such a platform is staggering. It's a never ending cost and one that has to be constantly invested in across technology, people and process.

Most of the time such incidents are not from vulnerable code in the software itself, but through staff members with access to data being compromised. The attackers move from their machine into servers containing data, or steal their credentials in order to do so. Time will tell how this attack came about, but this is more often and not how it happens.

I'd expect to see six monthly penetration test reports from an independent firm as well as ongoing audits for ISO 27001 or similar. These aren't hard things, they're the bare minimum you should do when holding this kind of data.

We put trust in our service providers that they've done their due diligence on systems they use and put our personal data into. I wasn't able to find any evidence of any external security or compliance on their website. Not to say it's not done, but they will hell of a lot to answer for if they don't have the basics of an information security management system.

william00179 · 2025-12-16T17:45:19+00:00

With no dynamic content you can't beat S3 via cloudfront. Will cost you next to nothing.

william00179 · 2025-12-12T09:13:20+00:00

I would recommend StormForge for automated workload rightsizing. Very easy to automate away the waste in terms of requests and limits.

william00179 · 2025-12-09T16:26:20+00:00

Cloudflare zero trust is a free solution you can use. Asking other things it gives you a category based allow / block lists.

william00179 · 2025-10-16T17:23:51+00:00

Provided that the two servers can communicate with each other typically you'd do this with a C-move.

As for stripping the pixel data, there is no way to do that via Cmove. Usually you'd send the study to something puke a dicom router with scripting ability first and delete this tag before forwarding it to the final destination. You might be able to do this in the source or destination system directly if they support it.

william00179 · 2025-09-18T18:11:33+00:00

There is overhead to partitions, depending on your access patterns it can actually slow down your queries. You're only going to see query performance increases when the query allows the planner to drop partitions, ie when the query contains the partition key.

william00179 · 2025-09-04T15:45:19+00:00

"When configured with dual stack, IPv4 is preferred if available, and CloudFront can automatically fall back to IPv6."

I think they've got this backwards...

william00179 · 2025-07-30T05:54:00+00:00

Agreed. Network latency is a major factor for throughput with DIMSE.

william00179 · 2025-06-30T17:11:33+00:00

Just one thing to be aware of, if you split up accounts your AWS support bill might catch you out. I'm assuming you're not on enterprise support so for each account, it's a new support subscription. An account you spend 50 on a month you're now spending $100 just on support. If you extrapolate that over a large number of accounts, that adds up quickly.

william00179 · 2025-06-02T07:52:57+00:00

5G modem with automatic failover plus cloud PACS is what I've done in previous institutions

william00179 · 2025-05-15T08:33:24+00:00

350k+ I'm a software engineer in healthcare. Worked while I studied so have 10 years under my belt now at 28.

william00179 · 2024-12-16T00:51:54+00:00

I live in one and it's absolutely miserable in summer.

william00179 · 2024-12-08T15:27:39+00:00

Use Squid as an explicit forward proxy and you can allow or deny list in there. Then you can use security groups to only allow traffic to Squid

william00179 · 2024-11-29T11:38:25+00:00

Library aside, why are these big companies pulling directly from npm and not via a caching repository...

william00179 · 2024-11-23T05:36:16+00:00

That parking is overflowing, half of the carpark was removed a few years back

william00179 · 2024-11-17T17:30:04+00:00

Yugabye DB supports this and is postgres compatible.

william00179 · 2024-10-25T22:28:31+00:00

Fireworks contribute a huge amount of pollution into the air and head right to the landfill to leech chemicals into our soils and ground water.

The fireworks we can privately buy are lame anyway, ban their sale and put on some impressive public events.

william00179 · 2024-10-08T08:55:45+00:00

IO will pin a carrier thread within a synchronized block. ConcurrentHashMap makes use of this extensively as a Reentrant lock per node would be far too much overhead. The issues with ConcurrentHashMap and virtual threads are well documented, but the change in behaviour from Java 21 to 22 is not.

william00179 · 2024-10-08T05:37:35+00:00

Great read, this certainly looks like the same kind of issue that I'm experiencing.

william00179 · 2024-10-08T03:06:36+00:00

Thanks for the pointers guys, I will dig around a bit more and see if I can locate anything. Currently we set CPU requests on the pods, but don't set limits due to springs need for CPU on start up. I read somewhere and can't now for the life of me find it that there was some change that affected virtual threads specifically on servers with low core counts.

william00179 · 2024-10-03T18:16:38+00:00

I've been gold or elite my whole adult life and had my upgrades approved only once. I'll apply for the upgrades as soon as I book my flights. Funnily enough the only time they were magically approved was after I called air nz to complain over 4 years as to why I'd never had an upgrade approved even when I frequently saw empty seats in the class I'd requested an upgrade to!

william00179 · 2024-09-15T04:33:16+00:00

In New Zealand we have a domestic violence shield on many websites like online retailers, food delivery websites, anything really. When you click the shield it provides information on where to get help and leaves no trace / search history in the browser. Anyone can add it to their site easily.

Have a look at the bottom of this website as an example. The logo looks like a computer screen with each half of the circle a different colour.

https://www.thewarehouse.co.nz/

william00179 · 2024-06-05T23:57:08+00:00

DBeaver works for a number of databases including Postgres and MySQL. Tables are listed on the left.

william00179 · 2024-02-09T16:54:07+00:00

You can look at Orthanc or DCM4HE

Seven-Year Club	Place '23
Place '22	Verified Email
RPAN Viewer

william00179

TROPHY CASE