Potential Client Project:
"HIPAA compliant WordPress website"

Me: Can you tell me more about the website you're trying to publish?

Client: Site for uploading patient medical test results

Me: 🤦‍♂️ Fuuuuuuck. Sorry, you're on your own.

WORDPRESS?!?!

Coolest bug is less of a bug and more of a feature. I've been working on a medical app and I used an open source backend which had almost everything I needed. To be hipaa compliant you have to encrypt all sensitive data - full db encryption was not something this backend was capable of.

So my solution was to encrypt the data on the client side and create a secondary server - that can only be accessed on my app server - to store and retrieve the keys.

If anyone's thinking of working on a HIPAA project - you're welcome

Client: "I need HIPAA compliance, with all data stored in Canada"

Why the hell are companies going to AWS and Azure instead of GCP??? I mean for Azure I understand compliance is a little easier with HIPAA and similar things but seriously.

GCP is so transparent about everything and it's simple for everyone.

Is anybody here (ISC)² certified? Do you find the certifications valuable in your career? Is it a certification you found you could self-study for?