Thursday, September 27, 2007

A Note and a Follow Up On Sermo

Filed under: Medgadget Exclusive

There will be no other posts today, as we are recovering from overnight calls and other clinical duties.

In other news. The Sermo (and other physicians-only networks) security vulnerability story continues to reverberate across different media channels. Xconomy, a Boston business publication, has published a story yesterday, Sermo Strikes Back: A Physicians' Online Community Lashes Out Against Bloggers Who Publicize Security Gap. Though a balanced story, they never ask Dr. Palestrant and Co. the hard questions about the continuing susceptibility of Sermo's network. Dr. Palestrant still lies that they beefed up security by introducing a patch that features new authentication protocols based on "data that should be available only to the individuals."

The truth of the matter is that Sermo does not have any better information about American MDs than anyone else. Hence, they still rely on publicly available data. On the other hand, if it is true that they do have our private data, we want to know what private data they have and where they got it from.

In other news, as Xconomy is reporting, Medgadget members got quite an ire from some vocal Sermo members. In addition to ire, we got libeled by an anonymous posting inside Sermo. When we contacted the company, they sent us a legal response that they have a "policy of allowing the free exchange of information posted by physicians." It seems now that anonymous libel and slander against two physicians is the information that Sermo is proud to contain.

As you can assume, we will be working on the Sermo story for the foreseeable future. Stay tuned.

More: Medgadget's Guide to Hacking into Social Networks for Doctors ...; Confirmed: Sermo Is Not for Physicians Only; New Important Questions Raised ...; Open Letter to Dr. Daniel Palestrant, CEO of Sermo.com...; Sermo Improves Registration Security; Needs to Do More ....

Update: Mexican Medical Student has an excellent overview of the security issues involved in private social networks here.

email this article to a friend      print this!           comments and peer reviews (3)






replies: 3 comments
Open comments are not moderated, although abusive and vulgar remarks may be deleted. Opinions expressed do not necessarily reflect the views of Medgadget.com. Please consult our disclaimer.

Medgadget,

Would love to get your thoughts on Joe's comment at:

http://www.xconomy.com/2007/09/26/sermo-strikes-back-a-physicians-online-community-lashes-out-against-bloggers-who-publicize-security-gap/#comment-1607


Posted by:
on September 28, 2007 04:03 PM GMT

Here's the reply I posted to Joe at Xconomy.

Joe,

You do make good points about the business model, but frankly its not our position to judge them too much on that. What they’re doing is interesting, and could potentially be useful. We’ll see.
Regarding non-MD’s entering the site, the issue is not that outsiders can get access to read what’s there, but rather that outsiders can actually post. So, imagine a new drug, a pharma that implants a couple dozen trolls into Sermo, and then some investors ask Sermo’s doctors questions about the drug. Lo and behold, these trolls have substantial experience and great accolades for the new drug. Also, since the FDA is conducting a review of Sermo of whether they can milk it for early info on unknown side effects, imagine a competitor that gets some people in to write libel against a drug or device. This can lead to all sorts of hassles for the company.
So, the point is, if its a doctors only network, and because people are paying tens of thousands for the network’s opinions, then you need to get a better system, or call yourself a fraudster.
As for Dr Palestrant’s opinion that guaranteed security is impossible, I’d like to ask him how he got his MD license, and what methods that agency used to verify that he actually is Mr. Palestrant. Until then, I can only be sure that he is a white male with a knack for starting and selling companies very quickly. Also, it is not clear whether he actually wants to be a doctor, seeing how he’s only 33, and his last two jobs have been starting and then selling internet companies. You’re probably also wondering when was the last time he saw a patient, and how many he has had since being boarded. Oh, wait, I don’t think he finished his residency, as is gently implied in his bio:
“…completed medical school at Duke University, and trained in General Surgery at Beth Israel-Deaconess Hospital, in Boston before leaving to launch Sermo.”

Last question. How much would you put down on whether he will ever practice medicine again after he sells Sermo to some fools for $100 million?

Mr Palestrant, since you’re reading this, I do like that smirk on your face as you agree with me and do enjoy your achievements so much. Much luck, and may you never work a day in your life.


Posted by: Bruder
on September 28, 2007 04:58 PM GMT

Everybody by now is fully aware as to flaws in security of signing in by physicians only. It would be helpful
if any physician or otherwise to detail what would be ideal requirements for logging into a physician site only.


Posted by: Sinclair
on June 25, 2009 11:41 AM GMT

add a comment
html tags: <b>, <i>, and <a>
examples: <b>Bold</b> <i>Italic</i>









Remember personal info?
(anonymous comments allowed)



click to make your selection boldclick to make your selection italicclick to add a link


Verification (needed to reduce spam):




Click the "Post" button only once!