Critical CVS App Flaw Shared Private User Data on 40+ Servers

Critical CVS App Flaw Shared Private User Data on 40+ Servers

www.idropnews.com/news/critical-cvs-app-flaw-shared-user-data-on-40-web-servers/48075/

Critical CVS App Flaw Shared User Data on 40+ Web Servers

Researchers affiliated with the International Computer Science Institute in Berkeley, California, have discovered a flaw in U.S. pharmacy-giant CVS’ iOS app, which has apparently been causing the mobile application to “inadvertently share users’ location data with more than 40 web servers.” That’s according to Serge Egelman, director of user security and private research at ICSI, who shared his team’s findings with both CVS and the International Business Times this week.

According to the report, Egelman and his team discovered the “critical privacy flaw” within the CVS Pharmacy mobile app’s in-built Store Locator feature, which results in the app dispatching the user’s precise GPS coordinates to “dozens of third-party web servers.” Egelman said he and his team “could not imagine a legitimate reason” why an app like CVS’ would share customer’s location data with so many third-party sources.

How Does This Happen?

The CVS Pharmacy mobile app for iOS comes standard with a GPS-driven Store Locator feature, allowing shoppers to locate and get directions to their nearest CVS pharmacy location by merely sending their GPS location data directly to one of the company’s servers. Sounds fairly simple and harmless enough, right? Well, Egelman and his team unfortunately found that the CVS app was inexplicably sending these vital customer details to “any other server that loads on the CVS store locator’s web page.”

“We double checked our logs and even manually re-tested the app. It wasn’t an error; we were able to reproduce this result every time, on multiple versions of the app,” Egelman said about his team’s efforts to pin-point the issue in a blog post, while adding that he believes “the most likely explanation is simply really poor software engineering practices.”

Researchers went on to say they have no idea why or how the CVS app would be voluntarily configured to function the way it was found, but Egelman has nevertheless reported contacting CVS and sharing his team’s findings with them.. As for CVS’ response? Well, it certainly begs a few more questions than it answers: “[CVS] does not share your location or information with any third parties,” the company allegedly said in response to Egelman’s email. “You may, however, if you are not using our app, turn off the locations.”

 

Aetna hit with lawsuit over HIV-status privacy breach

Aetna hit with lawsuit over HIV-status privacy breach

http://www.fiercehealthcare.com/payer/aetna-hit-lawsuit-over-hiv-privacy-breach

Aetna is facing a class-action lawsuit filed on behalf of customers who claim their privacy was breached when they received a letter containing a reference to filling HIV medications that was visible through a window in the envelope. 

The issue came to light last week when two advocacy groups—the Legal Action Center and AIDS Law Project of Pennsylvania—issued a statement outlining the complaints they’ve received from Aetna customers who claim the mailings were seen by family members, roommates and neighbors. 

In response, Aetna issued a public apology and said it is “undertaking a full review of our processes to ensure something like this never happens again.” The insurer had also sent a letter to the 12,000 members who received the letters notifying them of the breach and their rights.

Now, though, the gaffe is a legal matter. Philadelphia-based law firm Berger & Montague filed a complaint (PDF) against Aetna on Monday in the U.S. District Court for the Eastern District of Pennsylvania, demanding that the company cease the practice, reform its procedures and pay damages. The lead plaintiff in the case, according to an announcement (PDF), is a Bucks County, Pennsylvania, man whose sister learned from seeing an Aetna letter that her brother was taking medications to prevent acquiring HIV. 

Aetna letter
This photo, provided by the Legal Action Center, shows a redacted mailing
sent to an Aetna member, which the group says revealed the member’s HIV
status through the window of the envelope.

“My law firm and the nonprofit legal organizations with whom we are working believe that the best way to ensure a remedy for the people who received the letters, and suffered harm, is to file a class action suit,” said Sarah Schalman-Bergen, a Berger & Montague shareholder. “We are committed to prosecuting this matter and making sure that this never happens again.”

Indeed, the lawsuit noted that this isn’t the first time Aetna customers have complained about privacy issues related to their HIV prescriptions. Previously, the insurer settled cases brought by members who claimed its policy requiring them to fill HIV medications through mail order, rather than at a pharmacy, jeopardized their privacy. 

Thus, Aetna changed its policy and notified the affected members. But in doing so, it used a third-party mailing vendor, which sent the notices in an envelope with a “large transparent glassine window,” which in some cases made the instructions for how to fill HIV medications visible without having to open the letter.

These actions, the lawsuit said, “carelessly, recklessly, negligently and impermissibly” revealed HIV-related information of Aetna’s current and former members to their “family, friends, roommates, landlords, neighbors, mail carriers and complete strangers.”

When reached by email, an Aetna spokesman said the company had no comment on the lawsuit.

At least one state official, meanwhile, has also expressed concern about the privacy breach. New York Attorney General Eric Schneiderman tweeted last week that he sent a letter to Aetna asking for more information:

 

The Lead Vaccine Developer Comes Clean So She Can “Sleep At Night”

The Lead Vaccine Developer Comes Clean So She Can “Sleep At Night”

www.realfarmacy.com/the-lead-vaccine-developer-comes-clean/

Gardasil and Cervarix don’t work, are dangerous, and weren’t tested

Dr. Diane Harper was the lead researcher in the development of the human papilloma virus vaccines, Gardasil and Cervarix. She is the latest to come forward and question the safety and effectiveness of these vaccines. She made the surprising announcement at the 4th International Public Conference on Vaccination, which took place in Reston, Virginia on Oct. 2nd through 4th, 2009. Her speech was supposed to promote the Gardasil and Cervarix vaccines, but she instead turned on her corporate bosses in a very public way. When questioned about the presentation, audience members remarked that they came away feeling that the vaccines should not be used.

“I came away from the talk with the perception that the risk of adverse side effects is so much greater than the risk of cervical cancer, I couldn’t help but question why we need the vaccine at all.”  – Joan Robinson

Dr. Harper explained in her presentation that the cervical cancer risk in the U.S. is already extremely low, and that vaccinations are unlikely to have any effect upon the rate of cervical cancer in the United States. In fact, 70% of all H.P.V. infections resolve themselves without treatment in a year, and the number rises to well over 90% in two years. Harper also mentioned the safety angle. All trials of the vaccines were done on children aged 15 and above, despite them currently being marketed for 9-year-olds. So far, 15,037 girls have reported adverse side effects from Gardasil alone to the Vaccine Adverse Event Reporting System (V.A.E.R.S.), and this number only reflects parents who underwent the hurdles required for reporting adverse reactions. At the time of writing, 44 girls are officially known to have died from these vaccines. The reported side effects include Guillian Barré Syndrome (paralysis lasting for years, or permanently — sometimes eventually causing suffocation), lupus, seizures, blood clots, and brain inflammation. Parents are usually not made aware of these risks. Dr. Harper, the vaccine developer, claimed that she was speaking out, so that she might finally be able to sleep at night.

About eight in every ten women who have been sexually active will have H.P.V. at some stage of their life. Normally there are no symptoms, and in 98 per cent of cases it clears itself. But in those cases where it doesn’t, and isn’t treated, it can lead to pre-cancerous cells which may develop into cervical cancer.”  – Dr. Diane Harper

One must understand how the establishment’s word games are played to truly understand the meaning of the above quote, and one needs to understand its unique version of “science”. When they report that untreated cases “can” lead to something that “may” lead to cervical cancer, it really means that the relationship is merely a hypothetical conjecture that is profitable if people actually believe it. In other words, there is no demonstrated relationship between the condition being vaccinated for and the rare cancers that the vaccine might prevent, but it is marketed to do that nonetheless. In fact, there is no actual evidence that the vaccine can prevent any cancer. From the manufacturers own admissions, the vaccine only works on 4 strains out of 40 for a specific venereal disease that dies on its own in a relatively short period, so the chance of it actually helping an individual is about about the same as the chance of him being struck by a meteorite. Why do nine-year-old girls need vaccinations for extremely rare and symptom-less venereal diseases that the immune system usually kills anyway?

Out with the “old” and in with the “new” and “cheaper” ?

Someone has asked for some help in spreading Walmarts new directives. Many Walmart Rphs are in the mid to high 60’s per hour pay rate. The new goal is to have pharmacy managers at 55 per hour and staff at 52 per hour. This info came from a market manager that was at meeting in Arkansas last week. They are not terminating people for the usual business metrics like the three letter chain or for immunization metrics, but rather policy and procedures. The biggest area for terminations is coming from pharmacists using the restroom. Most Walmarts have a restroom within the gated area, however according to the policy and procedures below this leaves the pharmacy unattended and out of sight.The policy and procedures trump state laws that require a RPh to be in the building….according to Walmart they need to have the pharmacy in sight. One such Pharmacist was more than 3 feet out of the OTC section while helping a patient and was fired. Bathroom breaks are only at lunch when the pharmacy is closed. If you can help in any way it would be greatly appreciated. Many have been terminated for the bathroom thing and of course were replaced with someone will to take much less pay. Just like at CVS I’m sure most don’t review these policies to often.
Image result for Policy And Procedure Clipart

click on above graphic to pull up new policies and procedures

 
 

Everything you think you know about addiction is wrong

AG Jeff Sessions: This American War on Drugs

CLICK ON ABOVE LINK TO LISTEN

This American War on Drugs

Attorney General Jeff Sessions has signaled that he’d like to revamp the war on drugs. We take a look at the history of the battle, and how sensational media depictions of crack, heroin, and meth have helped fuel it. Plus: our Breaking News Consumer’s Handbook: Drugs Edition. Then, a look at how America’s first drug czar used racist propaganda to outlaw marijuana. And why the debate between treatment and law enforcement is blurrier than you might think. 1. Our Breaking News Consumer’s Handbook: Drugs Edition: a critical look at what the press gets wrong about drugs and drug addiction, featuring Dr. Debbie Dowell of the Centers for Disease Control and Prevention, Dr. Carl Hart of Columbia University, and author Maia Szalavitz. 2. Historian Alexandra Chasin and author Johann Hari tell the story of Harry Anslinger, the man who set our seeming eternal drug war in motion, and his ruthless pursuit of jazz singer Billie Holiday. 3. University of California Santa Cruz’s Dr. Craig Reinarman examines how American presidents encouraged and harnessed hysteria around drugs for political gain. 4. Journalist Sam Quinones argues for the importance of aggressive policing in the effort to end America’s opioid crisis.

More Wisdom from Ken McKim: Identity Crisis

facing losing his business, sued the state over its restrictions on how much he could be prescribed.

Intent On Reversing Its Opioid Epidemic, A State Limits Prescriptions

http://www.npr.org/sections/health-shots/2017/08/23/543955887/intent-on-reversing-its-opioid-epidemic-a-state-limits-prescriptions

A year ago, Maine was one of the first states to set limits on opioid prescriptions. The goal in capping the dose of prescription painkillers a patient could get was to stem the flow of opioids that are fueling a nationwide epidemic of abuse.

Maine’s law, considered the toughest in the U.S., is largely viewed as a success. But it has also been controversial — particularly among chronic pain patients who are reluctant to lose the medicine they say helps them function.

Ed Hodgdon, who is retired and lives in southern Maine, was just that sort of patient — at least initially.

Name a surgery, and there’s a decent chance Hodgdon has had it.

“Knee replacement. Hip replacement. Elbows. I’ve got screws in my feet,” he says.

 

Dr. Don Medd, an internist in Westbrook, Maine, has found that working with patients to find alternatives to opioids has helped many taper their dose and reliance on the drugs — and reduce side effects.

Patti Wright/Maine Public Radio

Hodgdon has rheumatoid arthritis. And along with each surgery came an opioid prescription for pain. At first he got some relief from the drugs, but it didn’t last.

“It just numbed it for a while,” he says, “and then I needed more.”

Though Hogdon kept increasing the dose, the pain never went away.

“And then I found Dr. Medd. That’s my angel right there,” Hodgdon says, nodding toward Dr. Donald Medd, a general internist in Westbrook.

Medd had already started to taper high doses among patients like Hodgdon before Maine put a cap on new prescriptions for opioids last July. The new limit allows a maximum of 100 morphine milligram equivalents (the standard used to measure potency for all prescription opioids) for most patients per day — with certain exemptions for some cancer patients, those in hospice care, and some others. Patients with existing prescriptions were, by and large, given a year to meet the new restriction.

Medd was ahead of the game because he’d noticed that many of his patients on high doses of opioids grew increasingly angry about their pain as time wore on, and tended to demand ever more medication. At the same time, they were struggling to function in daily life because of the drugs’ side effects.

“You know, at some point the medications get in the way of some sort of recovery,” Medd says.

Opioids were affecting Hodgdon’s mood and his memory. Medd worked with him to cut the dose he was taking every day by two-thirds and helped him get in touch with a psychologist for further help. Though Hodgdon still lives with some pain, he says his life is infinitely better.

“I can remember things,” he says. “I get along better with people.”

Despite success stories like Hodgdon’s, Medd says he initially opposed Maine’s law. He didn’t want the legislature to interfere with medicine.

But now he thinks the law gave a necessary nudge to many doctors. Compared to a few years ago, Medd says, he and colleagues in his medical practice have cut the number of their chronic pain patients who are on opioids by almost half — from about 1,500 to 800.

In nearly all counties in the state, the number of prescriptions for painkillers is dropping. It’s a trend that Gordon Smith, executive vice president of the Maine Medical Association, says was underway even before the law took effect.

“We had the fourth largest drop in the country,” he says, citing a 21.5 percent reduction in opioid prescriptions from 2013 through 2016.

The data only include the first few months after Maine’s prescribing cap went into effect, Smith says; he expects the law will accelerate further reductions.

“Now having said that, it’s not been easy,” he says. “It’s been particularly difficult for patients,” he says — specifically for the 16,000 patients on high-dose opioids who were expected to taper to the 100 morphine milligram limit by July of this year.

 

 

 

 

Brian Rockett runs a wholesale lobster business in Maine, despite his chronic pain from past injuries. He needs high doses of opioids to be able to work, he says, and his doctor agrees.

Keith Shortall/Maine Public Radio

“I was about four times above that,” says Brian Rockett. He operates a wholesale business buying lobsters on the Maine coast. Rockett started taking opioids years ago to ease the pain of injuries from racing motorcycles and boats. When he tried to taper the dose, he says, he had unbearable pain. So, he filed a notice of intent to sue the state over its restrictions on how much he could be prescribed.

“I just knew that I was facing possibly losing my business,” he says.

Rockett wasn’t alone in his inability to taper his use of the drug, and Maine lawmakers — like Dr. Geoffrey Gratwick, a state senator who is also a rheumatologist — took notice.

“A certain group of people simply cannot come off [opioids],” Gratwick says.

He recently pushed through a change to Maine’s law that allows broader exemptions, so that people with incurable, chronic conditions can continue to take high doses.

It put the decision about that back in the hands of the doctor and patient, Gratwick says, “where it should be.”

Under the revised law, Rockett was able to increase his dose, and dropped his lawsuit.

Even though more patients could, potentially, seek exemptions, Maine’s law is seen by its advocates as an important step. Recent data from the federal Centers for Disease Control suggest that nationwide, despite an overall decrease in recent years, the number of opioids prescribed still triple what it was in 1999.

Is Medicaid fuelling the opioid crisis?

Is Medicaid fuelling the opioid crisis?

http://www.americanthinker.com/blog/2017/08/is_medicaid_fuelling_the_opioid_crisis.html#.WaLj3FFxk_4.blogger

Without thinking much about it, someone who overdoses on prescription opioids of heroin can just keep going right back to Medicaid for more easy access to the drug that nearly killed them the first time. The state just keeps paying for it.

Which is why, according to a new study, Medicaid recipients are three times more likely to overdose on opioids than people on private insurance.

Sure, it’s easy to dismiss the opioid crisis as a phenomenon peculiar to people at the bottom of the socioeconomic ladder. But obviously, there are causes and mechanisms here, which is why the numbers are coming in as they are. It’s not just the supposed character flaws of those taking these opioids that is at work, it’s the drug dealer that accommodates them on the other side, which in this case, the state. Dependency on the state seems to be fuelling dependency on drugs as much as anything.

According to the Washington Free Beacon:

The study evaluated Medicaid claims in Pennsylvania from 2008 through 2013 for those individuals ages 12 to 64 who had experienced a prescription opioid or heroin overdose. There were 6,013 cases found—3,945 were individuals who overdosed on prescription opioids and 2,068 overdosed on heroin.

According to data from the Centers for Disease Control and Prevention, individuals on Medicaid are three times more likely to have a risk of opioid overdose than those who are privately insured.

Fifty-nine percent of those who overdosed on opioids were given opioid prescriptions after they overdosed, and 39.7 percent of those who overdosed on heroin were given the same.

“Our findings signal a relatively weak health system response to a potentially life-threatening event,” said Julie Donahue, Ph.D., who authored the study. “However, they also point to opportunities for interventions that could prevent future overdoses in a particularly vulnerable population.”

Notice also that the states that have increased Medicaid expansion in the greatest amounts due to the Affordable Care Act are also the ones that are known to have the greatest problems with the opioid crisis, if one takes a look at this graph here:

This is not to say there aren’t other causes for the opioid crisis as well. President Obama’s open borders policy opened the floodgates for cartel imports of opiates for one. The pressures on the medical profession, in which doctors are pressed by addicts to prescribe opioids in unsafe amounts or else be hit with bad patient reviews is another. There also is the poverty and lack of opportunity that motivates many to want to take opioids. But there is little doubt the round-heeled way Medicaid prescribes in its runaway expense culture plays a role, too.

So much for the claim about the heartlessness of private insurance companies. At least its recipients are alive to tell about it. Things happen because there are incentives for them to happen. If a gift is freely given, you take it, as Milton Friedman once observed. And to paraphrase his student, Thomas Sowell, you can have all the opioid addiction you’d like to pay for.

James Walker: Opioids? The silent question nobody is asking

James Walker: Opioids? The silent question nobody is asking

http://www.registercitizen.com/opinion/20170826/james-walker-opioids-the-silent-question-nobody-is-asking

Where do we go from here?

I started writing this column understanding it was going to be a grim read for a lot of people as there are opposite sides and opinions when it comes to opioid addiction and how to fight and treat it.

It is a tough subject because opioids ruin more than the lives it steals: it leaves behind wrecked loved ones, many who could only watch as the person they loved spiraled into addiction and eventually, for many, toward death.

With more than 900 deaths in Connecticut alone, it is a testament to the power of opioids and their ability to fool their victims with an embrace of euphoria before tightening around them like a python, leaving them gasping for the fix with no other place to run and no place to hide.

Never before in the United States has so many people cast caution to the wind with such reckless abandon.

Mental health experts, lawmakers and law enforcement have responded, setting up clinics, treatment, services, funding, and are pouring over other ideas and implementing new strategies to get more addicts to come forward.

But despite this, I find there is not a lot of plain English being spoken when it comes to fighting the crisis that has gripped the nation and is spreading desperation from small rural communities to burgeoning metropolises.

I don’t mean to bring doom and gloom but what’s worrisome to me is what nobody is talking about given the massive crisis this has become and the massive response it’s going to take to fix it: the success rate in kicking substance-abuse-related addiction is very low.

Substance abuse programs do get some people through the rushes but even at their high end, the 12 steps don’t seem to lead enough people walking across the finish line to sobriety.

And the grim reaper is no longer a surprise from the shadows but breathing on every needle and every snort.

According to the New York Times, nearly 60,000 people in the U.S. died of overdoses last year. Drug overdoses are now the number one “cause of death among Americans under 50,” with overdoses on a 19 percent climb from 2015 — and 2017 is expected to be worse.

The Agency for Healthcare Research and Quality ranks Connecticut the 5th-highest among 30 states in the rate of opioid-related emergency department visits and 7th-highest among 44 states for inpatient stays — both above the national rate.

Those are pretty troubling numbers for a state that is broke, cutting services and dealing with a large unskilled workforce.

Right now, it is estimated that more than two million people nationwide are dependent on opioids and another 95 million used prescription painkillers in the past year.

With millions needing treatment for opioid abuse, the dollars are being vacuumed out of local and state budgets and the U.S. wallet will have to be a lot more generous to keep up with the demand.

That leads to the stark reality of what is happening now and what lies ahead: revive, treat and maintain.

And the sheer cost of that is drawing red lines.

Some lawmakers in Ohio are making it clear to addicts in their districts that they’re are only willing to go so far to help. They have decided that the strain on their constituents and employees along with decimated budgets that have affected other services can’t continue.

Butler County Sheriff Richard Jones will not let his men carry naloxone, citing cost and safety. He said besides the fact that people “can become hostile and violent” after being revived, it is a wasted effort.

“All we’re doing is reviving them, we’re not curing them,” he told NBC News. “There’s no law that says police officers have to carry Narcan (naloxone) … Until there is, we’re not going to use it.”

And from the same county, Councilman Dan Picard wants a three-strikes penalty so EMS will not have to respond to an overdose victim who has required two previous interventions. He is also looking for a way to recoup costs, suggesting people who overdose should be forced to perform community service to make up for the cost of treatment.

Those lawmakers may not display the compassionate nature we Americans are used to hearing. And it is certainly not happening here in Connecticut where police carry naloxone and pharmacists are hitting the streets to “prescribe and dispense” the life-saving drug to people on the streets.

But for how long?

The shift in attitude from the Ohio lawmakers may be ugly and dangerous but it also may show what could lie ahead if addicts, public health officials and lawmakers don’t get a handle on this crisis.

I can be accused of taking a dystopian look at the situation but I don’t think so.

Opioids have worked their yellow haze over too many to think the crisis will just wind down in an orderly way as so much depends on those addicted — and their numbers are growing.

But there is room for optimism.

According to cleanslate.com, an informational website about addiction, it sticks by a 2001 study that shows up to 75 percent of addicted people will eventually find their way to sobriety on their own.

Well … OK, that sounds good, but how long does that take?

These are high tech, deadly drugs and if they can’t kick the habit and that python keeps tightening its grip — it leads me back to the first sentence in this column: where do we go from here?

James Walker is the Register’s senior editor. He can be reached at 203-680-9389 or jwalker@nhregister.com. Follow him on Twitter @thelieonroars