I brought this question up many times and no one wanted to answer it or think about it. All they cared about was getting the product out on time and saying that security was the job of the hospital. There was no reason to have IE on the box, plus it was running as Administrator.
I have first hand experience with medical CT scanner development, and can honestly say that operator console techs browse the web on the operator console machine (running windows 2000) between patients. Pretty scarry. As if windows isn't bad enough, being on the web while controling a machine that doses a patient with xrays is crazy.
Slashdot Mirror
I brought this question up many times and no one wanted to answer it or think about it. All they cared about was getting the product out on time and saying that security was the job of the hospital. There was no reason to have IE on the box, plus it was running as Administrator.
I have first hand experience with medical CT scanner development, and can honestly say that operator console techs browse the web on the operator console machine (running windows 2000) between patients. Pretty scarry. As if windows isn't bad enough, being on the web while controling a machine that doses a patient with xrays is crazy.