News for hackers. Stuff that matters.

A comment on Medtronic's MiniMed 600 insulin pumps potentially at risk of compromise. Parent comment

Re:Medtronic's MiniMed 600 insulin pumps potentially at risk... by londons_explore on Saturday October 01, 2022 @02:27AM (#33044403)
> They probably ask more cybersecurity questions than any other group

And therein lies the problem. Ask lots of questions on paper, and you get something that is very secure on paper.

But if you want something actually secure, you need to do pentests, have a substantial bounty program, have the design+code inspected by security reviewers, etc.

[ Parent | on HN ]
Re:Medtronic's MiniMed 600 insulin pumps potentially at risk... by 5440 on Saturday October 01, 2022 @12:22PM (#33047740)
That FDA review division does require that information and testing to be supplied with infusion pump testing. In fact, they are one of the few that routinely asks for substantial testing in repeated deficiency requests.
[ Parent | on HN ]