News for hackers. Stuff that matters.

A comment on CVE-2015-3459 – Hospira Lifecare PCA Infusion Pump. Parent comment

Re:CVE-2015-3459 – Hospira Lifecare PCA Infusion Pump by ars on Monday May 04, 2015 @08:02PM (#9490073)
If you take that too far you end up with medical gear that is so locked down the owner can not make any changes themself, but must ask for permission to make any changes.
[ Parent | on HN ]
Re:CVE-2015-3459 – Hospira Lifecare PCA Infusion Pump by MaulingMonkey on Tuesday May 05, 2015 @12:49AM (#9490888)
I was under the impression that medical devices were already locked down like that due to e.g. FDA regulations. Not having security either seems like a "worst of both worlds" situation.
[ Parent | on HN ]
Re:CVE-2015-3459 – Hospira Lifecare PCA Infusion Pump by ars on Tuesday May 05, 2015 @12:51AM (#9490894)
With no security people get access on their own......
[ Parent | on HN ]
Re:CVE-2015-3459 – Hospira Lifecare PCA Infusion Pump by MaulingMonkey on Tuesday May 05, 2015 @01:26AM (#9490994)
...at the risk of bricking devices and legal threats? Sure. Both of which are concerns with some teeth for such mission critical devices as... your xbox.

Jailbroken medical devices sounds like a great way for a doctor to loose their license, a developer to end up with manslaughter charges, and patients being unable to tell their doctors about their full medical situation, lest their doctors run screaming from the impending liability lawsuit.

I think the correct answer to "let people modify their own devices" is "fix the regulations" not "intentionally weaken security in matters of potential life and death."

[ Parent | on HN ]