Medtronic Insulin Pumps "voluntary recall" over deadly IoT security risk

[windsmurf]

Hackers can essentially cause death by connecting to insulin pumps over wifi, altering its operation.  FDA issues "voluntary" recall.
https://www.fda.gov/medical-devices/safety-communications/certain-medtronic-minimed-insulin-pumps-have-potential-cybersecurity-risks-fda-safety-communication
https://www.theregister.co.uk/2019/06/28/medtronic_insulin_pump_recall/

[magic]

Not WiFi but still
Why would that crap need wireless control if it isn't even fully implanted?

[sleemanj]

Not WiFi but still
Why would that crap need wireless control if it isn't even fully implanted?

Convenience and data logging.  Remember, an Iu pump is attached more or less 24/7, and interacted with many times a day, keeping the delivery unit under your clothing (potentially directly attached to skin ) and having control from an app on phone will increase convenience.  Also pumps mIght be worn by kids or others who need dosing handled by somebody else, who could do so without needing to interact directly withthe pump. 

[Electro Detective]

I'm with magic's comment 

I can't think of anything more dumbass than having WiFi wankery for something local on your person (at arms reach FFS!  ) vital to your existence/quality of life

Imagine collapsing and or expiring (or worse, left in a veg state and burden on everyone for years...) because of an app crash, frozen critical ~SeCuRitY~ update  (),
flat battery, adware phone jacking,
or some other background 'silent' snafu proudly presented by g0o0gle or crAPPLE to enhance your silent demise which may need more R+D   

If you're going to roll with electronic control for insulin monitoring, make it a dedicated simple non-Wifi device,
with instructions and pictures, and a www.helpthisperson or Youtube link/URL that any passer by with or without a phone can understand
and stand half a chance to bail you out. 

Having a backup unit handy is an option to be considered seriously, especially on weekends or away on trips etc

[wraper]

Not WiFi but still
Why would that crap need wireless control if it isn't even fully implanted?

Because:

The MiniMed™ 508 insulin pump and the MiniMed™ Paradigm™ series insulin pumps are designed to communicate using a wireless radio frequency (RF) with other devices such as a blood glucose meters, glucose sensor transmitters, and CareLink™ USB devices.

https://www.youtube.com/watch?time_continue=2&v=60d6KqnRhzA

[SiliconWizard]

Not WiFi but still
Why would that crap need wireless control if it isn't even fully implanted?

Convenience and data logging.  Remember, an Iu pump is attached more or less 24/7, and interacted with many times a day, keeping the delivery unit under your clothing (potentially directly attached to skin ) and having control from an app on phone will increase convenience.  Also pumps mIght be worn by kids or others who need dosing handled by somebody else, who could do so without needing to interact directly withthe pump.

Having to physically connect a cable to it several times a day admittedly sucks (and is not good for reliability), but why not use NFC instead? Hacking it would require being VERY close to it, which dramatically limits the risks, and frankly having to just put your phone or some kind of remote over the pump for a few seconds is no big deal.