Demonstrations of Attacks Against Implanted Cardiac Devices [pdf]
d.muddywatersresearch.com
Demonstrations of Attacks Against Implanted Cardiac Devices [pdf]
1–10 of 20 posts
Re: Demonstrations of Attacks Against Implanted Cardiac Devices [pdf]
#2This is truly scathing. News article about the short: https://www.bloomberg.com/news/articles/2016-08-25/carson-bl...
Re: Demonstrations of Attacks Against Implanted Cardiac Devices [pdf]
#3This is more about stock price manipulation than it is about implantable medical device security.
Having worked in the medical device industry for over a decade, I know first-hand how bad the security situation is on the vast majority of devices. It's by no means unique to St. Jude. The fact that these issues exist is also old news, as noted in the Bloomberg article linked by jevinskie.
In addition to new devices continuing to take a lax approach to security, there are the ongoing vulnerabilities in the older devices. The older models continue to be sold, and many of the older devices are still implanted in patients.
Is it an issue? Yes. Should something be done about it, perhaps by withholding FDA PMA or 510(k) clearance on new insecure devices? Probably. Is it unique to St. Jude? Not in the least.
Re: Demonstrations of Attacks Against Implanted Cardiac Devices [pdf]
#4My company (W17 hopeful) is working to help med device vendors ensure basic crypto and security practices. I agree with @teuobk below; these problems are not unique to St. Jude.
BTW we're hiring. If you're reading this comment thread, you're probably a great potential team member. Email in profile.
Re: Demonstrations of Attacks Against Implanted Cardiac Devices [pdf]
#5My company (W17 hopeful) is working to help med device vendors ensure basic crypto and security practices. I agree with @teuobk below; these problems are not unique to St. Jude. BTW we're hiring. If you're reading this comment thread, you're probably a great potential team member. Email in profile.
I'm only half joking, but can I join to convince the med device vendors who you're helping to make implantable devices that have so little connectivity to not need any crypto?
Re: Demonstrations of Attacks Against Implanted Cardiac Devices [pdf]
#6My company (W17 hopeful) is working to help med device vendors ensure basic crypto and security practices. I agree with @teuobk below; these problems are not unique to St. Jude. BTW we're hiring. If you're reading this comment thread, you're probably a great potential team member. Email in profile.
I'm only half joking, but can I join to convince the med device vendors who you're helping to make implantable devices that have so little connectivity to not need any crypto?
Yes. Email me.
Re: Demonstrations of Attacks Against Implanted Cardiac Devices [pdf]
#7My company (W17 hopeful) is working to help med device vendors ensure basic crypto and security practices. I agree with @teuobk below; these problems are not unique to St. Jude. BTW we're hiring. If you're reading this comment thread, you're probably a great potential team member. Email in profile.
I'm only half joking, but can I join to convince the med device vendors who you're helping to make implantable devices that have so little connectivity to not need any crypto?
You need some connectivity, so some crypto, but your point stands.
Re: Demonstrations of Attacks Against Implanted Cardiac Devices [pdf]
#8This reads more like a poorly researched rant than a proper in-depth analysis of the security.
Re: Demonstrations of Attacks Against Implanted Cardiac Devices [pdf]
#9My company (W17 hopeful) is working to help med device vendors ensure basic crypto and security practices. I agree with @teuobk below; these problems are not unique to St. Jude. BTW we're hiring. If you're reading this comment thread, you're probably a great potential team member. Email in profile.
I'd like to speak with you, but I only see a medium link.
Re: Demonstrations of Attacks Against Implanted Cardiac Devices [pdf]
#10My company (W17 hopeful) is working to help med device vendors ensure basic crypto and security practices. I agree with @teuobk below; these problems are not unique to St. Jude. BTW we're hiring. If you're reading this comment thread, you're probably a great potential team member. Email in profile.
I'd like to speak with you, but I only see a medium link.
Sorry. Mike at MedCrypt dot co