The article, strangely, leaves out the name of the project it's reporting on. It's OpenAPS, http://openaps.readthedocs.io/en/latest/ . I use it and have worked on the code. It's a massive health and quality of life improvement over anything that exists which is FDA approved. The core problem is that the FDA-approved devices are optimized not for getting the best result, but for ensuring the manufacturer can't be blam…
From the docs: "One of the most frequently asked questions is “I have a 723 pump but it has version 2.5B software version. Has anyone figured out a way to make newer model Medronic pumps compatible? Like flash older version of software onto my 723 2.5B pump?” The answer is “No. The ability to downgrade software versions in the pumps does not exist. It has been investigated and nobody has made any successful progress…
A specific X-and-below is required because the RF protocol was reverse-engineered, presented at DEF CON 19 (2011), and the manufacturer locked it down immediately (PSK, gg). The new protocol has not been reverse engineered (this is for Medtronic Minimed)
A newer style of RF pump from a different manufacturer (Insulet OmniPod) has been de-capped and had its protected-mode firmware scanned, and has been disassembled and picked through - and re-flashed firmware has been sent to that pump and works fine, and we understand the cryptographic protection algorithm (we can talk to them) and a great deal of the protocol. That still leaves a massive "forward engineering" and integration efforts that must be non-commercial by nature (because laws)
edit: there are literally 7 of us that have access to the RE'ed firmware repo (it's a private github repo) - PM me if you're interested (there's a really irrelevant NDA that is involved, which I think is spooking wider sharing)
Pump manufacturers are not technology leaders and have no forcing function to create open systems. There is no reason they could not publish the protocol and also allow me to enroll a key (knowingly voiding affected aspects of the warranty) and interact with a device that is legally part of my person.
Of course, this is mostly a USA problem: for other jurisdictions there are open compatible pumps (http://www.sooil.com/eng/product/) that have this, but they are not available (including for insurance support of the consumables) in the USA