Slashdot Mirror
Hacking a Pacemaker
jonkman sean writes "University researchers conducted research into how they can gain wireless access to pacemakers, hacking them. They will be presenting their findings at the "Attacks" session of the 2008 IEEE Symposium on Security and Privacy. Their previous work (PDF) noted that over 250,000 implantable cardiac defibrillators are installed in patients each year. This subject was first raised along with similar issues as a credible security risk in Gadi Evron's CCC Camp 2007 lecture "hacking the bionic man"."
Hacking a pacemaker? What could possibly go wr... *thud*
This guy's the limit!
Yes, but the purpose of this device is unclear. What exactly is it pacing ?
"It wasn't me grabbing her ass your honor, someone hacked my arm!"
A-Bomb
Why don't they build firewalls into the pacemakers? And perhaps close off ports 21, 80 and 135. Hmmm...
I can see the headlines... "Cheney's Pacemaker Hacked by Chinese Militants" ... :-) One can only wish.
I'm gonna overclock this sucker!
Better than a triple espresso!
----------------------------------- My Other Sig Is Hilarious -----------------------------------
I find this joke to be old and rather insulting, really. Of course Dick Cheney has a heart.
However, the notion that the heart is somehow related to empathy and love is also false. Instead, he had that section of his brain surgically removed. It helps him collect himself faster after his 3pm puppy kicking and orphanage closing.
I want them to get the pacing rate right BEFORE they sew it in.
mcgrew's razor: Never attribute to stupidity that which can be explained by greedy self-interest
Yes, that's a very real concern that the secret service has been terrified of for years. Most people know that Cheney has a pacemaker, but the real secret is that they forgot to turn off SSID broadcast and its password is "Linksys".
Yup, he has the heart of a 20 year old.
It's in a jar on his desk.
Understanding the scope of the problem is the first step on the path to true panic.
I mean, imagine the following scenario:
1. Bad guys want to kill Cheney. That seems quite plausible.
2. Secret Service anticipates this. NSA and the Office of the Sergeant at Arms of the U.S. Senate are tasked to establish and test a set of security controls.
3. Pursuant to applicable FISMA, OMB, NIST and DoD regulations, it is determined that Cheney's pacemaker must undergo Certification and Accreditation under DIACAP (Doing Information Assurance on Cheney's Automatic Pacemaker) throughout the VP's Life Cycle.
4. Since the responsible government employees want to CYA, it is determined that the C&A work will be done by Contractors. An RFP is put together and posted to FedBizOpps.
5. A consortium of contractors including SAIC, Booz Allen, and Northrop Grumman are awarded the contract, with the real work to be done by a Section 8(a) minority small business contractor out of Bethesda.
6. The DIACAP team is assembled, a set of 8500.2 security controls is agreed upon, and the Veep is called in for several days of Security Control Assessments.
7. The contractors decide that a full SCA is too much hassle, so an SP 800-26 risk assessment checklist is completed instead.
8. Cheney leaves Bethesda Naval Hospital hardwired to a golf cart full of equipment at a cost of $35 million.