SFLC Wants To Avoid Death by Code

foregather writes "The Software Freedom Law Center has released some independent research on the safety of software close to our hearts: that inside of implantable medical devices like pacemakers and insulin pumps. It turns out that nobody is minding the store at the regulatory level and patients and doctors are blocked from examining the source code keeping them alive. From the article: 'The Food and Drug Administration (FDA) is responsible for evaluating the risks of new devices and monitoring the safety and efficacy of those currently on market. However, the agency is unlikely to scrutinize the software operating on devices during any phase of the regulatory process unless a model that has already been surgically implanted repeatedly malfunctions or is recalled. ... Despite the crucial importance of these devices and the absence of comprehensive federal oversight, medical device software is considered the exclusive property of its manufacturers, meaning neither patients nor their doctors are permitted to access their IMD's source code or test its security.'"

Comments

Stay away from Windows CE

[Anonymous Coward]

One of the July 2010 updates bluescreened my 81-year-old dad.

The hospital backed out the update but they had to reboot him in safe mode and go up the back door.

 

Proprietary pacemaker code excerpt

[turing_m]

// max_int should be enough for anyone
for(i = 0; i < max_int;i++){
  sleep(1);
  beat_heart();
}

// printf("hi!!!!!\n")