Slashdot Mirror
Hacking Medical Mannequins
An anonymous reader writes: A team of researchers at the University of South Alabama is investigating potential breaches of medical devices used in training, taking the mannequin iStan as its prime target in its scenario-based research. Identifying the network security solution and network protocol as the vulnerable components, the team was able to carry out brute force attacks against the router PIN, and denial of service (DDoS) attacks, using open source tools such as BackTrack.
and get yourself free.
It is the name of a collection of tools, and it's not even called that anymore, it's Kali.
I came, I conquered, I coredumped
I don't think there are many systems that are immune from brute force attacks. Why is this news?
Did the NSA know about this and did they exploit it?
‘If medical training environments are breached, the long term ripple effect on the medical profession, potentially, impacts thousands of lives due to incorrect analysis of life threatening critical data by medical personnel.’
This is such hyperbolic bullshit.
The iStan is always operated by a trainer. The trainer would know it was misbehaving.
It's like saying that since med students sometimes learn by watching training material on a TV... and look - with a simple remote control, we can CHANGE THE CHANNEL ON THE TV! MY GOD! IMPACT THOUSANDS OF LIVES!!!
Source: I have a brain.
years ago I worked in the IT shop of a college that has a nursing program with medical mannequins. Quite a bit of the time, we had to do our work when the students were at the hospital doing work study. On more than one occasion, a colleague and I put male genitalia on female mannequins and vice-versa. I addition, we'd leave cigarettes in their mouths, sometimes posed with hands on boobs or genitals with a lab coat. I can only imagine the looks on the adminstrator's faces when they saw this "work" of ours.
Anything can be hacked.
We get it.
The terrorist hackers programmed iStan to expand it anus and rectum to the maximum size then changed its MOTD to "iGoatse."
Rest not, evildoers, you will be extinguished in puff of drone-dropped Freedom Smoke.
Trolling is a art,
The only person who could complain about hackable mannequins is a mannequin. You sir, are therefore full of it and made of plastic.
Better than the schools than where you live, obviously.
Ive started writing vulnerabilities for iStan as of about a month ago, and i have got to say its one of the easier platforms to exploit. friends asked why id bother with such a limited platform as it doesnt have many applications outside of education but i beg to differ. Heres my application list so far:
1.stastan.img: loading this image causes stan to die on contact during any simulation scenario.
2.polterstan.img: sync stans bilateral cartoid pulse to integer width, or roughly 32,768 bpm.
3.superstanl3y.img: CPR attempts trigger unending string of bowel noises. noises.wav replaced with the USSR national anthem
4. b00g3ystan.img: stans bilateral brachial pulse synchronizes to bowel noises. Noises.wav replaced by daft punks get lucky.
5. didn35stan.img: breath sounds replaced with slot machine noises. all 5 bleeding zones (and urinary output) triggered.
6. sw33tstan.img: stans heartbeat entirely dependent upon urination. voice replaced with the 1850 Millard Fillmore presidential address. pulse is now a Fibonacci sequence leading to the GPS coordinates of a geocache filled with macaroni and cheese.
Good people go to bed earlier.
A vulnerable mannequin was brutally penetrated by a team of researchers from the University of South Alabama. The attackers spent several hours pounding every port of the victim with their tools.
http://i1.wp.com/www.bitsandpi...
"I say we take off, nuke the site from orbit. It's the only way to be sure."
Was it a DDoS or a Denial of Service attack? They are different...
APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
Ok, Stan the training dummy is hackable.
So why bother?
No challenge, so no bragging rights.
Not very useful except as a prank on nursing students.
Perhaps as a way to let an inept student pass a nursing exam?
Seems far fetched.
Maybe as a demonstration that other medical stuff that matters might also be hackable.
And of course as an excuse to publish a paper.
I should start a business selling attractive mannequins to prisons. Just deactivate the pacemaker and add a sump pump.
This has gone too far. If you're making life-size latex love dolls, say so.
Contribute to civilization: ari.aynrand.org/donate