Hacking Medical Mannequins
An anonymous reader writes: A team of researchers at the University of South Alabama is investigating potential breaches of medical devices used in training, taking the mannequin iStan as its prime target in its scenario-based research. Identifying the network security solution and network protocol as the vulnerable components, the team was able to carry out brute force attacks against the router PIN, and denial of service (DDoS) attacks, using open source tools such as BackTrack.
It is the name of a collection of tools, and it's not even called that anymore, it's Kali.
I came, I conquered, I coredumped
‘If medical training environments are breached, the long term ripple effect on the medical profession, potentially, impacts thousands of lives due to incorrect analysis of life threatening critical data by medical personnel.’
This is such hyperbolic bullshit.
The iStan is always operated by a trainer. The trainer would know it was misbehaving.
It's like saying that since med students sometimes learn by watching training material on a TV... and look - with a simple remote control, we can CHANGE THE CHANNEL ON THE TV! MY GOD! IMPACT THOUSANDS OF LIVES!!!
Source: I have a brain.
Ive started writing vulnerabilities for iStan as of about a month ago, and i have got to say its one of the easier platforms to exploit. friends asked why id bother with such a limited platform as it doesnt have many applications outside of education but i beg to differ. Heres my application list so far:
1.stastan.img: loading this image causes stan to die on contact during any simulation scenario.
2.polterstan.img: sync stans bilateral cartoid pulse to integer width, or roughly 32,768 bpm.
3.superstanl3y.img: CPR attempts trigger unending string of bowel noises. noises.wav replaced with the USSR national anthem
4. b00g3ystan.img: stans bilateral brachial pulse synchronizes to bowel noises. Noises.wav replaced by daft punks get lucky.
5. didn35stan.img: breath sounds replaced with slot machine noises. all 5 bleeding zones (and urinary output) triggered.
6. sw33tstan.img: stans heartbeat entirely dependent upon urination. voice replaced with the 1850 Millard Fillmore presidential address. pulse is now a Fibonacci sequence leading to the GPS coordinates of a geocache filled with macaroni and cheese.
Good people go to bed earlier.
A vulnerable mannequin was brutally penetrated by a team of researchers from the University of South Alabama. The attackers spent several hours pounding every port of the victim with their tools.
http://i1.wp.com/www.bitsandpi...
"I say we take off, nuke the site from orbit. It's the only way to be sure."