undefined | Better HN

0 pointssymtos9y ago0 comments

using software with known problems in order to avoid potential problems from an upgrade does not seem like a non-bad decision

0 comments

Blackthorn9y ago

Is the medical device working right now? Yes. Could, upon upgrading, the device stop working, possibly in a subtle way that might kill somebody? Yes.

The approval process for medical devices is rightfully difficult. Software upgrades, even if they seem trivial, should not be a backdoor process of bypassing testing and approval.

symtosOP9y ago

...and could software deployed to the device by some random who just exploited some well-known security flaw that never got patched, kill people?

Blackthorn9y ago

This whole discussion has been about stuff air-gapped. That's not a guarantee when you have USB ports, but it does help.

j / k navigate · click thread line to collapse

0 comments

Blackthorn9y ago

Is the medical device working right now? Yes. Could, upon upgrading, the device stop working, possibly in a subtle way that might kill somebody? Yes.

The approval process for medical devices is rightfully difficult. Software upgrades, even if they seem trivial, should not be a backdoor process of bypassing testing and approval.

symtosOP9y ago

...and could software deployed to the device by some random who just exploited some well-known security flaw that never got patched, kill people?

Blackthorn9y ago

This whole discussion has been about stuff air-gapped. That's not a guarantee when you have USB ports, but it does help.

j / k navigate · click thread line to collapse