Date: Wed, 12 Mar 2008 03:57:55 -0500 (CDT)
From: Gadi Evron <ge@linuxbox.org.>
To: bugtraq@securityfocus.com, full-disclosure@lists.grok.org.uk
Subject: hacking a pacemaker
Message-ID: <Pine.LNX.4.62.0803120356220.31445@linuxbox.org.>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-1.7.5 (linuxbox.org [127.0.0.1]); Wed, 12 Mar 2008 03:57:56 -0500 (CDT)
X-Virus-Scanned: antivirus-gw at tyumen.ru
Almost a year ago I gave a talk at the CCC Camp in Germany I called "hacking
the bionic man". It even made Wired, in some fashion.
http://blog.wired.com/27bstroke6/2007/08/will-the-bionic.html
http://events.ccc.de/camp/2007/Fahrplan/events/2049.en.html
In the talk, among other things such as the DNA and scripting languages,
medical doctors and reverse engineers... was about cybernetic hacking.
I gave some predictions, some for 2 years, others 40 years. Some again were
pure science fiction. I was wrong on the 2 years, it's here.
Today, this came up in the news (hat tip to Paul Ferguson on the funsec mailing
list):
http://www.nytimes.com/2008/03/12/business/12heart-web.html?_r=1&oref=slogin
" The threat seems largely theoretical. But a team of computer security
researchers plans to report Wednesday that it had been able to gain wireless
access to a combination heart defibrillator and pacemaker.
They were able to reprogram it to shut down and to deliver jolts of electricity
that would potentially be fatal . if the device had been in a person. In this
case, the researcher were hacking into a device in a laboratory. "
Gadi Evron.
