bugtraq - hacking a pacemaker

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 12 Mar 2008 03:57:55 -0500 (CDT)
From: Gadi Evron <ge@...uxbox.org>
To: bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk
Subject: hacking a pacemaker

Almost a year ago I gave a talk at the CCC Camp in Germany I called "hacking 
the bionic man". It even made Wired, in some fashion.
http://blog.wired.com/27bstroke6/2007/08/will-the-bionic.html
http://events.ccc.de/camp/2007/Fahrplan/events/2049.en.html

In the talk, among other things such as the DNA and scripting languages, 
medical doctors and reverse engineers...  was about cybernetic hacking.
I gave some predictions, some for 2 years, others 40 years. Some again were 
pure science fiction. I was wrong on the 2 years, it's here.

Today, this came up in the news (hat tip to Paul Ferguson on the funsec mailing 
list):
http://www.nytimes.com/2008/03/12/business/12heart-web.html?_r=1&oref=slogin

" The threat seems largely theoretical. But a team of computer security 
researchers plans to report Wednesday that it had been able to gain wireless 
access to a combination heart defibrillator and pacemaker.

They were able to reprogram it to shut down and to deliver jolts of electricity 
that would potentially be fatal . if the device had been in a person. In this 
case, the researcher were hacking into a device in a laboratory. "

 	Gadi Evron.