Fu: Wireless connectivity is added to devices for marketing, not safety
Kevin Fu · Kevin Fu · Jul 28, 2017 · at 6:09
Kevin Fu, a cybersecurity professor, criticizes device makers for routinely adding wireless capabilities to IoT and medical hardware to boost marketing rather than enhance safety.
0:00 / 0:23exact quote · 23.9s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“But the interesting thing about wireless is that, you know, it was used for a specific reason, to address the clinical risk, but now I often see it used sort of willy-nilly on devices, more for the marketing side, less for actually addressing a safety risk, but my mom's from the Midwest, and she always used to put bacon on everything because she said it made everything taste better, and I think wireless is sometimes treated that way.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Kevin Fu
Fu: Wireless signals could trigger fatal heart rhythms in cardiac defibrillators
“We discovered we could actually generate our own wireless signals that would trigger this, what is effectively a debugging command to wirelessly induce fatal heart rhythms.”
Fu: Hospital medical device malware is mostly decade-old, automated malware
“There's, it's nothing too sophisticated. We're not talking about nation state adversaries or even the kid in the basement trying to hack into things. This is garden variety malware automated, sometimes 10 or 15 years old getting in.”
Fu: Pacemakers can be tricked into shutting down via RF interference
“A fun little trick you can do is if you send a particular pulse at a rate that looks like a normal cardiac rhythm in this case one hertz, so 60 beats per minute we've been able to trick pacemakers into effectively turning off because they say, oh, the heart is…”
Fu: Medical manufacturer bundled malware into a ventilator software update
“This medical device manufacturer was attaching this bonus piece of malware to the software update for ventilators.”
Fu: An infusion pump provided unauthenticated root access via telnet
“He discovered that there was actually if you tell net to port 23, you get a root shell.”
Fu: Acoustic tones at 8 kHz can disable drones mid-flight
“He discovered if you send acoustic tones to a particular drone, you can cause the drone to fall out of the sky, because the MEMS accelerometer on the inside of the chip has a resonant frequency, and if you hit it at eight kilohertz, It just tricks that little …”