The Ledger
Every statement that passed quotation and attribution checks. Mix any filter with any other: certainty 1/5, debate potential 5/5, or both at once.
why aren't all 12 resolved? a statement only gets an assessment when the public record can support or contradict it. opinions and what-ifs never can, and 0 checkable ones are still open, waiting for their date. predictions held up or didn't; assertions are supported or contradicted. on every card: ▮▮▮▮▮ certainty · ▮▮▮▮▮ debate potential. speakers are clickable
Fu: Wireless signals could trigger fatal heart rhythms in cardiac defibrillators
“We discovered we could actually generate our own wireless signals that would trigger this, what is effectively a debugging command to wirelessly induce fatal heart rhythms.”
Fu: Hospital medical device malware is mostly decade-old, automated malware
“There's, it's nothing too sophisticated. We're not talking about nation state adversaries or even the kid in the basement trying to hack into things. This is garden variety malware automated, sometimes 10 or 15 years old getting in.”
Fu: Pacemakers can be tricked into shutting down via RF interference
“A fun little trick you can do is if you send a particular pulse at a rate that looks like a normal cardiac rhythm in this case one hertz, so 60 beats per minute we've been able to trick pacemakers into effectively turning off because they say, oh, the heart is…”
Fu: Wireless connectivity is added to devices for marketing, not safety
“But the interesting thing about wireless is that, you know, it was used for a specific reason, to address the clinical risk, but now I often see it used sort of willy-nilly on devices, more for the marketing side, less for actually addressing a safety risk, bu…”
Fu: Medical manufacturer bundled malware into a ventilator software update
“This medical device manufacturer was attaching this bonus piece of malware to the software update for ventilators.”
Fu: An infusion pump provided unauthenticated root access via telnet
“He discovered that there was actually if you tell net to port 23, you get a root shell.”
Fu: Acoustic tones at 8 kHz can disable drones mid-flight
“He discovered if you send acoustic tones to a particular drone, you can cause the drone to fall out of the sky, because the MEMS accelerometer on the inside of the chip has a resonant frequency, and if you hit it at eight kilohertz, It just tricks that little …”
Fu: Computer power draw from wall sockets leaks web browsing activity
“One of my students discovered that ah, he could actually tell what website I'm browsing by looking at my power consumption from the power outlet.”
Fu: IoT security fails because devices blindly trust raw sensor data
“So the lesson on sensors is basically trust but verify. A lot of IoT devices are taking in sensor data, and they're just acting on it blindly, but you need a way to verify that what you're sensing is actually a real physical phenomena.”
Kevin Fu: The Best Startup Teams Form During Real-World Crises
“What I discovered was the best way to find a team for a startup is you get a bunch of people to help you out in crisis, and the people who work well together, they're gonna stick around.”