Hacking a Pacemaker

This seems scary. Two researchers speaking at different hacker conferences revealed that they have learned how to turn off implanted pacemakers by remote control. Kevin Fu, director of the Medical Device Security Center, spoke at Black Hat while Daniel Halperin, a graduate student at the University of Washington, addressed attendees at Defcon.

Fu and Halperin said they used a cheap $1,000 system to mimic the control mechanism. It included a software radio, GNU radio software, and other electronics. They could use that to eavesdrop on private data such as the identity of the patient, the doctor, the diagnosis, and the pacemaker instructions. They figured out how to control the pacemaker with their device.

“You can induce the test mode, drain the device battery, and turn off therapies,” Halperin said.

Translation: you can kill the patient. Fu said that he didn’t try the attack on other brands of pacemakers because he just needed to prove the academic point. Halperin said, “This is something that academics can do now. We have to do something before the ability to mount attacks becomes easier.”

This is one of those cases where proving a point can give someone a heart attack. Link -Thanks, Kiltak!