I helped watch a friend's kid last weekend who has a remote-controlled insulin pump. The remote control refuses to dose without a recent blood-sugar test. Kid wants to eat, no you need to wait, we need to do a finger-prick test first ON the the remote so it knows your glucose level.
That, and the remote needs to establish an insulin baseline every few hours.
It's unclear whether the dose limiting is also hard-coded into the pump or is on the remote side only.
It does seem like a "one in a billion" attack but, given time and repeated access to the pump radio, it seems possible to say the least.
I assume that an adult diabetic is very aware of how glucose levels affect their ability to function and would notice when they start to drop off unexpectedly.
That, and the remote needs to establish an insulin baseline every few hours.
It's unclear whether the dose limiting is also hard-coded into the pump or is on the remote side only.
It does seem like a "one in a billion" attack but, given time and repeated access to the pump radio, it seems possible to say the least.
I assume that an adult diabetic is very aware of how glucose levels affect their ability to function and would notice when they start to drop off unexpectedly.