# (Dana RS) + (#WeAreNotWaiting) = Risk or Reward?

**URL:** <https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950>\
**Category:** Pump\
**Created:** [September 12, 2017, 7:28pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950 "2017-09-12T19:28:35Z")\
**Posts on this page:** 20\
**Page:** 2

<div class="post-metadata">

**Author:** ![Eric](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/eric/32/9209_2.png) [@Eric](https://forum.fudiabetes.org/u/Eric)\
**Post date:** [September 13, 2017, 7:38pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/21 "2017-09-13T19:38:22Z")

</div>

Good to see you Thomas!

---

<div class="post-metadata">

**Author:** ![Michel](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/michel/32/387_2.png) [@Michel](https://forum.fudiabetes.org/u/Michel)\
**Post date:** [September 13, 2017, 7:38pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/22 "2017-09-13T19:38:48Z")

</div>

> [@Eric](#):
>
> Good to see you Thomas!

same here!

---

<div class="post-metadata">

**Author:** ![dm61](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/dm61/32/1602_2.png) [@dm61](https://forum.fudiabetes.org/u/dm61)\
**Post date:** [September 13, 2017, 9:46pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/23 "2017-09-13T21:46:07Z")

</div>

> [@Bradford](#):
>
> Would you consider using an insulin pump that can be remotely controlled via the internet or SMS?

Maybe I am missing something, but as far as I can tell this news article is not about controlling a pump remotely via the Internet or sms. It is about controlling the pump remotely from a nearby smart phone via a bluetooth interface. There is nothing particularly risky about that. Even better news is that the Korean pump manufacturer is making their interface accessible by DIY closed-loop systems, AndroidAPS in particular. That’s great! They are showing other pump manufacturers how things could and should be done - lets hope they follow.

As a side note, I’ve been controlling my pump using Loop app on my iPhone with bluetooth interface for more than a year now. In parallel, I’ve used the same iPhone for internet browsing, reading FUD posts 🙂, navigation, playing music and videos, and countless other apps without any technical or security problems. Surprise, it’s 2017. In a Hollywood-move scenario, I could imagine how a technically proficient villain could harm me by remotely programming a gigantic bolus on me, but this has not happened (yet) 😉

---

<div class="post-metadata">

**Author:** ![Eric](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/eric/32/9209_2.png) [@Eric](https://forum.fudiabetes.org/u/Eric)\
**Post date:** [September 13, 2017, 9:50pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/24 "2017-09-13T21:50:56Z")

</div>

> [@dm61](#):
>
> It is about controlling the pump remotely from a nearby smart phone via a bluetooth interface.

That is definitely lower risk, not any riskier than the current omnipod RF communication. Actually safer because bluetook is harder to break.

> [@dm61](#):
>
> In a Hollywood-move scenario, I could imagine how a technically proficient villain could harm me by remotely programming a gigantic bolus on me, but this has not happened (yet)

When the subject about such a hack comes up, my boss has reminded me that there are much easier ways to kill me.

---

<div class="post-metadata">

**Author:** ![Thomas](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/thomas/32/1719_2.png) [@Thomas](https://forum.fudiabetes.org/u/Thomas)\
**Post date:** [September 14, 2017, 12:51am UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/25 "2017-09-14T00:51:39Z")

</div>

> [@dm61](#):
>
> Maybe I am missing something, but as far as I can tell this news article is not about controlling a pump remotely via the Internet or sms. It is about controlling the pump remotely from a nearby smart phone via a bluetooth interface.

This is where I have concerns.

The INTENTION is to control the pump from close by.

The CONCERN is someone anywhere in the world taking control of the phone during the night and using that phone to then remotely operate the pump which is close by the phone.

It is a basic risk matrix that I operate on.

1. What is the probability of the event? Low but possible.
2. What are the consequences assuming the event does happen? Catastrophic.

Based on that, it is an excessive level of risk for me.

Edit: Running this from an iPod Touch via Bluetooth where the iPod has no cellular data capabilities and with the Wifi turned off would be acceptable to me.

---

<div class="post-metadata">

**Author:** ![Bradford](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/bradford/32/30_2.png) [@Bradford](https://forum.fudiabetes.org/u/Bradford)\
**Post date:** [September 14, 2017, 12:45pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/26 "2017-09-14T12:45:43Z")

</div>

I was referring to the intentional actions by the pump company to allow DIY closed-loop system to be utilized. AndroidAPS has the ability to remote bolus via SMS as well as Bluetooth. Nightscout can be used via the internet. The dedicated app from the company allows the user to bolus via Bluetooth.

---

<div class="post-metadata">

**Author:** ![dm61](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/dm61/32/1602_2.png) [@dm61](https://forum.fudiabetes.org/u/dm61)\
**Post date:** [September 14, 2017, 2:36pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/27 "2017-09-14T14:36:52Z")

</div>

Thanks for the clarification.

---

<div class="post-metadata">

**Author:** ![Bradford](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/bradford/32/30_2.png) [@Bradford](https://forum.fudiabetes.org/u/Bradford)\
**Post date:** [September 14, 2017, 2:49pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/28 "2017-09-14T14:49:01Z")

</div>

Very interesting poll results so far. Mainly split, but more No’s than Yes’s.

---

<div class="post-metadata">

**Author:** ![Michel](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/michel/32/387_2.png) [@Michel](https://forum.fudiabetes.org/u/Michel)\
**Post date:** [September 14, 2017, 3:08pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/29 "2017-09-14T15:08:46Z")

</div>

I am surprised by that!

---

<div class="post-metadata">

**Author:** ![TiaG](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/tiag/32/594_2.png) [@TiaG](https://forum.fudiabetes.org/u/TiaG)\
**Post date:** [September 14, 2017, 3:15pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/30 "2017-09-14T15:15:39Z")

</div>

I’m more concerned by the remote bolus by SMS … that seems like a potential safety issue not so much from a hacking perspective (although that’s there) as from a user error perspective.

---

<div class="post-metadata">

**Author:** ![Bradford](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/bradford/32/30_2.png) [@Bradford](https://forum.fudiabetes.org/u/Bradford)\
**Post date:** [September 14, 2017, 3:16pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/31 "2017-09-14T15:16:45Z")

</div>

There are certain safeguards there as well such as white-listed phone numbers and only accepting a bolus command with x minutes apart.

---

<div class="post-metadata">

**Author:** ![TiaG](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/tiag/32/594_2.png) [@TiaG](https://forum.fudiabetes.org/u/TiaG)\
**Post date:** [September 14, 2017, 4:13pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/32 "2017-09-14T16:13:41Z")

</div>

Just saw this, may be relevant:

> **[BlueBorne: Critical Bluetooth Attack Puts Billions of Devices at Risk of Hacking](https://thehackernews.com/2017/09/blueborne-bluetooth-hacking.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed:%2BTheHackersNews%2B%28The%2BHackers%2BNews%2B-%2BSecurity%2BBlog%29&_m=3n.009a.1578.gw0aof7nxv.y66)**
>
> BlueBorne Attack Could Silently Hack Your Android, iOS Mobiles & Windows, Linux Computers Over Bluetooth.

---

<div class="post-metadata">

**Author:** ![Michel](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/michel/32/387_2.png) [@Michel](https://forum.fudiabetes.org/u/Michel)\
**Post date:** [September 14, 2017, 4:19pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/33 "2017-09-14T16:19:25Z")

</div>

This attack is frightening because it can happen very quickly, does not need any interaction with you, and does not leave any traces (except that it may wake your device).

Any old device that does not get updated anymore is vulnerable (and those that don’t get patched quickly). This is where I absolutely HATE Android, which is my favorite system. Updates. Some day this may push me to iOS, despite my deep dislike of Apple’s proprietary practices.

---

<div class="post-metadata">

**Author:** ![Chris](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/chris/32/382_2.png) [@Chris](https://forum.fudiabetes.org/u/Chris)\
**Post date:** [September 14, 2017, 4:57pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/34 "2017-09-14T16:57:31Z")

</div>

Like @Thomas I would be very leery about medical devices and remote operation. Why? Well medical device companies are good at making lifesaving medical devices. They are terrible at ancillary things like device security. When looking back on my experience helping to create training for a wireless connection to a pacemaker, I was in a bunch of meetings and went around the world as part of a team to do testing. We were very concerned about usability, and not concerned at all about security.

---

<div class="post-metadata">

**Author:** ![Eric](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/eric/32/9209_2.png) [@Eric](https://forum.fudiabetes.org/u/Eric)\
**Post date:** [September 14, 2017, 6:00pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/35 "2017-09-14T18:00:14Z")

</div>

BlueBorne is a severe issue because of its extreme reach. Almost any device that hasn’t been patched and has Bluetooth turned on can be compromised by the attacking device from a distance of up tp 32 feet.

The attack does not require the targeted device to be paired to the attacker’s device, or even to be set on discoverable mode. It doesn’t require the vulnerable device to do anything other than just having bluetooth on.

> **[5 Billion Bluetooth Enabled Devices Vulnerable to BlueBorne Attack](https://gbhackers.com/bluetooth-blueborn-vulnerability/)**
>
> Bluetooth enabled devices then you are vulnerable to BlueBorne attack. This attack spreads through and attacks Bluetooth devices.

---

<div class="post-metadata">

**Author:** ![Michel](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/michel/32/387_2.png) [@Michel](https://forum.fudiabetes.org/u/Michel)\
**Post date:** [September 15, 2017, 2:32am UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/36 "2017-09-15T02:32:43Z")

</div>

2 posts were split to a new topic: [Bluborne malware: impact on Omnipod Dash?](https://forum.fudiabetes.org/t/bluborne-malware-impact-on-omnipod-dash/2000)

---

<div class="post-metadata">

**Author:** ![Michel](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/michel/32/387_2.png) [@Michel](https://forum.fudiabetes.org/u/Michel)\
**Post date:** [September 15, 2017, 2:37am UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/37 "2017-09-15T02:37:47Z")

</div>

A post was merged into an existing topic: [Blueborne malware: impact on Omnipod Dash?](https://forum.fudiabetes.org/t/blueborne-malware-impact-on-omnipod-dash/2000)

---

<div class="post-metadata">

**Author:** ![Bradford](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/bradford/32/30_2.png) [@Bradford](https://forum.fudiabetes.org/u/Bradford)\
**Post date:** [September 25, 2017, 5:35pm UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/38 "2017-09-25T17:35:38Z")

</div>

Interesting consensus… 🙂

---

<div class="post-metadata">

**Author:** ![Michel](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/michel/32/387_2.png) [@Michel](https://forum.fudiabetes.org/u/Michel)\
**Post date:** [September 26, 2017, 7:14am UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/39 "2017-09-26T07:14:37Z")

</div>

> [@Bradford](#):
>
> Interesting consensus… 🙂

Pretty much perfectly divided!

I am surprised by who ended up on which side 🙂

---

<div class="post-metadata">

**Author:** ![Boerenkool](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.fudiabetes.org/boerenkool/32/6307_2.png) [@Boerenkool](https://forum.fudiabetes.org/u/Boerenkool)\
**Post date:** [September 26, 2017, 11:53am UTC](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950/40 "2017-09-26T11:53:34Z")

</div>

It doesn’t surprise me that most parents voted yes. They could benefit a lot from remotely controlled pumps.

[Previous page](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950.md?page=1)

[Next page](https://forum.fudiabetes.org/t/dana-rs-wearenotwaiting-risk-or-reward/1950.md?page=3)
