3 ms·
(I have 2 723 2.3A pumps, using OpenAPS) A specific X-and-below is required because the RF protocol was reverse-engineered, presented at DEF CON 19 (2011), and
by cubicthe 8y ago
(I have 2 723 2.3A pumps, using OpenAPS)
A specific X-and-below is required because the RF protocol was reverse-engineered, presented at DEF CON 19 (2011), and the manufacturer locked it down immediately (PSK, gg). The new protocol has not been reverse engineered (this is for Medtronic Minimed)
A newer style of RF pump from a different manufacturer (Insulet OmniPod) has been de-capped and had its protected-mode firmware scanned, and has been disassembled and picked through - and re-flashed firmware has been sent to that pump and works fine, and we understand the cryptographic protection algorithm (we can talk to them) and a great deal of the protocol. That still leaves a massive "forward engineering" and integration efforts that must be non-commercial by nature (because laws)
edit: there are literally 7 of us that have access to the RE'ed firmware repo (it's a private github repo) - PM me if you're interested (there's a really irrelevant NDA that is involved, which I think is spooking wider sharing)
Pump manufacturers are not technology leaders and have no forcing function to create open systems. There is no reason they could not publish the protocol and also allow me to enroll a key (knowingly voiding affected aspects of the warranty) and interact with a device that is legally part of my person.
Of course, this is mostly a USA problem: for other jurisdictions there are open compatible pumps (http://www.sooil.com/eng/product/ http://www.sooil.com/eng/product/) that have this, but they are not available (including for insurance support of the consumables) in the USA