1. Karen M. Sandler General Counsel July 23, 2010 OSCON Free Software on Medical Devices: Unchain My Heart!

2. Our software must be safe ● Cars ● Voting machines ● Financial markets ● Medical devices – Yesterday! 34,000 malfunctioning Boston Scientific ICDs

3. I am a lawyer. My story:

4. I am an activist.

5. I am a patient.

9. I am a cyborg?

14. Pacemakers can be maliciously hacked

15. I am an author.

16. Software has bugs. ≈

17. ● In 2008, ≈ 350,000 pacemakers and 140,000 ICDs were implanted in the United States ● SEI estimates one defect for every 100 lines of code ● One study showed 98% of software failures analyzed in recalls would have been detected with all pairs testing.

18. Security through obscurity just doesn't work. ≈

19. Free and open source code – gives users the ability to independently assess the system and its risks – enables bugs to be patched more easily and quickly – removes dependence on a single party

20. The FDA – does not typically review source code – does not have a clear set of mandatory requirements for software – does not keep a repository of source code – preempts patients from suing under state product liability laws

21. I am a citizen.

23. I am a daughter.

25. Killed by Code: Software Transparency in Implantable Medical Devices

26. SFLC is a 501(c)(3) charity in the USA and accepts donations on its website at www.softwarefreedom.org This talk and the slides are: Copyright © 2010, Karen M. Sandler These slides, this talk, and audio/video recordings thereof are licensed under the Creative Commons Attribution-No Derivative Works 3.0 United States License! help@softwarefreedom.org