"hello, I would like to inspect the firmware of the insulin pump/pacemaker/artificial heart that keeps me alive, can I have the copy of the source code?"
"no? it's proprietary? well golly! guess I'll trust ya in blind faith then!"
A community for discussing events around the World
Rule 1: posts have the following requirements:
Rule 2: Do not copy the entire article into your post. The key points in 1-2 paragraphs is allowed (even encouraged!), but large segments of articles posted in the body will result in the post being removed. If you have to stop and think "Is this fair use?", it probably isn't. Archive links, especially the ones created on link submission, are absolutely allowed but those that avoid paywalls are not.
Rule 3: Opinions articles, or Articles based on misinformation/propaganda may be removed. Sources that have a Low or Very Low factual reporting rating or MBFC Credibility Rating may be removed.
Rule 4: Posts or comments that are homophobic, transphobic, racist, sexist, anti-religious, or ableist will be removed. “Ironic” prejudice is just prejudiced.
Posts and comments must abide by the lemmy.world terms of service UPDATED AS OF 10/19
Rule 5: Keep it civil. It's OK to say the subject of an article is behaving like a (pejorative, pejorative). It's NOT OK to say another USER is (pejorative). Strong language is fine, just not directed at other members. Engage in good-faith and with respect! This includes accusing another user of being a bot or paid actor. Trolling is uncivil and is grounds for removal and/or a community ban.
Similarly, if you see posts along these lines, do not engage. Report them, block them, and live a happier life than they do. We see too many slapfights that boil down to "Mom! He's bugging me!" and "I'm not touching you!" Going forward, slapfights will result in removed comments and temp bans to cool off.
Rule 6: Memes, spam, other low effort posting, reposts, misinformation, advocating violence, off-topic, trolling, offensive, regarding the moderators or meta in content may be removed at any time.
Rule 7: We didn't USED to need a rule about how many posts one could make in a day, then someone posted NINETEEN articles in a single day. Not comments, FULL ARTICLES. If you're posting more than say, 10 or so, consider going outside and touching grass. We reserve the right to limit over-posting so a single user does not dominate the front page.
We ask that the users report any comment or post that violate the rules, to use critical thinking when reading, posting or commenting. Users that post off-topic spam, advocate violence, have multiple comments or posts removed, weaponize reports or violate the code of conduct will be banned.
All posts and comments will be reviewed on a case-by-case basis. This means that some content that violates the rules may be allowed, while other content that does not violate the rules may be removed. The moderators retain the right to remove any content and ban users.
News [email protected]
Politics [email protected]
World Politics [email protected]
For Firefox users, there is media bias / propaganda / fact check plugin.
https://addons.mozilla.org/en-US/firefox/addon/media-bias-fact-check/
"hello, I would like to inspect the firmware of the insulin pump/pacemaker/artificial heart that keeps me alive, can I have the copy of the source code?"
"no? it's proprietary? well golly! guess I'll trust ya in blind faith then!"
The problem is their insurance company may not give them another option in the American for-profit healthcare system.
Like I said. Blind faith it is.
Yes, that is true any time you are given no choice. But also an unhelpful blaming of the victim.
That's not even remotely the point I was trying to make.
Medical software should not be treated the same as any old random proprietary code.
Right now we just have to trust that "the car has airbags" because no-one is allowed to open it up and check.
That shouldn't need to be the person themselves, but that's the bare minimum of what a sane situation should allow.
It's not obvious to me how these things are related, could you elaborate?
they mean that the insurance would only approve one model. i don't think there are any open source pace makers though.
And this is why I will never work in biotech, finance or (especially) military software engineering
I don't want the risk of something I do causing direct harm to another person
I have only written potentially life-threatening code once in my life. It had to do with voltage/current regulation in the firmware of a high-powered instrument used by field workers at the company where I work. It was a white-knuckled week I spent on just a single page of code, checking and re-checking it countless times and unit testing it in every conceivable way I could imagine.
In the military, direct harm is the only goal. Not quite like the others.
I think I could get very nervous coding for the military, depending on what sort of application I was working on. If it were some sort of administrative database, that doesn't sound so bad. If it were a missile guidance system, on man! A single bug and there goes a village full of civilians. Even something without direct human casualties could be nerve-wracking. Like if it were your code which bricked a billion-dollar military satellite.
Speaking of missile guidance systems, I once met someone who worked a stint for a military contractor. He told me a story about a junior dev who discovered an egregious memory leak in a cruise missile's software. The senior dev then told him "Yeah, I know about that one. But the memory leak would take an hour before it brings the system down and the missile's maximum flight time is less than that, so no problem!" I think coding like that would just drive me into some OCD hell.
yeah. doing a bad job could even save lives. it would be a moral duty to screwup /s (yes I know that is not how it works)
Oh, I thought you were supposed to be protecting my country. I guess that oil money is too tempting
Or aerospace
That’s what I thought before but it doesn’t matter. In medical devices you need good programmers and there are a fuckton of rules and tests to make sure that devices are safe. It’s also very regulated and usually well planned.
Medical companies are the best for this because we’re all accountable directly or indirectly and we do our best. I know I would not work for another kind of coding job because they would all feel too random.
I know mistakes can happen, but it’s the best environment you can work in if you’re a developer. Also you learn a lot and are surrounded with good devs who will make you better.
Anyway, I’m not trying to convince you but we need people who doubt and could be careful. It’s not at every job but usually it’s: planning is good, overtime is not acceptable because it shows bad planning, tests are everywhere (all kinds of tests), merge requests are serious business (your merge request can sit for weeks before being integrated), doc is central and you have to be a part of it, etc.
Last but not least you can still find the PDF of the IEC 62304 which shows every step that should be made to write medical software, and it could make you a better developer even if you’re not working in that field.
And when people are so excited about cybernetic implants I’m like “hell no, i know the firmware for that will go to the lowest bidder and I don’t want to willingly connect myself to that”
You might be forced to choose between that or not being able to get a job due to having to compete with other people who perform better due to cybernetic implants
"welcome to your first day at Amazon. When you clock in, your implants will take over and complete your duties. At the end of your shift your motor function authority will be returned"
"Due to a software glitch, you worked an extra 500 hours. You will not be compensated for this extra time as it was not mandatory or compulsory."
"you are responsible for your excrement, regardless of your nervous system control status. Your actions necessitated another cybernetic employee to clean the work area. You are encouraged to handle these matters when off Amazon property"
I hope the company is sued into oblivion. Cause this kind of lack of quality control and monitoring is unacceptable.
I hope not.
First: You can't avoid bugs. You simply can not.
Second: There aren't that many producers of good insulin pumps and the t:slim is a great device.
Yeah, it’s probably one of the best out there. I don’t love that with their newest pump it’s 100% phone controlled (literally no screen on the device) but there is no way in fuck I am ever trying a Medtronic pump again. Had one for a day because my insurance wouldn’t cover a new tandem pump. It was such a piece of shit
The fact that an app big drains the pump and no fail safes monitor for example the battery drain on the pump itself.. hey this pump is using more battery than it should.. battery will be flat in x hours.
Next time it will inject too much or too little insulin and then?
Avoiding bugs by doing proper QA and building in double and triple checks is the name of the game, not being faultless.
Yeah, I get the sentiment that you can't avoid bugs and I think to an extent they are inevitable at a certain point. But something like this is just negligence.
My company isn't medical or anything life threatening if something goes wrong, but a bug could cost someone a nice heap of money, in turn costing us a nice heap of money. So we have a rule to treat and test our software as if it were used in the medical industry. Although it seems like we should be aiming for a higher standard at this point.
and no fail safes monitor for example the battery drain on the pump itself.. hey this pump is using more battery than it should
Yeah, that was a failure. But wishing a company to be "sued into oblivion" is a tiny little bit overreacting, isn't it?
Next time it will inject too much or too little insulin and then?
How about to just move on and get yourself a model from a different company, if you don't trust them anymore instead of assuming stuff.
Why is it an overreaction? The only language a company speaks is money. So the risk of not doing proper QA and safety precautions should be the shareholders losing their shirt.
Because if this is not the risk, the cost benefit analysis leans towards "fuck the lives of our customers".
If an individual caused this kind of harm to others through negligence they would never see the outside of a prison even again. So why does a group of individuals shielded behind a company get punished less? If the punishment is just a fine, it is not really a crime, is it?
And about moving on, I care about all the people that have one of these things or will get one in the future. The whole "Caveat Emptor" you seem to be preaching does not fly well with me as it exposes many vulnerable people to high risks.
So 214 people let the battery on their (USB Rechargeable) insulin pump die and reported it to the FDA…
Then again Tandem is kind of a shitty company. They based their algorithm in part on data from insulin pumps that had been returned to the manufacture for a software update. Without consent.
Switched from an industry standard luer-lock connector to a proprietary one after purchase. Then required all supply ordering to go through their own sales department and a single manufacturer.
Camped on the design for a small portable pump they patented back in 2012 until there was a viable competitor with innovative technology.
You know what… I think I have a phone call to make :-)