Medical device "jailbreak" could help solve the dangerous shortage of ventilators:
[...] Security researcher Trammell Hudson analyzed the AirSense 10—the world's most widely used CPAP—and made a startling discovery. Although its manufacturer says the AirSense 10 would require "significant rework to function as a ventilator," many ventilator functions were already built into the device firmware.
Its manufacturer, ResMed, says the $700 device solely functions as a continuous positive airway pressure machine used to treat sleep apnea. It does this by funneling air into a mask. ResMed says the device can't work as a bilevel positive airway pressure device, which is a more advanced machine that pushes air into a mask and then pulls it back out. With no ability to work in both directions or increase the output when needed, the AirSense 10 can't be used as the type of ventilator that could help patients who are struggling to breathe. After reverse-engineering the firmware, Hudson says the ResMed claim is simply untrue.
To demonstrate his findings, Hudson on Tuesday is releasing a patch that he says unlocks the hidden capabilities buried deep inside the AirSense 10. The patch is dubbed Airbreak in a nod to jailbreaks that hobbyists use to remove technical barriers Apple developers erect inside iPhones and iPads. Whereas jailbreaks unlock functions that allow the installation of unauthorized apps and the accessing of log files and forensic data, Airbreak allows the AirSense 10 to work as a bilevel positive airway pressure machine, a device that many people refer to as a BiPAP.
"Our changes bring the AirSense S10 to near feature parity with BiPAP machines from the same manufacturer, boost the maximum pressure output available, and provide a starting point to add more advanced emergency ventilator functionality," Hudson and other researchers wrote on their website disclosing the findings.
(Score: 2) by toddestan on Thursday April 16 2020, @03:22AM
It could also just be that their CPAP devices and ventilators share a common code base, even though the hardware is different.
To use a car analogy, for many cars - the car with the manual transmission often shares the same ECU with the automatic transmission version. Sure, you could hack the the ECU and get the code that supports the automatic transmission to execute. But assuming the car even starts, it's not going to make a difference - you're still going to be rowing your own gears to get it to move.