Chad Waters via plug on 12 May 2022 12:36:29 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Medical Open Source Problem, Nvidia open source


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512


> It's part of my wheelhouse too, and it scares the hell out of me.
> The SBOM looks like a good solution, however..... it's an additional
> step/change and mfgrs have proven they don't give a rip. Complaining
> about OSS security is funny- Windows, anyone? 100 issues fixed this cycle.

The big players know it is coming and are *mostly* receptive in the collaborations around its development.  Its the smaller companies that still hold onto a "security through obscurity" mindset.

As far as OSS vs Windows as the platform: there are challenges in each. A lot of times a manufacturer will say "its runs a proprietary embedded OS" and then it turns out to be an EOL version of something like Yocto. There's a tendency to forget about maintaining linux-based devices.

Anyway- I am currently building a medical device interoperability/security lab network. I'm trying to build out the core clinical systems you would see in a hospital environment: I am currently playing with Orthanc (PACS/DICOM), but I am looking for other ( probably openehr, mirth). Does anyone any suggestions? I care less about the functionality of the systems themselves, I am more concerned I have  robust interoperability capabilities to test the medical devices.

My main sources thus far are here:
https://www.medfloss.org/
https://www.debian.org/devel/debian-med/

Thanks
-Chad
-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wnUEARYKAAYFAmJ9YZ0AIQkQdux8wFb3TQIWIQST0zMbATd8WxFurEN27HzA
VvdNAm4RAQDF6XxTOa2LLlFGfGv5x+gY8IPBD4bJ5ZPNPI6XMDlkKAEAyEY1
D69nL1+uI0J5V0S1LKefH0wB/W3sSB3rB4JcaQU=
=oGGW
-----END PGP SIGNATURE-----

Attachment: publickey - plug@wooders.net - 0x93D3331B.asc
Description: application/pgp-keys

Attachment: publickey - plug@wooders.net - 0x93D3331B.asc.sig
Description: PGP signature

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug