Unfortunately, Congress is ceding power to both the Executive and Legislative that can only weaken our rights and liberty. They are becoming less and less relevant.
Uh, unless things have changed around here, Congress IS the Legislative branch of the US Federal government.
Current hysteria sounds like assassins can use the pump to kill their targets and avoid discovery, which unless answers are "yes" and "yes" is false, or at least no worse than current medical devices.
Maybe the pump is crap, but the security researcher here is more crap, and
That is in fact what the researcher is saying - the answers are yes and yes. By simply gaining access to any configured PCA pump, whether it's in hospital inventory, on any patient (including an attacker admitted as a patient), an attacker can remotely manipulate any identical PCA pump on the "secure" wireless network. And as others have said, since these pumps generally dispense opioid pain killers, it would be trivial to kill most any patient attached to one.
What you're advocating is security by obscurity. Since this flaw is no longer obscure, the pump is no longer secure. Oh God, I'm channeling Johnny Cochran during the OJ trial.
You are always doing something marginal when the boss drops by your desk.