news.volyx.in

My insulin pump controller uses the Linux kernel. It also violates the GPL (old.reddit.com)

504 points by davisr · 209 days ago · 262 comments on HN

Article summary

The author, a type 1 diabetic, discovered that their insulin pump controller uses the Linux kernel and violates the GPL by not providing the kernel source code. The author tried to contact the manufacturer, Insulet, and the hardware supplier, Nuu, but was unable to obtain the source code. The device's use of an ancient Linux kernel and lack of security measures is a concern. The author is seeking to raise awareness about the GPL violation and the potential security risks.

Main themes

  • GPL violation
  • Medical device security
  • Linux kernel
  • Open source licensing
  • Corporate responsibility

What commenters say

  • The GPL violation is a serious issue that needs to be addressed, especially in a medical device that people rely on for their survival.
  • The company's refusal to provide the source code is a breach of contract and a violation of the GPL, and they should be held accountable.
  • The GPL only grants rights to use and distribute, but does not grant ownership, and the company is not obligated to provide the source code.
  • The written offer of source code is not a contract, and the company is not legally bound to honor it.
  • The issue is not just about the GPL violation, but also about the security risks associated with using an ancient Linux kernel and lack of security measures.
  • The company's actions are inexcusable, and they should be sued for not honoring their promises and for putting people's lives at risk.
  • The FSF or SFC should get involved to help enforce the GPL and ensure that the company provides the source code.
  • The issue highlights the need for better regulation and oversight of medical devices that use open source software.