Excuse the naive question but I'm trying to understand a bit about security in home health and medial devices and a recent report about how home Covid test results can be altered has left me a bit confused about how security in Bluetooth and apps works.
Two things in particular surprise me (again naive):
- it is possible to easily examine the content of Bluetooth communications between a medical device and an app, and
- it is possible to examine the code for an app in sufficient detail to decipher the content of those communications.
I would have thought (naively) that neither of these things would have been possible, at least not for a medical device; which leads to my questions:
- Shouldn't all communication over Bluetooth be encrypted so that it cannot be intercepted and altered or deciphered? Did CUE simply fail to do this, or is not actually not possible to do?