[CarrotAndStick]

Can’t they keep these systems in isolation, away from any networks? Can’t the updates be delivered manually, directly shipped from the manufacturer?

Images could be retrieved and saved on a peripheral ring of secondary computers, couldn’t they?

Because generally people are idiots when it comes to keeping systems free from the nasties.

[ShadowAce]

I guess they could--but a lot of the attraction some of these devices hold is the ability to network in with other hospitals/doctors.

Also, even in "isolation" a black hat could make it into the same room and upload anything onto the machines.

[Dr. Frank fan]

Can’t they keep these systems in isolation, away from any networks? Can’t the updates be delivered manually, directly shipped from the manufacturer? Images could be retrieved and saved on a peripheral ring of secondary computers, couldn’t they?

Yes, yes, and yes. That's how it's done in my experience, or at least, that's how it's supposed to be done. I don't know what the VA is doing having these systems on non-private networks where worms/viruses could get to them.

[Polybius]

Can’t they keep these systems in isolation, away from any networks?

Well, yeah, most of the time but, during football season, you have to log on to ESPN to keep track of the scores. :-)

[Salo]

Could they? Probably. Will they? No. If a heart scan is done, the files are sent over the wire to radiology and to cardiology for review. They used to use video tape and hand-carry it to the offices, but things have changed.

To really scare you: some radiology work has been outsourced to India because the files can be sent over wire there just as easily, and it's way cheaper to pay in rice and fishheads.

Can’t they keep these systems in isolation, away from any networks?