I always wanted to try and reverse engineer the wireless communication of my wife's insulin pump (it can communicate with a glucose meter to show the current glucose level and receive a bolus).
But between me not having the know-how and any hacking being potentially threatening her health, I never got around to do it. But it would be nice to send a bolus, because the newer smartphone app can't do that via bluetooth.
I'm sure you know this, but giving someone a large and unexpected bolus of insulin is a good way to kill them, particularly if they are asleep.
If I were designing an artificial electronic pancreas like that, I would be super, super paranoid. It's probably one of the few medical devices that I really think should be a strong user of asymmetric cryptography with a challenge-response-challenge-response protocol and multiple independent sanity-checking validation steps at every opportunity. If it can't deliver the bolus it thinks you need, it should alarm loudly and tell you to manually check. If it has a bit flip in the night and slowly drives 255 units of insulin into your bloodstream at 3 am, you won't wake up.
I would expect that any modern insulin pump is required to be protected very thoroughly against random malfunctions. Some certification authorities seem to require IEC 61508 (functional safety) as a prerequisite for IEC 60601 (safety of medical equipment). IEC 61508 kind of requires self-monitoring against malfunctions in a reliable way. This includes mechanisms for detecting random bit flips if these can cause potential harm.
You're right that an artificial pancreas needs to be super careful.
The diabetes community got started on this before the official manufacturers did. Probably in part because the manufacturers were concerned about being 100% bulletproof whereas (some) people living with diabetes were willing to take a bit more risk.
And there's a balance around alarms. Some glucose monitoring tech can be frustrating and lead to "alarm fatigue".
Most of the artificial pancreases I'm aware of mitigate some of the risk by rarely sending large boluses at all. They tend to adjust the background basal rate and only send a bolus when you explicitly tell them you've eaten.
I also have an unhackable pump, unfortunately. I know there were attempts on the later Medtronic pumps by some pretty smart people so it looks unlikely that they'll ever be able to be controller openly.
My next pump will definitely be one that allows remote control and some sort of looping. Whether that's officially from the manufacturer or not.
These are generally not available to just buy. You need a prescription, and even if I could buy it myself, the price is in the upper four figures, probably more like five figures if I'd buy all necessary equipment
But between me not having the know-how and any hacking being potentially threatening her health, I never got around to do it. But it would be nice to send a bolus, because the newer smartphone app can't do that via bluetooth.