But here we're talking about actual space rockets flying to space with humans in them.
My expectation would be that something like https://tigerstyle.dev/ would be followed or the NASA rules linked from there https://spinroot.com/gerard/pdf/P10.pdf
Before everyone gets all up in arms about it, Windows/Linux UI & database with external microcontrollers handling real-time control is a very common architectural choice for medical and industrial equipment. To the point where many Systems-on-Module (SoMs) come with a Linux-capable ARM processor and a separate, smaller processor for real-time, linked via shared memory.
Anyway, a customer called to report a weird bug that we couldn't resolve. After remoting into the instrument, we discovered that one of the lab technicians had attempted to install Excel on it. At some point the install must have failed, but it left a .dll behind that was causing a conflict with something in our code and keeping the UI from starting properly.
No, we did not learn anything from this incident...
And also what group policies were for, that can disable the user from installing any software?
Am I wrong to assume that the fuckup was on your end, for using the wrong tool and not configuring it properly?
The biggest annoying complaint was "we want to run our EHR software on it!" but because of the FDA requirements, we weren't allowed to install anything on the box. Yet somehow providing AV could be OK in some cases, and in other cases installing Citrix? And then we'd somehow find out someone managed to install the EHR client onto it anyways and it became a big old mess to have to have Philips come send a tech out of their own to reimage a PC we couldn't "legally" service.
It was a big messy pain for a while back in the day. Was happy when we finally got to upgrade to the newer IntelliSpace software on our own PCs in the ward. (Also got to meet a support engineer that came out rocking an Agilent badge, so that was super cool on its own right of history...)
The only way this could possibly have passed FDA scrutiny would be if the original manufacturer had validated this particular system configuration and approved it.
There's probably tons of stuff like this going on all over the place, but it manages to say under the radar, so no one notices it. But with the FDA's increased scrutiny on cybersecurity it will eventually disappear.
Not at all. I agree that it should have been locked down and only privileged accounts should be allowed software update. But the system auto-booted into an Administrator account so it really wasn't a surprise that eventually someone would do something stupid.
I will say that this was for Windows NT retail, not Windows NT Embedded. At that point, getting an NT Embedded license practically required sacrificing your firstborn child. It was only when Microsoft got to Win XP Embedded that the license didn't look like it was written by a team of lawyers who already knew that they were perpetually in Hell.
Sounds like a major NT configuration mistake.
(I realize this mission is to only orbit and not land on the moon)