How has the field of medical device security evolved since the 2008 hack of a implantable medical device? Why do I still maintain hope that medical device security will improve? What’s fiction and what’s a clinically relevant risk? I will discuss the subtle differences in philosophy between information security specialists and clinical engineers who must ensure the safety of patients depending on the function of medical devices. By the end of the talk, an information security specialist will have a better understanding of how to work productively with clinical engineering, and more important, how to share a beer with a safety-minded clinical engineer.