Diabetics are hunting down obsolete insulin pumps with a security flaw