3 ms·
In theory the IFE and avionics are separated by firewalls. Some things like the PA system are often on the IFE side, and hacks for panasonic IFE have included
by willvarfar 9y ago
In theory the IFE and avionics are separated by firewalls. Some things like the PA system are often on the IFE side, and hacks for panasonic IFE have included impersonating the pilot announcements and stuff.
In practice I wouldn't expect the firewalls to be particularly well tested or complete or configured correctly, and it may be possible for an attacker to DOS the firewall and impact the other systems, and possible for the attacker to penetrate the firewall and so on.
- jonathanstrange 9y agoI find this hard to believe. I always thought that IFE and avionics are on separate machines and run over different internal networks and wires. But I'm also not a Boeing engineer. Can someone confirm the above post?
- willvarfar 9y agoYou or I would have completely different sets of wires. Sadly, it seems they usually share wires and are separated by firewalls. There's been lots of CCC and defcon talks about hacking in-flight systems. Googling "panasonic ife hack" gets plenty of hits, as does "Chris Roberts" who is a hacker who has made some pretty big claims about actually really hacking planes in flight and other stupid things. And there are articles like this https://www.wired.com/2015/04/hackers-commandeer-new-planes-passenger-wi-fi/ https://www.wired.com/2015/04/hackers-commandeer-new-planes-... that talk about how the systems share wires.
- tptacek 9y agoI don't know anyone who believes those claims, which have become a kind of shared joke in the software security community.
- willvarfar 9y agoRoberts? Yes. Shared wires? That's fact, right?
- tptacek 9y agoI'm simply commenting on the notion that any packet he sent an IFE caused the plane to literally, perceptibly move. I don't need or want to derive the probability of that having occurred from first principles.
- dkersten 9y agoNobody in the office here (I work on IFE & avionics software) believes those claims either.
- HalfTOXIC 9y agoDo you have source on panasonic IFE hacks? Sounds interesting.
- willvarfar 9y ago(Its mentioned in the opening paragraph of the article ;) Its been a big thing for a long time and there are lots of articles you can google too.)
- HalfTOXIC 9y agoDoh! Thank you.
- Neracked 9y agoNot really familiar with the Boeing architecture, but having worked on similar systems for other commercial aircraft, "firewall" is an understatement for the systems that act as gateways between the aircraft network domains with different criticality levels. The IFE is in the Passenger Information and Entertainment Services Domain (as defined by the standard ARINC664 Aircraft Data Networks). A basic assumption regarding the connectivity to more sensitive domains is that PIESD is totally insecure and anything can happen. Finally to people wondering why aircraft designers would physically connect networks with vastly different security requirements: it's for making it possible to share aircraft/ground communication means (satcom...)
- JoblessWonder 9y agoI only have experience with smaller, general aviation aircraft (Turboprop, 8 seats) but the IFE is indeed connected to the same box that handles maintenance tools. The ipad we use to troubleshoot the engines is on the same wifi network that we use to watch videos.