5 ms·

So the next breed of terrorists will likely be those who’ll take over the flight avionics while on the plane? Laptops to be banned soon

iSnow 5y ago
How would you plug your Macbook into the plane's network?
- dvh 5y ago
  Couple of 0-days
- petercooper 5y ago
  You say that, but I'm always astounded when they talk about cyberterrorists being able to get into the power networks and similar bits of national infrastructure which really shouldn't be connected to the public Internet at all.
  - buro9 5y ago
    SCADA based on Windows exist and are connected to the internet via telnet and FTP. These things were deployed 20 years ago and are still in operation.
- withinboredom 5y ago
  Get some buddies to load some luggage. Walk in while loading luggage?
  - mschuster91 5y ago
    Luggage is rolled in with containers and then locked in place (to prevent them rolling around), that's what the rails at the bottom are there for. You would not be able to get out again.
    - technothrasher 5y ago
      Unfortunately, it's been conclusively shown that getting out again isn't necessarily mission critical for terrorists.
      - Nextgrid 5y ago
        At that point, if they can get in there (or anywhere near the door), they may as well leave a bomb or equivalent explosive/incendiary device (a big enough lithium battery should do the trick). Actually accessing the equipment room isn't really necessary.
  - iSnow 5y ago
    I don't know a ton about a modern airliner but my guess would be that the door between the server compartment and the cargo bay can't simply be opened from the cargo bay, as it would be way too easy for anyone to enter the cockpit.
  - x4e 5y ago
    I was thinking the same thing, but I believe the door is locked which is why his operating of the handle was slightly weird
- mavhc 5y ago
  https://www.wired.com/2015/05/feds-say-banned-researcher-commandeered-plane/ https://www.wired.com/2015/05/feds-say-banned-researcher-com...
  - jaywalk 5y ago
    It's never been proven (as far as I'm aware) that the guy was actually able to send commands to a real plane. It's no surprise that he was able to read data, because the seatback screens have to get the flight data they display from somewhere. But actually sending commands that will reach real systems is a pretty big leap.
    - throwinthisaway 5y ago
      Throwaway account to remain anonymous because these aren't nice words. I worked with Chris Roberts for a period of time. Making things up to scare companies into dumping cash on him is kind of his 'thing'. I never once actually saw him perform any real exploits or produce anything of value except scary/funny looking powerpoints and lots of trash talk. In this case he just stepped a little bit too far with his made up scenario & nothing ever came of it.
      - jaywalk 5y ago
        The whole thing seemed very weird, so none of what you said is surprising. Glad to have that background info.
donkarma 5y ago
That was a theory for MH370

iSnow 5y ago

How would you plug your Macbook into the plane's network?

dvh 5y ago
Couple of 0-days
petercooper 5y ago
You say that, but I'm always astounded when they talk about cyberterrorists being able to get into the power networks and similar bits of national infrastructure which really shouldn't be connected to the public Internet at all.
- buro9 5y ago
  SCADA based on Windows exist and are connected to the internet via telnet and FTP. These things were deployed 20 years ago and are still in operation.
withinboredom 5y ago
Get some buddies to load some luggage. Walk in while loading luggage?
- mschuster91 5y ago
  Luggage is rolled in with containers and then locked in place (to prevent them rolling around), that's what the rails at the bottom are there for. You would not be able to get out again.
  - technothrasher 5y ago
    Unfortunately, it's been conclusively shown that getting out again isn't necessarily mission critical for terrorists.
    - Nextgrid 5y ago
      At that point, if they can get in there (or anywhere near the door), they may as well leave a bomb or equivalent explosive/incendiary device (a big enough lithium battery should do the trick). Actually accessing the equipment room isn't really necessary.
- iSnow 5y ago
  I don't know a ton about a modern airliner but my guess would be that the door between the server compartment and the cargo bay can't simply be opened from the cargo bay, as it would be way too easy for anyone to enter the cockpit.
- x4e 5y ago
  I was thinking the same thing, but I believe the door is locked which is why his operating of the handle was slightly weird
mavhc 5y ago
https://www.wired.com/2015/05/feds-say-banned-researcher-commandeered-plane/ https://www.wired.com/2015/05/feds-say-banned-researcher-com...
- jaywalk 5y ago
  It's never been proven (as far as I'm aware) that the guy was actually able to send commands to a real plane. It's no surprise that he was able to read data, because the seatback screens have to get the flight data they display from somewhere. But actually sending commands that will reach real systems is a pretty big leap.
  - throwinthisaway 5y ago
    Throwaway account to remain anonymous because these aren't nice words. I worked with Chris Roberts for a period of time. Making things up to scare companies into dumping cash on him is kind of his 'thing'. I never once actually saw him perform any real exploits or produce anything of value except scary/funny looking powerpoints and lots of trash talk. In this case he just stepped a little bit too far with his made up scenario & nothing ever came of it.
    - jaywalk 5y ago
      The whole thing seemed very weird, so none of what you said is surprising. Glad to have that background info.

donkarma 5y ago

That was a theory for MH370