4 ms·

US armed drones found infected with computer virus

18 points by denzil_correa 14y ago

SchizoDuckie 14y ago
Next to being baffled that this comes out into the world, I can only laugh at this. Be careful what you wish for USA, You want cyber warfare? You just got it. Just imagine, somebody with the intention to do harm having control over drones like that. It would be the ultimate remote strike, using their own systems, thát would rock their world the world!
- gaius 14y ago
  You don't deserve that downvote. Obama has been crowing in the NYT about his sK1Lz in cyberwarfare against the Iranians. What did he expect to happen?
  - natrius 14y ago
    My understanding is that U.S. cyberwarfare ended up in the NYT because of leaks and good journalism, not because Obama was touting it.
    - gaius 14y ago
      In an election year, when the Obama administration has a track record of zero tolerance of leaks and whistleblowers?
      - natrius 14y ago
        A quick Googling uncovered the controversy about the leaks, which I wasn't aware of. http://articles.latimes.com/2012/jun/06/news/la-pn-mccain-calls-for-investigation-of-obama-administration-leaks-20120606 http://articles.latimes.com/2012/jun/06/news/la-pn-mccain-ca...
- planetguy 14y ago
  The US most definitively does not want cyber warfare, which is why a bunch of military types have been going around for years warning about the possibility and the need to harden systems against it. Cyber warfare is bad news for the US because it's one of the areas of warfare in which the US doesn't have an obvious dominance.
  - SchizoDuckie 14y ago
    Flame, Stuxnet?...
    - planetguy 14y ago
      Sure, just because you don't want a type of warfare doesn't mean you're not going to engage in it. This happens to be the kind of warfare which doesn't "escalate" as such -- certain countries will continue to attack US systems at exactly the same rate regardless of whether the US is attacking 'em back.
      - gaius 14y ago
        Iran could turn around tomorrow and reassign everyone from its nuclear weapons programme to cyberwarfare instead.
- deleted 14y ago
  [deleted]
- deleted 14y ago
  [deleted]
metaobject 14y ago
I cannot believe that they would use Windows to control these drones. I wonder how the due diligence went down for that decision. It's reassuring to hear that they switched the controllers to Linux. I don't use Windows for work or development purposes (I have 2 windows machines at home used as iTunes machines), so my question is: are there Windows versions available that are stripped down? It just seems that the amount of exploits that come out per week/month/year for Windows would get in the way of operational missions.
- gouranga 14y ago
  I'm not joking here but windows is absolutely rock solid and is as secure as any Unix variant if you set it up correctly. If you don't, it's Swiss cheese. Windows is only insecure because they've set it up like that to aid consumers. They do stripped down versions such as windows embedded. You can strip a desktop install down to virtually nothing as well and it is very secure. It is however beyond most people to do so. By changing the platform they've effectively saved their butts by pointing at the vendor. The real problem is incompetence and cost cutting. I predict rootkit drones next as they haven't actually solved the real problem. edit for the morons who blindly Downvote this: I spent a number of years building secure systems for the UK MoD. There were no attack vectors at all of any kind human or network, so the fact they were infected was purely incompetence.
  - gaius 14y ago
    Everyone forgets (or deliberately overlooks) http://support.microsoft.com/kb/93362 http://support.microsoft.com/kb/93362 NOTE: This does not mean that Windows NT is C2 certified (no operating system is ever C2 certified). Certification applies to a particular installation, including hardware, software, and the environment that the system is in. It is up to an individual site to become C2 certified.
    - gouranga 14y ago
      yes and we were C2 cert in 2001. I was in charge of compliance. The PCs were locked in metal cabinets, cables shielded, all hardware ports disabled, no physical connection anywhere to the internet, vpn+checkpoint to other sites which were also C2, software was all source vetted and escrowed before being allowed on the network, crypto everywhere. Factory floor was shielded as well to prevent RF escaping, datacentre was three gated inside the facility and there were lockdown pads and access control both biometric and smartcard on every door. The software eng was the same except even heavier locked down with GPO and LSP. We could have put an apple II in there and it'd be C2.
andygcook 14y ago
I think it's pretty obvious who did it...Skynet!
Porter_423 14y ago
That's what they're doing already is they take the guns off, which makes the drones perfectly safe. I can't think of any significant event in American history regarding airplane crashes, either, so this should work perfectly.
crikli 14y ago
Source article from which DK and other sources extemporized: http://arstechnica.com/business/2011/10/exclusive-computer-virus-hits-drone-fleet/ http://arstechnica.com/business/2011/10/exclusive-computer-v...
- eli 14y ago
  That's actually the same story linked in the first sentence of the post. It's from last October and it ran in Wired first. There was a lot of healthy skepticism on HN when it was first posted http://news.ycombinator.com/item?id=3085004 http://news.ycombinator.com/item?id=3085004
ck2 14y ago
Can you imagine what is going to happen when every police force in the USA starts blowing their budget on domestic drones next year?
- antidoh 14y ago
  Yeah, their budgets will increase.

18 points by denzil_correa 14y ago

Next to being baffled that this comes out into the world, I can only laugh at this. Be careful what you wish for USA, You want cyber warfare? You just got it. Just imagine, somebody with the intention to do harm having control over drones like that. It would be the ultimate remote strike, using their own systems, thát would rock their world the world!

gaius 14y ago
You don't deserve that downvote. Obama has been crowing in the NYT about his sK1Lz in cyberwarfare against the Iranians. What did he expect to happen?
- natrius 14y ago
  My understanding is that U.S. cyberwarfare ended up in the NYT because of leaks and good journalism, not because Obama was touting it.
  - gaius 14y ago
    In an election year, when the Obama administration has a track record of zero tolerance of leaks and whistleblowers?
    - natrius 14y ago
      A quick Googling uncovered the controversy about the leaks, which I wasn't aware of. http://articles.latimes.com/2012/jun/06/news/la-pn-mccain-calls-for-investigation-of-obama-administration-leaks-20120606 http://articles.latimes.com/2012/jun/06/news/la-pn-mccain-ca...
planetguy 14y ago
The US most definitively does not want cyber warfare, which is why a bunch of military types have been going around for years warning about the possibility and the need to harden systems against it. Cyber warfare is bad news for the US because it's one of the areas of warfare in which the US doesn't have an obvious dominance.
- SchizoDuckie 14y ago
  Flame, Stuxnet?...
  - planetguy 14y ago
    Sure, just because you don't want a type of warfare doesn't mean you're not going to engage in it. This happens to be the kind of warfare which doesn't "escalate" as such -- certain countries will continue to attack US systems at exactly the same rate regardless of whether the US is attacking 'em back.
    - gaius 14y ago
      Iran could turn around tomorrow and reassign everyone from its nuclear weapons programme to cyberwarfare instead.
deleted 14y ago
[deleted]
deleted 14y ago
[deleted]

metaobject 14y ago

I cannot believe that they would use Windows to control these drones. I wonder how the due diligence went down for that decision. It's reassuring to hear that they switched the controllers to Linux. I don't use Windows for work or development purposes (I have 2 windows machines at home used as iTunes machines), so my question is: are there Windows versions available that are stripped down? It just seems that the amount of exploits that come out per week/month/year for Windows would get in the way of operational missions.

gouranga 14y ago
I'm not joking here but windows is absolutely rock solid and is as secure as any Unix variant if you set it up correctly. If you don't, it's Swiss cheese. Windows is only insecure because they've set it up like that to aid consumers. They do stripped down versions such as windows embedded. You can strip a desktop install down to virtually nothing as well and it is very secure. It is however beyond most people to do so. By changing the platform they've effectively saved their butts by pointing at the vendor. The real problem is incompetence and cost cutting. I predict rootkit drones next as they haven't actually solved the real problem. edit for the morons who blindly Downvote this: I spent a number of years building secure systems for the UK MoD. There were no attack vectors at all of any kind human or network, so the fact they were infected was purely incompetence.
- gaius 14y ago
  Everyone forgets (or deliberately overlooks) http://support.microsoft.com/kb/93362 http://support.microsoft.com/kb/93362 NOTE: This does not mean that Windows NT is C2 certified (no operating system is ever C2 certified). Certification applies to a particular installation, including hardware, software, and the environment that the system is in. It is up to an individual site to become C2 certified.
  - gouranga 14y ago
    yes and we were C2 cert in 2001. I was in charge of compliance. The PCs were locked in metal cabinets, cables shielded, all hardware ports disabled, no physical connection anywhere to the internet, vpn+checkpoint to other sites which were also C2, software was all source vetted and escrowed before being allowed on the network, crypto everywhere. Factory floor was shielded as well to prevent RF escaping, datacentre was three gated inside the facility and there were lockdown pads and access control both biometric and smartcard on every door. The software eng was the same except even heavier locked down with GPO and LSP. We could have put an apple II in there and it'd be C2.

andygcook 14y ago

I think it's pretty obvious who did it...Skynet!

Porter_423 14y ago

That's what they're doing already is they take the guns off, which makes the drones perfectly safe. I can't think of any significant event in American history regarding airplane crashes, either, so this should work perfectly.

crikli 14y ago

Source article from which DK and other sources extemporized: http://arstechnica.com/business/2011/10/exclusive-computer-virus-hits-drone-fleet/ http://arstechnica.com/business/2011/10/exclusive-computer-v...

eli 14y ago
That's actually the same story linked in the first sentence of the post. It's from last October and it ran in Wired first. There was a lot of healthy skepticism on HN when it was first posted http://news.ycombinator.com/item?id=3085004 http://news.ycombinator.com/item?id=3085004

ck2 14y ago

Can you imagine what is going to happen when every police force in the USA starts blowing their budget on domestic drones next year?

antidoh 14y ago
Yeah, their budgets will increase.