4 ms·

You can, using some biometric safeties on the controls.

by frevd 12y ago

toyg 12y ago
How would biometrics protect from an authorized party controlling the plane he is supposed to control?
- frevd 12y ago
  Overriding the override ;]. But yeah, it's kind of a race-condition. Not sure, how about some majority vote, enough members on the crew there to vote?
  - Piskvorrr 12y ago
    Trying to get a quorum aboard a falling plane. Now that's what I call an extreme democratic procedure ;)
    - toyg 12y ago
      And in a dramatic scenario, rather than "One head, one vote", you'll probably have "One gun, 100 votes" anyway...
s_kilk 12y ago
Aren't many biometric controls trivial to defeat though? For instance, to replicate someones fingerprints all you need is a high res photo of their hand from a distance.
- frevd 12y ago
  Yeah, iris scan isn't safe either if attackers can get the authorized person in their control. Maybe using two random people from the crew would be best, hard to find out for an attacker and still safe against "forgetting" the secret code.
- ptaipale 12y ago
  Or, a less high-tech solution: use the knife of your airline meal set to cut away the finger. Then the airline will move on in the arms race by responding with a fingerprint reader that wants to have a pulse in the finger, and then it doesn't work when the user is in distress and has an extremely high pulse. And then there is an accident and we the armchair security experts come up with more bright ideas.
  - ben1040 12y ago
    >Or, a less high-tech solution: use the knife of your airline meal set to cut away the finger. Last time I had an airline meal, even in first class, the knife "blade" was hard rubber mounted on a blunt metal handle. It could barely cut the food cleanly, never mind someone's finger.
    - ptaipale 12y ago
      Yes, I was being sarcastic. You do, however, occasionally get real cutlery, even in economy class, with some airlines.
ptaipale 12y ago
That's not foolproof either. There's always a compromise to make: if you have more automation to prevent pilot from being suicidal or making mistakes, you also have more automation that prevents a pilot - or anyone - taking over when the computer control goes wrong. Let's accept it: we may make things gradually better, but there is no silver bullet that would solve all these problems.
- frevd 12y ago
  Fine. You authorize the whole crew, not by fingerprint and not by code, but by voice recognition and secret code words per person. Then you allow the override to be overridden by a majority (recursively). Sounds way better than making the door break when a majority of people kicks at them. It is faster than remembering and entering codes, and cannot be overridden by one sick authorized person. An attacker would have to control the whole crew to make them do what he wants, to a level where they actually speak the secret words. In an event where the crew anticipates a crash, giving in on pressure would be the worst option to take. To prevent attackers from muting all but the required majority of crew members, sensors all over the plane must be able to record any emergency code words spoken in the event of an attack, which will enact certain security measures (depending on the code word could lock or unlock the possibility to enter the cockpit, notify air security etc). This system should of course not be able to be deactivated. And if you really wanted to make things sure, you could install majority-authorization buttons on every seat setup to be pressed by a percentage of boarded people within a period of mere seconds, which would allow the people on the plane to make a decision. For an attacker it is not possible to make all those people press the button, since he would not know who is not complying. Of course you can also have some remote mechanism of unlocking, although the security implications of remote authorization and transmission of commands would be complicated to get right and open too many attack vectors.
  - ptaipale 12y ago
    I guess you are making fun of someone, but that is a good demonstration why too complex procedures are not a good idea. Any procedure that aircraft crew is supposed to handle also needs to be something that is trained, memorized, and practiced regularly. Certain simplicity is ideal.
deleted 12y ago
[deleted]

You can, using some biometric safeties on the controls.

by frevd 12y ago

You can, using some biometric safeties on the controls.

toyg 12y ago

How would biometrics protect from an authorized party controlling the plane he is supposed to control?

frevd 12y ago
Overriding the override ;]. But yeah, it's kind of a race-condition. Not sure, how about some majority vote, enough members on the crew there to vote?
- Piskvorrr 12y ago
  Trying to get a quorum aboard a falling plane. Now that's what I call an extreme democratic procedure ;)
  - toyg 12y ago
    And in a dramatic scenario, rather than "One head, one vote", you'll probably have "One gun, 100 votes" anyway...

s_kilk 12y ago

Aren't many biometric controls trivial to defeat though? For instance, to replicate someones fingerprints all you need is a high res photo of their hand from a distance.

frevd 12y ago
Yeah, iris scan isn't safe either if attackers can get the authorized person in their control. Maybe using two random people from the crew would be best, hard to find out for an attacker and still safe against "forgetting" the secret code.
ptaipale 12y ago
Or, a less high-tech solution: use the knife of your airline meal set to cut away the finger. Then the airline will move on in the arms race by responding with a fingerprint reader that wants to have a pulse in the finger, and then it doesn't work when the user is in distress and has an extremely high pulse. And then there is an accident and we the armchair security experts come up with more bright ideas.
- ben1040 12y ago
  >Or, a less high-tech solution: use the knife of your airline meal set to cut away the finger. Last time I had an airline meal, even in first class, the knife "blade" was hard rubber mounted on a blunt metal handle. It could barely cut the food cleanly, never mind someone's finger.
  - ptaipale 12y ago
    Yes, I was being sarcastic. You do, however, occasionally get real cutlery, even in economy class, with some airlines.

ptaipale 12y ago

That's not foolproof either. There's always a compromise to make: if you have more automation to prevent pilot from being suicidal or making mistakes, you also have more automation that prevents a pilot - or anyone - taking over when the computer control goes wrong. Let's accept it: we may make things gradually better, but there is no silver bullet that would solve all these problems.

frevd 12y ago
Fine. You authorize the whole crew, not by fingerprint and not by code, but by voice recognition and secret code words per person. Then you allow the override to be overridden by a majority (recursively). Sounds way better than making the door break when a majority of people kicks at them. It is faster than remembering and entering codes, and cannot be overridden by one sick authorized person. An attacker would have to control the whole crew to make them do what he wants, to a level where they actually speak the secret words. In an event where the crew anticipates a crash, giving in on pressure would be the worst option to take. To prevent attackers from muting all but the required majority of crew members, sensors all over the plane must be able to record any emergency code words spoken in the event of an attack, which will enact certain security measures (depending on the code word could lock or unlock the possibility to enter the cockpit, notify air security etc). This system should of course not be able to be deactivated. And if you really wanted to make things sure, you could install majority-authorization buttons on every seat setup to be pressed by a percentage of boarded people within a period of mere seconds, which would allow the people on the plane to make a decision. For an attacker it is not possible to make all those people press the button, since he would not know who is not complying. Of course you can also have some remote mechanism of unlocking, although the security implications of remote authorization and transmission of commands would be complicated to get right and open too many attack vectors.
- ptaipale 12y ago
  I guess you are making fun of someone, but that is a good demonstration why too complex procedures are not a good idea. Any procedure that aircraft crew is supposed to handle also needs to be something that is trained, memorized, and practiced regularly. Certain simplicity is ideal.

deleted 12y ago

[deleted]