4 ms·

FBI flight hacker claims queried by security experts

18 points by escapologybb 11y ago

X-Istence 11y ago
It is rather shocking to me that people actually believe these systems to be secure. Flight control systems are old and outdated, and new stuff is bolted on with no regard to security what so ever. Chris is a friend of mine, and I find it very disheartening how much the security community has taken the FBI's warrant at face value, and condemned Chris when he hasn't even had a chance to respond. The security community itself knows how vulnerable all these other systems are, so why is it such a surprise that airplanes are also vulnerable?
- Nrsolis 11y ago
  I think people are having a hard time with the idea that someone could posit that there is a security vulnerability and then actively tamper with the IFE systems while in flight. I know he says he hasn't done that, but I'm not sure I believe that story. If he did in fact try to inject traffic into the network that would affect the flight management computers, then I think he's a fool and a criminal. Highlighting a vulnerability in this fashion is like setting fire to a home to prove it really is flammable. Claiming that you only want to improve fire safety is just a canard. We all know that there are vulnerabilities in every system we use today and it's good for us to RESPONSIBLY work towards improving them. I'm just saddened that this person didn't think anyone was taking him seriously enough that he had to take matters into his own hands.
- 6stringmerc 11y ago
  Huh, I'm more shocked by people willing to believe Chris than Boeing. Maybe it has to do with the way he's conveying his "findings" - Fox News, gloating-type Twitter postings, and Look-At-Poor-Persecuted-Me hand wringing when the three letter LEOs start getting up in his business. If the guy isn't an outright fraud in this case, then I think he's dangerous to society at large - as in, he's got weapons he doesn't understand, and if he does understand them, he doesn't have the judgment capacity to be empowered to have them. I've been skeptical from day one about his claims. I was happy to see the FBI get involved. I'm glad to see this kind of media coverage so he either 1) does help the industry move forward, or 2) is debunked and shamed. My opinion is shaped by the stench of publicity seeking, in that if he was diligent and quiet then he could have contributed in a constructive fashion. Going around talking a big game is a way to get the wrong kind of people interested - I'm just glad it's the US rifling through his stuff instead of an independent actor who wants to get their hands on his toys and spread them to shady characters.
tghw 11y ago
Last year's DEFCON had a talk about this that is worth watching: https://www.youtube.com/watch?v=Uy3nXXZgqmg https://www.youtube.com/watch?v=Uy3nXXZgqmg tl;dr The systems are too separate for hijacking from the entertainment system to be realistic.

18 points by escapologybb 11y ago

It is rather shocking to me that people actually believe these systems to be secure. Flight control systems are old and outdated, and new stuff is bolted on with no regard to security what so ever. Chris is a friend of mine, and I find it very disheartening how much the security community has taken the FBI's warrant at face value, and condemned Chris when he hasn't even had a chance to respond. The security community itself knows how vulnerable all these other systems are, so why is it such a surprise that airplanes are also vulnerable?

Nrsolis 11y ago
I think people are having a hard time with the idea that someone could posit that there is a security vulnerability and then actively tamper with the IFE systems while in flight. I know he says he hasn't done that, but I'm not sure I believe that story. If he did in fact try to inject traffic into the network that would affect the flight management computers, then I think he's a fool and a criminal. Highlighting a vulnerability in this fashion is like setting fire to a home to prove it really is flammable. Claiming that you only want to improve fire safety is just a canard. We all know that there are vulnerabilities in every system we use today and it's good for us to RESPONSIBLY work towards improving them. I'm just saddened that this person didn't think anyone was taking him seriously enough that he had to take matters into his own hands.
6stringmerc 11y ago
Huh, I'm more shocked by people willing to believe Chris than Boeing. Maybe it has to do with the way he's conveying his "findings" - Fox News, gloating-type Twitter postings, and Look-At-Poor-Persecuted-Me hand wringing when the three letter LEOs start getting up in his business. If the guy isn't an outright fraud in this case, then I think he's dangerous to society at large - as in, he's got weapons he doesn't understand, and if he does understand them, he doesn't have the judgment capacity to be empowered to have them. I've been skeptical from day one about his claims. I was happy to see the FBI get involved. I'm glad to see this kind of media coverage so he either 1) does help the industry move forward, or 2) is debunked and shamed. My opinion is shaped by the stench of publicity seeking, in that if he was diligent and quiet then he could have contributed in a constructive fashion. Going around talking a big game is a way to get the wrong kind of people interested - I'm just glad it's the US rifling through his stuff instead of an independent actor who wants to get their hands on his toys and spread them to shady characters.

tghw 11y ago

Last year's DEFCON had a talk about this that is worth watching: https://www.youtube.com/watch?v=Uy3nXXZgqmg https://www.youtube.com/watch?v=Uy3nXXZgqmg tl;dr The systems are too separate for hijacking from the entertainment system to be realistic.