Hijacking... with an app?
04-11-2013 | 04:51 PM
#12
Gets Weekends Off
Joined: Jun 2007
Posts: 4,196
Likes: 51
From: Legacy FO
Correct. He uses the same system which allows ATC to see the Mode Control Panels and FMSs and can edit them without the pilots knowing until the aircraft changed position/attitude.
04-11-2013 | 04:57 PM
#13
Gets Weekends Off
Joined: Jul 2007
Posts: 4,064
Likes: 37
From: 767 Captain
How could he get the aircraft to change altitude without the pilots changing the altitude setting on the GCP/FCP (or whatever you call in your aircraft)?
04-11-2013 | 05:01 PM
#14
Da Hudge
Joined: Oct 2006
Posts: 17,473
Likes: 0
From: Poodle Whisperer
Hacker uses an Android to remotely attack and hijack an airplane | Computerworld Blogs
Amazing how simple it is ... really.
Amazing how simple it is ... really.
04-11-2013 | 05:37 PM
#15
Gets Weekends Off
Joined: Jun 2007
Posts: 4,196
Likes: 51
From: Legacy FO
It sounds like he could go in and insert a bogus point in the "string" of the flight plan and get the aircraft off course.
How could he get the aircraft to change altitude without the pilots changing the altitude setting on the GCP/FCP (or whatever you call in your aircraft)?
How could he get the aircraft to change altitude without the pilots changing the altitude setting on the GCP/FCP (or whatever you call in your aircraft)?
04-11-2013 | 06:48 PM
#17
Gets Weekends Off
Joined: Jul 2009
Posts: 988
Likes: 0
From: Seat: Vegan friendly faux leather
All the news articles are grossly exaggerated or oversimplified. ACARS has always been unencrypted. Essentially all air communications are unencrypted for obvious reasons; some police departments have made similar attempts in past to encrypt communication, and ultimately abandoned most of the efforts (can you imagine several departments rushing to a scene, and now can't communicate or hear others due to miscommunication on the scramble code?)
Per most reports the guy used a simulator that he got of ebay and "hacked" the inputs to simulate hacked "input signals" into the PC simulator, which in real life can be transmitted wirelessly. He then said "wow, somebody could provide similar inputs to what I did if they transmitted things correctly, look it is insecure!!"
No, That German Hacker Probably Can't Hijack an Airplane with Software - Adam Clark Estes - The Atlantic Wire
The real danger is if he causes a paranoid overreaction by regulatory or governmental agencies.
A quick but very nice summary background read on ACARS encryption and issues:
Avionics Magazine :: Securing ACARS: Data Link in the Post-9/11 Environment
Per most reports the guy used a simulator that he got of ebay and "hacked" the inputs to simulate hacked "input signals" into the PC simulator, which in real life can be transmitted wirelessly. He then said "wow, somebody could provide similar inputs to what I did if they transmitted things correctly, look it is insecure!!"
No, That German Hacker Probably Can't Hijack an Airplane with Software - Adam Clark Estes - The Atlantic Wire
The real danger is if he causes a paranoid overreaction by regulatory or governmental agencies.
A quick but very nice summary background read on ACARS encryption and issues:
Avionics Magazine :: Securing ACARS: Data Link in the Post-9/11 Environment
04-11-2013 | 09:51 PM
#19
Working weekends
Joined: Jul 2005
Posts: 2,384
Likes: 0
From: Left Seat
this article discusses further. It appears, possibly, a chance exists that the hacker in question could transmit false data to ACARS and thereby cause the plane's crew to respond to the false info. But I don't see how physical (virtual) control could be taken of the plane. I don't see any mention of that.
Researcher hacks aircraft controls with Android smartphone ? The Register
the hackers presentation slides
http://conference.hitb.org/hitbsecco...o%20Series.pdf
Researcher hacks aircraft controls with Android smartphone ? The Register
Teso was also able to use flaws in ACARS to insert code into a virtual aircraft's Flight Management System. By running the code between the aircraft's computer unit and the pilot's display he was able to take control of what the aircrew would be seeing in the cockpit and change the direction, altitude, and speed of the compromised craft.
He admitted that some of this was moot, given that the human pilot could always override the automatic systems, but the software could be used to make cockpit displays go haywire or control other functions, like deploying oxygen masks or lights.
He admitted that some of this was moot, given that the human pilot could always override the automatic systems, but the software could be used to make cockpit displays go haywire or control other functions, like deploying oxygen masks or lights.
http://conference.hitb.org/hitbsecco...o%20Series.pdf
04-12-2013 | 06:05 AM
#20
Gets Weekends Off
Joined: Mar 2008
Posts: 13,843
Likes: 1
From: FAA 'Flight Check'
Some responses from other industry experts.
No, That German Hacker Probably Can't Hijack an Airplane with Software.
No, That German Hacker Probably Can't Hijack an Airplane with Software.
Thread
Thread Starter
Forum
Replies
Last Post
