marble

There's an interesting article on The Register about a researcher who did a presentation on hacking aircrafts.

Seems the guy managed to buy some flight managment computers on eBay and then created a smartphone app to send spoof ACARS messages to them. He can control the plane using his smartphone by sending updates to the aircraft's route using these messages.

It's an interesting concept and, though not really sure how much of a concern this should be?

goalie

If in fact for real, then this gives a whole new meaning to "please turn off all electronic devices"

NFeldberg

Nope, I dont buy it.

PainCorp

I was under the impression that the wifi, in seat entertainment, etc, all had to be on a separate network from flight controls, etc.

jaysona

This was a great PoC (proof of concept), but the amount of work required to actually perform this in real life on a real aircraft is a lot more complex than Hugo has led people to believe.

Some important bits of information left out include they did not test the attack on a real aircraft with real systems. The system used to validate the exploit is a simulation version of the FMS code (similarity to the embedded one has to be investigated). The “full control” claim is not valid, there is no way to engage the autopilot from the FMS. Of course, when engaged in “managed mode” the A/C will follow the FMS.

The aviation industry has known about this particular presentation for a while now.

Other things to consider are that the pilots would quickly realize something is not right, since their printed flight plan would not match what the FMS is doing. ATC would be squaking all over the place trying to determine why is the airplane deviating for its flight plan, etc.

All in all this makes for some great headlines and talking point for bobbing heads and arm chair experts, that's about all.

That being said, both ADS-B and ACARS could use some protocol strengthening up though.

acunningham

They are, but the avionics communicate with the outside world through radio data systems such as ADS-B and ACARS that have no security whatsoever. The attack is through these radio communications.

marble

Yup, the smartphone is more of a gimmick than anything else. The communication to the plane was done via an external radio (albeit a software radio controlled by the smartphone). This is the modern equivalent of taking a radio transmitter on board, pretending to be ATC, and telling the captain that the runway is no longer where he thinks it is.

Wally Bird

http://www.forbes.com/sites/andygree...ation-systems/

Sorry, Script Kiddies this is all smoke and mirrors.

Read Patrick Smith's response: http://www.askthepilot.com/hijacking-via-android/