HN

Need help?
<- Back
Coin-sized device can hack a Boeing 737

Coin-sized device can hack a Boeing 737

_tk_

Comments (85)

  • kmoser
    > In their paper, the researchers outline a range of fixes for the vulnerability they've uncovered, starting with removing the connector in the vulnerable port altogether, or plugging it with epoxy.If you can safely disable the port completely, that implies the port is not needed to begin with. Is that really true? What's the purpose for it?
  • userbinator
    one that's routinely within reach of maintenance workers or other airport and airline staff between flightsYou already trust them (as well as the pilots) every time with your flight.
  • ctippett
    The connector shown in the article is apparently the 24-pin connector known as the Open Maintenance Connector (OMC). It's located in the electronics and equipment bay under the nose of the Boeing 737 NG and 737 Max.I say "apparently" as I had Gemini identify the port from the image.The OMC provides direct access to key avionics data networks, including the ARINC 429 buses that link the pilot's Flight Management Computer (FMC) to the Multi-Function Control and Display Unit (MCDU).
  • United857
    > less than a minute, that hardware implant can be fitted into a port accessible via a hatch on the exterior of the planeJust as with computers, as the saying goes, if you have physical access to the device then all bets are off. The tricky part is getting that physical access in the first place...
  • danw1979
    I started my career proper as a junior network engineer for a regional British airline (British Midland, since subsumed by BA) in 2001, just before 9/11 continuing for 3 years until mid 2004. Throughout that time, I held an airside pass at LHR that allowed me to get pretty much anywhere I liked, apart from the taxiways and runways of course.This was pretty standard for most staff - once you’re airside, there were not many restrictions about getting down under the ramp or anywhere around an aircraft on a stand.Never was this illustrated better than the final homecoming of a BA Concorde in late 2003, when a whole load of staff from different roles across the airport all piled out onto the edge of the apron to wave it home.A junior IT bod in a high-vis touching something on the outside of an aircraft ? Wouldn’t stand out to anyone watching a CCTV feed. Maybe the other ramp staff would notice, but if you timed it right…What I’m trying to say is that physical access to aeroplanes even at a place like LHR was pretty much open to anyone who holds an airside pass.
  • iFire
    Why coin sized, you can fit a gps tracker in a grain of rice-size pellet, why not a phone card.
  • WalterBright
    > the company may not in fact implement any such update to their systems for years to come, given how rarely commercial airplanes are redesigned.Boeing commercial airplanes are constantly updated. As long as the airplane is in service, Boeing retains a team of engineers that update parts as needed. If FAA review is needed, this will of course take longer.BTW, anyone with access to the internals of an airplane could potentially sabotage it. Sadly, all people with access need to undergo a security check.
  • snapsnail
  • alexthedigger
    Still too big, I’d like it to fit on the tip of a needle.
  • numpad0
    ...so they built an equivalent of OBDII reader for planes, and it worked just the same as ones for cars? Interesting but not as scary as the title may suggest.
  • haunter
    https://archive.md/3fpgaHN should have a rule like what does some reddit subs do.Either outright ban paywalled articles, or if not then either an archived link should be posted alongside, or the whole text of the article should be copy pasted as a comment
  • kotaKat
    “researchers aren't revealing which port they targeted on the 737, nor are they releasing some details of how their hacking device is able to spoof commands to the plane's computers”Bro. You put “429 interceptor” on the PCB. You’re just fucking on the ARINC 429 bus.Also, this exists as a commercial product (in some ways): https://www.astronics.com/wireless-electronic-flight-bags-we...There's already a dongle on the market hooked in some 737s that gives you WiFi access to the 429 and 717 busses through the same port...EDIT (again): Oh come on, the paper says they went into the Open Maintenance Connector through the E&E bay through the nose gear. C'moooon.Double-triple edit: Also - ARINC 429 is kinda fun. You can do things like take old glass cockpit hardware and work it into your flight simulator by just feeding the cockpit hardware simulated 429 messages over the wire from your flight sim.Here's some 737 instruments being driven from FSX: https://www.youtube.com/watch?v=RtTJiU-vArs
  • anon
    undefined
  • Razengan
    ..I feel like I shouldn't bookmark this post, given the invasive "social media checks" in the so-called Free World :')
  • fragmede
    [dead]
  • LoganDark
    > “Our technical experts are confident that the layers of protection in place on the airplane, including within the system design and the operating environment, provide sufficient mitigation to significantly limit the feasibility and risk of real-world attacks,” the statement reads.So "We don't expect hackers to figure it out"