Hacker claimed to have taken over flight's engine controls

[Hans Tucker]

Ok, my Aircraft/Avionics knowledge has been restricted to my time with the RAAF but I would have thought hacking into the control systems on an commercial airline aircraft via the entertainment system would not be possible...they would be exclusive non connecting systems.

So is this story plausible or total BS.

http://edition.cnn.com/2015/05/17/us/fbi-hacker-flight-computer-systems/

[tlgerdes]

He claimed! but now has denied the stories.

"he reportedly claimed that he had compromised the in-flight entertainment systems "approximately 15 to 20 times" between 2011 and 2014, but has since denied the story, which was nevertheless widely reported over the weekend." http://www.computing.co.uk/ctg/news/2408941/plane-hacker-chris-roberts-denies-taking-control-of-boeing-737

Boeings response "A spokesperson for Boeing (http://www.theguardian.com/business/boeing), the manufacturer of the plane allegedly hacked, said that the in-flight entertainment system and flight and navigation systems are isolated from each other" http://www.theguardian.com/technology/2015/may/19/hacker-chris-roberts-claim-seized-control-boeing-airliner-disputed-experts

[Chif]

Total bull****. I've installed such systems before and they are not linked to any other systems. The only link is via relays to control when the system is active (weight on weels, seatbelt signs etc), these are not data lines and cannot help to form a connection. Highly unlikely.

There was someone that proved that they were able to control an autopilot computer using an app on their phone that they created. However as soon as autopilot was disconnected, they lost control. That was still obviously an issue (as if small changes were made, the pilots may not be aware), and has since been addressed so that it can no longer happen.

[LewisM]

Absolute pure an utter shinola.

[deanm]

And there we have it - the attitude responsible for every successful computer security breach ever!

This discussion is best followed at pprune: http://www.pprune.org/north-america/561537-hacker-turns-c-3.html

http://www.gao.gov/assets/670/669627.pdf page 18

Quote:
According to FAA and experts we interviewed, modern communications
technologies, including IP connectivity, are increasingly used in aircraft
systems, creating the possibility that unauthorized individuals might
access and compromise aircraft avionics systems. Aircraft information
systems consist of avionics systems used for flight and in-flight
entertainment (see fig. 4 below). Historically, aircraft in flight and their
avionics systems used for flight guidance and control functioned as
isolated and self-contained units, which protected their avionics systems
from remote attack. However, according to FAA and experts we spoke to,IP networking may allow an attacker to gain remote access to avionics systems and compromise them—as shown in figure 4 (below). Firewalls
protect avionics systems located in the cockpit from intrusion by cabin system users, such as passengers who use in-flight entertainment
services onboard. Four cybersecurity experts with whom we spoke
discussed firewall vulnerabilities, and all four said that because firewalls
are software components, they could be hacked like any other software
and circumvented. The experts said that if the cabin systems connect to the cockpit avionics systems (e.g., share the same physical wiring
harness or router) and use the same networking platform, in this case IP,
a user could subvert the firewall and access the cockpit avionics system
from the cabin. An FAA official said that additional security controls
implemented onboard could strengthen the system.

Now about the claims that such a system can never be hacked ?
Could the guy have done just what he said ?
" ALL four ex-spurts " agree ??

Dean

[noeyedeer]

apple will have their own airline soon so everyone can feel safe in the air and online

[deanm]

"..everyone can feel safe in the air"

Yup - terrorists too!

Dean

[tlgerdes]

Yeah, they will give you an app on board that let's everyone have a turn of flying the plane for a few dollars per minute. But you will only be able to use it on apples products as they are secure.:lol: