Moderators: jsumali2, richierich, ua900, PanAm_DC10, hOMSaR
Quoting spacecadet (Reply 49): They may not have even noticed, or found it serious enough to do anything about if they had. If he only did it for a moment (it was said to cause a "lateral movement" which doesn't sound like a continuous thing), it could have almost felt like turbulence. The pilots may not have seen the increase in engine power if it was quick, or may have assumed it was the autopilot compensating for the turbulence. |
Quoting JHwk (Reply 45): Blindly dismissing the potential of a hack is ignorant... There are attacks that target air-gapped networks, using sound, light, heat output/power consumption, etc. as the communication path. |
Quoting Maverick623 (Reply 26): Quoting wjcandee (Reply 7): I guess the FBI isn't so sure. Read paragraph 18, particularly 18E, of the search warrant I assume you mean paragraph 19. It merely is a summary of what this dweeb is claiming to have done, not that the FBI necessarily believes him. |
Quoting fxramper (Thread starter): I'm sure this has happened previously, but this guy is trying to let everyone know it's possible to take control of a plane with your phone from your seat. |
Quoting fxramper (Reply 10): Did you read the article in full? This guy was browsing the entire flight system and said he's done it multiple times. |
Quoting spacecadet (Reply 49): (I'm not sure it'd do so asymmetrically, but again, if it was just a momentary thing that happened once, I doubt the pilots would give it much thought.) |
Quoting 1010101 (Reply 36): I don't know enough to judge the plausiblilty of these specific claims but I can say that the general approach is absolutely how real world security vulnerabilities are found and exploited. I am astounded that there is not an air gap between critical and non-critical systems. I have seen enough "impossible" hacks of systems with read only access, firewalls, etc, that any claims that a network connected system cannot be accessed are meaningless to me. |
Quoting Natflyer (Reply 48): First of all a 738 does not have EICAS. The 738 is a reallly dumb airplane with a very archaic array of Master Caution lights instead. So this idiot claims all sorts of crap when in reality cabin temperature can't even be controlled from the cabin.... |
Quoting Flighty (Reply 56): There was a recent case where a GM (?) car was fully hacked, remotely, from an iPhone with a radio transmitter. The lineage went like this. Wireless car starter > authentication > start car > port authentication to car's root > receive packets with additional commands. The car's entertainment system, lights etc were fully rooted and hacked from many meters away. A car with drive by wire throttle and lane control / distance control can be fully driven remotely if rooted. |
Quoting hilram (Reply 54): The only way to make 100% sure that your computer will never get a virus or malware, is to never bring it online (or insert any media on it, USB, CD-ROM etc.) |
Quoting MHO (Reply 20): Wouldn't the pilots notice a little thing like that, maybe even mentioning it to controllers, or to anyone after landing? Something just don't smell right here. |
Quoting Skydrol (Reply 28): Keep it simple. Flush a dozen packs of Mentos down the toilet and the pressure buildup in the waste tank will cause it to blow, and take out the rest of the airplane with it. |
Quoting JetBuddy (Reply 33): the IFE. The part about causing an engine to climb, is the understanding of an FBI agent.. which doesn't make sense. Roberts himself says he put the aircraft from Cruise to Climb mode. That would make more sense, except I don't think there's a Climb mode on an 738.. you've got Flight level change. Climb mode would be an Airbus. |
Quoting baldwin8 (Reply 38): If over uncommanded inputs were evident it would be easy to see in the post flight reports. |
Quoting wjcandee (Reply 58): BTW, there was at least an effort by Boeing to get FAA approval for the IFE and aircraft systems to share a bus on the 777. |
Quoting MeCe (Reply 30): But I think quite possible access some systems on a 787. |
Quoting JetBuddy (Reply 33): The FAA thinks it is. You should read reply 17. But no, I don't think he actually had any control of the aircraft at any point. Could he read data? Yes probably. |
Quoting susej772 (Reply 35): Even the GAO says this is possible: http://www.cnn.com/2015/04/14/politi...king/ |
Quoting 1010101 (Reply 36): He claims that he was able to watch network traffic allowing him to get figure out access to a non-critical cabin control system. He claims to have hopped from there to EICAS to a "thrust management system". |
Quoting JHwk (Reply 45): Blindly dismissing the potential of a hack is ignorant... There are attacks that target air-gapped networks, using sound, light, heat output/power consumption, etc. as the communication path. |
Quoting Natflyer (Reply 48): First of all a 738 does not have EICAS. The 738 is a reallly dumb airplane with a very archaic array of Master Caution lights instead. So this idiot claims all sorts of crap when in reality cabin temperature can't even be controlled from the cabin.... |
Quoting spacecadet (Reply 49): They may not have even noticed, or found it serious enough to do anything about if they had. If he only did it for a moment (it was said to cause a "lateral movement" which doesn't sound like a continuous thing), it could have almost felt like turbulence. The pilots may not have seen the increase in engine power if it was quick, or may have assumed it was the autopilot compensating for the turbulence. (I'm not sure it'd do so asymmetrically, but again, if it was just a momentary thing that happened once, I doubt the pilots would give it much thought.) |
Quoting wjcandee (Reply 52): Well, although not conclusive, they later summarize what he said he did and then say, "agents and technical specialists with the FBI believed that he may have done just that again or attempted to do so". (para. 32) |
Quoting mandala499 (Reply 60): The guy's claim stinks... |
Quoting hilram (Reply 68): However, neither optimism or loyalty helped the Pentagon, NATO, NASA, or even the FBI from being hacked. |
Quoting hilram (Reply 68): However, neither optimism or loyalty helped the Pentagon, NATO, NASA, or even the FBI from being hacked. Feel free to go on and think that Boeing and Airbus are 100% hacker-proof, and you all feel a little better when you fly on their airplanes. But my Professional opinion is that in principle, every network can be hacked. I would therefore strongly encourage Airlines and manufacturers to have no physical (or Wireless) Connection between the systems that run the plane, and the infotainment systems that every passenger can Access. |
Quoting PassedV1 (Reply 69): 2. Is it possible to HACK into a jet. Given unlimited access...definitely possible. |
Quoting hilram (Reply 70): For nr. 3, my answer would be: Possibly. If the two systems are networked. |
Quoting jetblastdubai (Reply 71): He added that the links between the entertainment system and flight control systems “are not not capable of changing automatic flight control modes”. |
Quoting CALTECH (Reply 73): It is two completely separate cable runs, running to their own computers that are not networked together. |
Quoting CALTECH (Reply 73): Hack into a Jet, think the manufacturers are on top of that. It is why a concern was deactivated on the 787. |
Quoting CALTECH (Reply 73): Obviously a 737-800 and it's IFE and other networks and how they work and interact, is not known to you and those others that seem to claim knowledge of a 737-800's networks. A 737-800 can not be hacked from the seat electronics, nor can the engine's data be read from there. Engine data does not go over the IFE wiring, separate wiring bundles. It is two completely separate cable runs, running to their own computers that are not networked together. Even the data coming from the satellite receiver does not run over a 737-800s IFE network. |
Quoting 737tdi (Reply 75): : CALTECH, we have talked of this some before. I spent many days a few years back doing my small part in the installation design of our current WiFi. I had to physically trace all of the wire installations to verify they were in compliance with standard practices, i.e. 3"s from FQIS wiring. Which means I know where every wire connects and why it is there. There is absolutely no way that you could "hack" one of our aircraft through the WiFi, nothing to connect through or too. There is info. obtained from the WiFi for positioning data so the system knows where to aim the antenna but that's it and it would in no way provide a pathway to any aircraft systems. I can not speak to other models or operators but I know this to be true of ours. |
Quoting 1010101 (Reply 36): He claims to have hopped from there to EICAS to a "thrust management system". |
Quoting CALTECH (Reply 40): This Roberts is a whack job trying to make a name for himself, and he succeeded in that. You can bet if anything he claims was true, which I find very hard to believe that he even hooked up to the IFE, there would be immediate Fleet Campaign Directives and Airworthiness Directives addressing this bogus issue. Have seen no Bulletins, ADs or FCDs stating anything a aircraft being flown sideways by a passenger and corrective action to prevent that from happening in the future. This loon Roberts, did bring attention to himself and his company. Sad if takes him as a expert on these matters though. |
Quoting Natflyer (Reply 48): First of all a 738 does not have EICAS. The 738 is a reallly dumb airplane with a very archaic array of Master Caution lights instead. So this idiot claims all sorts of crap when in reality cabin temperature can't even be controlled from the cabin.... |
Quoting bueb0g (Reply 53): It's true that messing with the IFE can actually cause a couple of EICAS messages to pop up, |
Quoting billreid (Reply 77): We never thought 9-11 was possible did we? |
Quoting billreid (Reply 77): Whether or not this is bull or not. I am quite happy that light has been brought on hacking into systems. Acars, etc is architecture that is in theory hackable. There needs to be work done to ensure nobody gets in who shouldn't. After all, the US Gov report-ably did get to hack the centrifuges in Iran from the USA which leads to serious questions on what is truly possible in other industries. We can sit back dumb, fat and happy, and say "Never, Never, Never, oh shit I cant believe that happened!" or we can be proactive and prevent what one day may be possible. |
Quoting N62NA (Reply 9): I don't remember the other thread a few months ago, but it seems very strange that the IFE system would be connected to the system that actually controls the flight systems. What reason for doing such an obviously dangerous thing would Boeing or Airbus allow such a thing to be done? |
Quoting fxramper (Reply 16): Google the guy, he's done is a lot and it's comical the FBI is just now catching up to this 'threat'. I think they hire specifically people that are good with computers. Guess they aren't hiring as of lately. |
Quoting golfradio (Reply 84): |
Quoting JetBuddy (Reply 88): If the IFE systems aren't connected to the rest of the aircraft in any way. How do they read the altitude, heading, speed, location, outside air temperature and so on? |
Quoting VC10er (Reply 91): "If you eliminate everything possible, then the impossible must be true" -- Mr Spock |
Quoting reltney (Reply 93): I also selling oceanfront property in Arizona.... |
Quoting JetBuddy (Reply 88): If the IFE systems aren't connected to the rest of the aircraft in any way. How do they read the altitude, heading, speed, location, outside air temperature and so on? |
Quoting mandala499 (Reply 14): There is an ARINC feed to the IFE system used for the flight map display and other flight details... but that's about it (and that's probably how he can tap into data about the airplane streaming through)... its a one way feed. That goes to the IFE server or designated data bus gateway. From there, the wiring is separate from the essential databus/link for the flight controls and flight management. Even the power cabling is separate... it comes out of the IFE server or power gateway depending on the architecture you use. |
Quoting sunilgupta (Reply 26): If I give you only the TX relative to the source) and GND from an RS-232 cable, then you have a one-way serial feed. ARINC 429 is similar - separate TX and RX sides. Trying to send data on the TX would result in - absolutely nothing at best or temporarily stopping the transmission at worst. And lest you think that shutting down the TX will somehow screw up the airplane, it won't... it only means that you won't be getting data. |
Quoting JetBuddy (Reply 43): This. The IFE usually has access to information about location, speed, altitude, outside temperature and so on. So there's really no wonder this guy managed to pick up that data on his laptop by connecting it to the IFE box under the seat. But that doesn't mean the communication goes both ways. |
Quoting mandala499 (Reply 96): Some data are streamed out of boxes on the aircraft for various users. ARINC429 (general, non critical use) and ARINC717 (blackboxes), IFE system has a server that reads these streams. That's it. No, you cannot hack the airplane back that way. |