Live data from Hacker News

Drone hijacked by UT hackers with $1,000 spoofer

nakedsecurity.sophos.com

71–80 of 81 posts

Re: Drone hijacked by UT hackers with $1,000 spoofer

#71

I wouldn't consider this "hacking" or even very impressive. If you deliver enough power to the right antenna with the right carrier frequency you can jam any wireless communication. It's the same concept as "whoever yells the loudest will be heard".

Your argument just makes this more serious. It's a (possibly easy) exploit with serious consequences.

Re: Drone hijacked by UT hackers with $1,000 spoofer

#72

This is part of the clever and gradual propaganda campaign to increase drone funding/sophistication significantly. A new article intended to nudge the reader toward that conclusion is released about every 6 months.

Other people read this and say it is a clever propaganda campaign to promote the danger of using drones that can be turned against us by hackers, etc....

so likely the simplest answer is correct, it's not a giant conspiracy after all.

Re: Drone hijacked by UT hackers with $1,000 spoofer

#73
post #69

Earlier quoted context omitted.

The exact opposite actually. Apparently airliners, like our mobile phones, can only receive GPS signals to track their own position, but they can't report that back to the control towers - position is calculated from ground radars, which only reach up to 200 miles from shore. That's why the location of AF447 couldn't be pinpointed quickly after the accident, for example, there are only estimates for location while ou…

Do you know why the pilots of that plane didn't use GPS to determine their altitude and speed? I read that it's suspected they slammed into the sea because they didn't know their altitude and speed, due to frozen-over measuring devices.

Apparently the entire issue came down to a junior pilot pulling back on the control stick, causing the airplane to stall and fall. It seems commercial airlines usually operate in a mode where it is impossible to stall -- pulling back all the way just ascends as fast as the plane can. But, the plane reverted to another mode of operation and the pilot did not understand this. Additionally, the Airbus control system has no physical feedback between the two pilot inputs and just merges the data. So if one pilot is pulling back, the other has no way of knowing. From the transcription, it seems that the pilots were confused as to why they were falling, until they realised the junior pilot was stalling the plane, and by then it was too late to fix.

Re: Drone hijacked by UT hackers with $1,000 spoofer

#74
post #63

Earlier quoted context omitted.

Which is why aircraft normally have multiple INS units. INS has been used as primary nav for endurance missions (>24hrs) in the US military for decades. Citation: Myself, I worked on a variety of systems including INS and GPS in the military.

But redundant INS units protect against failure of LR gyros. They don't protect against the case where an extremely slow turn by the plan can induce drift in an LR gyro. In that case all your redundant systems will all drift together. LR gyros are also limited by physics to a certain limit of precision, and this is the specific mechanism by which they can drift (from what I understand though building larger gyros mig…

Why is this HN thread the only Google result for "LR gyro" ?

Re: Drone hijacked by UT hackers with $1,000 spoofer

#75

I wouldn't consider this "hacking" or even very impressive. If you deliver enough power to the right antenna with the right carrier frequency you can jam any wireless communication. It's the same concept as "whoever yells the loudest will be heard".

Your argument just makes this more serious. It's a (possibly easy) exploit with serious consequences.

I was speaking to how exaggerated the title of the post is, not the ease of exploitation.

Re: Drone hijacked by UT hackers with $1,000 spoofer

#76

Earlier quoted context omitted.

But redundant INS units protect against failure of LR gyros. They don't protect against the case where an extremely slow turn by the plan can induce drift in an LR gyro. In that case all your redundant systems will all drift together. LR gyros are also limited by physics to a certain limit of precision, and this is the specific mechanism by which they can drift (from what I understand though building larger gyros mig…

Why is this HN thread the only Google result for "LR gyro" ?

The full term is laser ring, or ring laser gyroscope.

Re: Drone hijacked by UT hackers with $1,000 spoofer

#77
post #63

Earlier quoted context omitted.

Which is why aircraft normally have multiple INS units. INS has been used as primary nav for endurance missions (>24hrs) in the US military for decades. Citation: Myself, I worked on a variety of systems including INS and GPS in the military.

But redundant INS units protect against failure of LR gyros. They don't protect against the case where an extremely slow turn by the plan can induce drift in an LR gyro. In that case all your redundant systems will all drift together. LR gyros are also limited by physics to a certain limit of precision, and this is the specific mechanism by which they can drift (from what I understand though building larger gyros mig…

This is incorrect. They aren't just there for redundancy, they are there to account for gyro 1 vs 2 anomalies (drift).

Re: Drone hijacked by UT hackers with $1,000 spoofer

#78
post #69

Earlier quoted context omitted.

Do you know why the pilots of that plane didn't use GPS to determine their altitude and speed? I read that it's suspected they slammed into the sea because they didn't know their altitude and speed, due to frozen-over measuring devices.

Apparently the entire issue came down to a junior pilot pulling back on the control stick, causing the airplane to stall and fall. It seems commercial airlines usually operate in a mode where it is impossible to stall -- pulling back all the way just ascends as fast as the plane can. But, the plane reverted to another mode of operation and the pilot did not understand this. Additionally, the Airbus control system has…

Thanks for that description. Amazing that Airbus hadn't addressed this already. I've read that the initial problem that confused the pilots was the lack of air speed (and maybe altitude) data, due to frozen pitons. So I still wonder why the planes couldn't use GPS for that, at least as backup.

Re: Drone hijacked by UT hackers with $1,000 spoofer

#79

Earlier quoted context omitted.

> But redundant INS units protect against failure of LR gyros. They don't protect against the case where an extremely slow turn by the plan can induce drift in an LR gyro. In that case all your redundant systems will all drift together. I'm am pretty sure this is very wrong, although I'm not an expert enough to downvote you. Having multiple systems allows one to average out (statistically independent) drifts; it's no…

As I understand it with LR gyros, if you rotate them sufficiently slowly so that they move less than half a wavelength in the time the light transits, they re-lock on the new orientation without interference. This is a limit based on quantum physics and it's why I said that larger gyros might reduce the problem.

Well, if so I think this is an issue that designers of military systems have been well aware of for years. Drones don't seem any more at risk than submarines, which have used INSs successfully for decades. Drones seems much less likely to go through large stretches of time without access to GPS than submarines, so I'd be surprised if it's an issue.

I think the real problem is that INSs are simply to bulky and heavy for drones, rather than anything to do with drift.

Re: Drone hijacked by UT hackers with $1,000 spoofer

#80
post #72

This is part of the clever and gradual propaganda campaign to increase drone funding/sophistication significantly. A new article intended to nudge the reader toward that conclusion is released about every 6 months.

Other people read this and say it is a clever propaganda campaign to promote the danger of using drones that can be turned against us by hackers, etc.... so likely the simplest answer is correct, it's not a giant conspiracy after all.

Uh, that's what the article said, one doesn't have to infer it. Of course if any form of US military technology is easily hackable there is not likely to be much consensus behind the idea of just cancelling the program...

The article sets the stage for easy agreement with the idea that US drone tech needs an overhaul. Even if the first appropriations toward this go to a small subset of current military drones, that gets the ball rolling.

Post reply on HN