Live data from Hacker News

Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]

satcom.sysnet.ucsd.edu

1–10 of 145 posts

Re: Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]

#5
> remarkably, nearly all the end-user consumer Internet browsing and app traffic we observed used TLS or QUIC

There was a surprising amount of resistance to the push to enable TLS everywhere on the public Internet. I'm glad it was ultimately successful.

Re: Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]

#7
Had a vendor offer a customer of mine a huge discount if they purchased radios without the encryption license in the year of our lord 2024.

Not even WPA or WEP. Just clear across the sky. And this is terrestrial.

My bet is that in space there would be a noticable increase in heat/energy if they did encryption by default. But its still incredible to see them pretend like space is impossible to get to, ultimate obscurity.

Re: Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]

#9

Section 6.3.2 is an eye-opener... good lord... Gets even worse at 6.4.2-3

It's absolutely jaw-dropping. Either no-one at these companies was capable of understanding the problem, or no-one cared enough to do something about it.

Re: Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]

#10

Had a vendor offer a customer of mine a huge discount if they purchased radios without the encryption license in the year of our lord 2024. Not even WPA or WEP. Just clear across the sky. And this is terrestrial. My bet is that in space there would be a noticable increase in heat/energy if they did encryption by default. But its still incredible to see them pretend like space is impossible to get to, ultimate obscuri…

Likely no consequences to the decision-makers for data exfiltration or other shenanigans happening, so there's nothing motivating a behavior change.

The reason security is so bad everywhere is that nobody gets fired when there's a breach. It's just blamed on the hackers and everyone just goes on with life singing "We take security very seriously--this happened because of someone else!"

Post reply on HN