Live data from Hacker News

Somebody used spoofed ADSB signals to raster the meme of JD Vance

alecmuffett.com

121–130 of 162 posts

Re: Somebody used spoofed ADSB signals to raster the meme of JD Vance

#121
post #92

Earlier quoted context omitted.

An interesting question. Assuming the FAA has the authority to enforce ADSB requirements (an open question post-Chevron), I can’t find any regulation saying non-aircrafts cannot transmit ADSB. Only ones saying aircrafts in certain categories must. There’s probably some non-interference requirement somewhere (FCC spectrum licensing perhaps), but I’m not seeing it immediately. All this is in the hypothetical that RF wa…

It would be under the FCC regs, not the FAA regs. Whatever transmitter you're using would not be type-accepted for operation on the 1080 MHz or 978 MHz band. (47 USC § 301) Additionally, RF operation with the intent of willful interference is inherently illegal. (47 USC § 333)

What if you removed a genuine ADS-B unit from a plane and installed it in your vehicle?

Also does impersonation necessarily qualify as interference? Naively, I'd expect interference to refer to jamming.

Re: Somebody used spoofed ADSB signals to raster the meme of JD Vance

#122

How long before domestic terrorism charges are laid ? Everthing seems to be domestic terrorism in the US these days.

Domestic terrorism is now an official policy goal of the "US" government, so yes, there is a lot of it.

Re: Somebody used spoofed ADSB signals to raster the meme of JD Vance

#123

As other commenters noted, this is almost certainly not RF spoofing, just sending bad data to an aggregator (ADS-B Exchange) over the internet. This instance of spoofing is notable for being the first that I know of that wasn't primitive vector art or text, but a raster image! In that area of Florida multiple receivers would have picked up actual ADS-B broadcasts. ADS-B aggregators do have various anti-spoofing measu…

I agree with this. Hopefully they're able to track down who did this. To upload to ADS-B Exchange you need an account. But it's not that difficult to get one. I'm not sure what kind of information they may be able to get on it. As you say the person who uploaded this may not be anywhere near there. The aggregators probably should have heuristics like if only one feeder in an area with a decent density of feeder cover…

> Hopefully they're able to track down who did this.

Why? Was anybody harmed?

Hopefully they don't find out who did this. There was never any danger, and without this kind of joke, the world would be less fun.

(Obviously it should be harder to fool critical systems, so this served also as a warning, but if you want to attack such a system, a real bad guy would do this in more subtle ways.)

Re: Somebody used spoofed ADSB signals to raster the meme of JD Vance

#124
post #19

Can someone explain what this means? Where would this have been seen?

Pilots and nerds that watch airplane traffic Viewable on FlightRadar24, etc

Pilots would tend to not see this, neither would people using FlightRadar24

Re: Somebody used spoofed ADSB signals to raster the meme of JD Vance

#125
post #92

Earlier quoted context omitted.

It would be under the FCC regs, not the FAA regs. Whatever transmitter you're using would not be type-accepted for operation on the 1080 MHz or 978 MHz band. (47 USC § 301) Additionally, RF operation with the intent of willful interference is inherently illegal. (47 USC § 333)

What if you removed a genuine ADS-B unit from a plane and installed it in your vehicle? Also does impersonation necessarily qualify as interference? Naively, I'd expect interference to refer to jamming.

A transponder in a car is not an "aircraft station" (§ 87.5), therefore it is not covered by aircraft "license-by-rule" (§ 87.18(b)), so transmitting would be operating without a valid authorization (§ 1.903(a)). https://www.ecfr.gov/current/title-47/chapter-I/subchapter-D...

Re: Somebody used spoofed ADSB signals to raster the meme of JD Vance

#126

Earlier quoted context omitted.

Surely the receiver would run plausibility checks on the received messages and reject spoofed locations that are physically impossible to receive by said receiver?

> spoofed locations that are physically impossible to receive by said receiver? Wait until you hear about Sporadic-E or Aurora. RF is a weird place full of natural phenomena making the impossible very possible.

But even if that was the case, is there any value for a receiver to be receiving those? Surely those messages would be picked up by a receiver closer to the transmitter anyway. I think the value in spoofing rejection is greater than the probability of a transmission reflecting from beyond the horizon and not being already being picked up by a local receiver.

Re: Somebody used spoofed ADSB signals to raster the meme of JD Vance

#127

Earlier quoted context omitted.

There are non-radar towers that don't have scopes. They may have a traffic display, or maybe not. They might choose to use a public ADS-B aggregator site because it gives them situational awareness, but they don't use it to provide radar services to aircraft. That's my understanding from listening to a lot podcast episodes with air traffic controllers, anyway. I think it's an unofficial, non-FAA approved kind of thin…

> They might choose to use a public ADS-B aggregator site because it gives them situational awareness I do not understand what the upside is, aside from saving a tiny amount of effort and cost -- they could get the same data with more reliability by just running their own ADS-B receiver, without having a dependency on a third-party.

Upside may be just that the equivalent first-party system doesn't exist or performs worse? ATC tower isn't a SCIF, they probably get their real-time news from Twitter like everyone else, too.

Re: Somebody used spoofed ADSB signals to raster the meme of JD Vance

#128
post #10

Earlier quoted context omitted.

I believe this was "spoofed" only in the sense that a particular provider/online platform accepted data via an API that was abused to draw this on that platform only. Searching around it seems it was not found if you looked on other platforms, so it might not even have been a crime. I believe they didn't emit any real "signals" just took advantage of an API that should probably be better secured.

> an API that should probably be better secured. I think the API is secured? The entire premise is that a volunteer creates an account and uploads ADS-B telemetry. Detecting falsified data is a separate matter.

Sounds like authentication is working great, but their authorization design may be flawed.

Re: Somebody used spoofed ADSB signals to raster the meme of JD Vance

#129
post #16

Earlier quoted context omitted.

(Assuming this were actually RF) This is easily-prosecutable willful interference or possibly aircraft sabotage: ADS-B operates in licensed bands and uses an already highly-contended modulation scheme and transmission protocol.

They'll probably try and make a case of wire fraud and CFAA as the usual go tos if it wasn't in RF.

"Wire fraud" means financial fraud, not "sending data over wires".

Re: Somebody used spoofed ADSB signals to raster the meme of JD Vance

#130

Since most of these ADS-B collection sites are patchworks of unofficial/best effort, that seems like a great attack vector for nation state-level spoofing to interrupt flight planning, capacity planning, other tertiary air transport operations, and make civilians nervous. It's analogous to "hobby" code running key infrastructure of the internet without serious processes and auditing, testing, and verification. It wou…

These are hobbyist sites, not critical infrastructure. Commercial aviation doesn't use them.

> It's analogous to "hobby" code running key infrastructure of the internet

I have some bad news my dude lol

Post reply on HN