Boeing 787 In Flight Entertainment System Security fun
1–10 of 147 posts
Re: Boeing 787 In Flight Entertainment System Security fun
#2> I did a port scan on the System Control Unit
Is that still white hat? Did they also check to see if the cockpit door is locked?
Re: Boeing 787 In Flight Entertainment System Security fun
#3> I did a port scan on the System Control Unit Is that still white hat? Did they also check to see if the cockpit door is locked?
Scanning should be fine; trying to access them becomes dubious; bruteforcing the login could lead to arrest.
Re: Boeing 787 In Flight Entertainment System Security fun
#4> I did a port scan on the System Control Unit Is that still white hat? Did they also check to see if the cockpit door is locked?
Scanning should be fine; trying to access them becomes dubious; bruteforcing the login could lead to arrest.
I had a projector firmware freeze up hard on me during a port scan. There is some risk there.
Re: Boeing 787 In Flight Entertainment System Security fun
#5> I did a port scan on the System Control Unit Is that still white hat? Did they also check to see if the cockpit door is locked?
Scanning should be fine; trying to access them becomes dubious; bruteforcing the login could lead to arrest.
Scanning can lead to arrest in some places.
In the UK for example, the computer misuse act says that using any tool with the intent of accessing a system (without actually doing so, let alone doing so successfully) is an offence.
Re: Boeing 787 In Flight Entertainment System Security fun
#6> I did a port scan on the System Control Unit Is that still white hat? Did they also check to see if the cockpit door is locked?
It's borderline; if something bad happens (and bad things definitely can happen from portscanning, especially embedded systems), you'll be on the hook for it.
Re: Boeing 787 In Flight Entertainment System Security fun
#7The decompression flag is interesting, I would've poked around the Javascript to see if that flag is ever read. If they were thorough, the web frontend would show a red screen with words like "Decompression! Put on your oxygen mask!"
Otherwise, passengers could be so distracted with the electronic entertainment that they might not notice that it got very breezy all of a sudden...
Re: Boeing 787 In Flight Entertainment System Security fun
#8Earlier quoted context omitted.
Scanning should be fine; trying to access them becomes dubious; bruteforcing the login could lead to arrest.
I had a projector firmware freeze up hard on me during a port scan. There is some risk there.
So what does that say about the wisdom of port scanning a machine your life is currently depending on?
Re: Boeing 787 In Flight Entertainment System Security fun
#9> I did a port scan on the System Control Unit Is that still white hat? Did they also check to see if the cockpit door is locked?
Scanning should be fine; trying to access them becomes dubious; bruteforcing the login could lead to arrest.
At one of the companies I worked at, years ago, a service discovery system I wrote did a very light scan of every listening port bound on every system. One thing it did was an HTTP GET.
One of the core apps had a control port that implemented HTTP. Unfortunately, my GET hit a route that didn't exist, and that caused a small memory leak every time.
Nothing too bad happened; the leak was slow, and even though the app stayed up many months at a time, we did notice the leak and figured out what was causing it.
As others have stated elsewhere, I've seen completely 'easy going' TCP connections to embedded devices cause immediate crashes.
Re: Boeing 787 In Flight Entertainment System Security fun
#10Earlier quoted context omitted.
I had a projector firmware freeze up hard on me during a port scan. There is some risk there.
So what does that say about the wisdom of port scanning a machine your life is currently depending on?
He probably should've done his port scan once the plane was on the ground. Though I'd be REALLY worried if there was even the slightest risk of network access to the IFE causing a flight control device of any kind to seize up, and would hope that someone at Boeing made sure that was not possible.