• Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.

Pilot Demonstrates Ability to Hack Airplane With Selfmade Android App

Status
Not open for further replies.

wildfire

Banned
Planesploit You obviously won't find it in Google Play.

Teso, a trained commercial pilot for 12 years, reiterated that the Automated Dependent Surveillance-Broadcast (ADS-B) is unencrypted and unauthenticated which can lead to passive attacks like eavesdropping or active attacks such as message jamming and injection. Furthermore, the Aircraft Communications Addressing and Reporting System (ACARS) – a service used to send text-based messages between aircraft and ground stations - also has no security.

Once in, he demonstrated how it was possible to manipulate the steering of a Boeing jet while it was in autopilot mode. The security consultant said he could cause a crash by setting the aircraft on a collision course with another jet or even give passengers a scare by dropping down the emergency oxygen masks without warning.

A pilot could thwart an attack by taking the plane out of autopilot although he pointed out that several newer systems no longer include manual controls.

So what are these newer systems that don't include manual controls?

Digital Fly-by-wire


Airbus/Boeing
Main article: Flight control modes (electronic)

Airbus and Boeing commercial airplanes differ in their approaches in using fly-by-wire systems. In Airbus airliners, the flight-envelope control system always retains ultimate flight control when flying under normal law, and it will not permit the pilots to fly outside these performance limits unless flying under alternate law.[14] However, in the event of multiple failures of redundant computers, the A320 does have a mechanical back-up system for its pitch trim and its rudder. The A340-600 has a purely electrical (not electronic) back-up rudder control system, and beginning with the new A380 airliner, all flight-control systems have back-up systems that are purely electrical through the use of a so-called "three-axis Backup Control Module" (BCM)[15]

With the Boeing 777 model airliners, the two pilots can completely override the computerized flight-control system to permit the aircraft to be flown beyond its usual flight-control envelope during emergencies. Airbus's strategy, which began with the Airbus A320, has been continued on subsequent Airbus airliners.

Currently a hack like this wouldn't work due to manual override. But because studies have proven automated controls are less error prone than pilots especially in stressful situations there is a push for automation.

Keep in mind that even in these automated systems you realistically shouldn't be able to cause a crash because to do so would require you the plane to exceed conditional parameters that limit how fast or off course a plane can go.

But in the future if someone figures out how to override even those conditionals...

...oh whelp.

[edit]

A more elaborate response on the difficulties of manipulating a plane by phone provided by Patrick Smith thanks to chaostrophy for providing the link.


On the one hand, Hugo Teso, the person behind this lecture/experiment, has a solid understanding of how planes fly, and is presumably familiar with the way pilots and their technology interact. Unfortunately, he’s extrapolating wildly — or the media is extrapolating wildly — and giving people the entirely wrong impression. What could be an interesting conversation is instead being dumbed down into alarmist nonsense.


Teso wants you to believe your smartphone can send these instructions as well, causing a dangerous disruption.

The problem is, the FMS — and certainly not ACARS — does not directly control an airplane the way people think it does, and the way, with respect to this story, media reports are implying. Neither the FMS nor the autopilot flies the plane. The crew flies the plane through these components. We tell it what to do, when to do it, and how to do it. Whatever data finds its way into the FMS, and regardless of where it’s coming from, it still needs to make sense to the crew. If it doesn’t, we’re not going to allow the plane, or ourselves, to follow it.

The sorts of disruptions that might arise aren’t anything a crew couldn’t notice and easily override. The FMS cannot say to the plane, “descend toward the ground now!” or “Slow to stall speed now!” or “Turn left and fly into that building!” It doesn’t work that way. What you might see would be something like an en route waypoint that would, if followed, carry you astray of course, or an altitude that’s out of whack with what ATC or the charts tells you it ought to be. That sort of thing. Anything weird or unsafe — an incorrect course or altitude — would be corrected very quickly by the pilots.

Several websites that have picked up the story seem to contradict this by claiming that many modern planes “lack analog instruments” or have autopilot systems that cannot be switched off, etc., etc. — basically claiming that pilots would be unable to recognize or react in time to pirate uplinks. For instance, in this report, it states: “A pilot could thwart an attack by taking the plane out of autopilot although he pointed out that several newer systems no longer include manual controls.”

This is simply false.

To be clear, none of this is to suggest that beaming uninvited data into the electronic architecture of the cockpit is a good or safe idea. Of course it is not. That it might be possible is, to be sure, a cause for alarm, and I’m more than a little dismayed that Mr. Teso is cavalier enough to openly share how such a thing might be done. But, even so, this is not by any stretch the sort of imminent threat people are being led to think it is. Scary words like “hijack” and “takeover” have no place in this conversation.
 

ElFly

Member
Welp there goes any chance of people using electronic devices during take off or landing.

And maybe during the whole flight!
 

barrbarr

Member
I love to see a movie that used this concept in some way. It could lead to a cool action set piece or a setting for a thriller.
 
Did he happen to look like this by any chance?

007LFD_Timothy_Olyphant_007.jpg
 
As usual with aviation-related news stories, Patrick Smith/Ask the Pilot sets the record straight:

Hijacking via Android?

April 12, 2013

This is my preemptive plea, an open letter to the media, to rein in this silly airplane story before it gets too much traction.

I’m talking about the story, which began making rounds on Thursday, about the possibility of using Android devices or similar gadgets to “hijack” or “take over” commercial airplanes by inputting rouge data to the plane’s ACARS or FMS units.

If you don’t know what I’m talking about, good. If you do know, please don’t take it too seriously.

On the one hand, Hugo Teso, the person behind this lecture/experiment, has a solid understanding of how planes fly, and is presumably familiar with the way pilots and their technology interact. Unfortunately, he’s extrapolating wildly — or the media is extrapolating wildly — and giving people the entirely wrong impression. What could be an interesting conversation is instead being dumbed down into alarmist nonsense.

ACARS is an air-to-ground communications system that allows messages to be sent back and forth over VHF radio frequencies or satellite link. The FMS, or flight management system, is the proverbial “computer” that you sometimes hear pilots mention. It presents an electronic, integrated blueprint of a flight — the various courses, altitudes and speeds that we’ll be flying at between city A and city B — which the plane’s autoflight system — or the pilots, when flying manually — then follow. This blueprint is based on a slew of manually and/or electronically inputted data. Much of this is data is loaded prior to departure, but a flight is very organic. Our headings, altitudes, speeds, arrival and departure patterns, etc., are never forecast with certainty from the start. FMS data is subject to numerous updates and revisions over the course of a flight. Usually these changes are entered manually by the crew. Occasionally they are sent automatically from air traffic control or company dispatchers.

Teso wants you to believe your smartphone can send these instructions as well, causing a dangerous disruption.

The problem is, the FMS — and certainly not ACARS — does not directly control an airplane the way people think it does, and the way, with respect to this story, media reports are implying. Neither the FMS nor the autopilot flies the plane. The crew flies the plane through these components. We tell it what to do, when to do it, and how to do it. Whatever data finds its way into the FMS, and regardless of where it’s coming from, it still needs to make sense to the crew. If it doesn’t, we’re not going to allow the plane, or ourselves, to follow it.

The sorts of disruptions that might arise aren’t anything a crew couldn’t notice and easily override. The FMS cannot say to the plane, “descend toward the ground now!” or “Slow to stall speed now!” or “Turn left and fly into that building!” It doesn’t work that way. What you might see would be something like an en route waypoint that would, if followed, carry you astray of course, or an altitude that’s out of whack with what ATC or the charts tells you it ought to be. That sort of thing. Anything weird or unsafe — an incorrect course or altitude — would be corrected very quickly by the pilots.

Several websites that have picked up the story seem to contradict this by claiming that many modern planes “lack analog instruments” or have autopilot systems that cannot be switched off, etc., etc. — basically claiming that pilots would be unable to recognize or react in time to pirate uplinks. For instance, in this report, it states: “A pilot could thwart an attack by taking the plane out of autopilot although he pointed out that several newer systems no longer include manual controls.”

This is simply false.

To be clear, none of this is to suggest that beaming uninvited data into the electronic architecture of the cockpit is a good or safe idea. Of course it is not. That it might be possible is, to be sure, a cause for alarm, and I’m more than a little dismayed that Mr. Teso is cavalier enough to openly share how such a thing might be done. But, even so, this is not by any stretch the sort of imminent threat people are being led to think it is. Scary words like “hijack” and “takeover” have no place in this conversation.
 

KHarvey16

Member
In addition to the article quoted above, saying you only need a phone is ridiculous. To transmit that type of data you need a radio transmitter or a satellite link.
 

mclem

Member
WE're going on holiday to the US in a few weeks. My Mum is a nervous flyer. I *need* to keep her away from this story.
 

fratstar

Banned
As usual with aviation-related news stories, Patrick Smith/Ask the Pilot sets the record straight:

So would the new route set on fms by a hacker require confirmation from the pilot in the plane before it is implemented or would that require the pilot to be monitoring the fms details. I guess what I'm asking is, what are the chances that the pilot doesn't realise that the fms route has been hacked.
 
They would not only need the signal to read the plane, they would need to hijack the radio signal first. It is improbable in real life scenarios
 
Status
Not open for further replies.
Top Bottom