Planesploit You obviously won't find it in Google Play.
So what are these newer systems that don't include manual controls?
Digital Fly-by-wire
Currently a hack like this wouldn't work due to manual override. But because studies have proven automated controls are less error prone than pilots especially in stressful situations there is a push for automation.
Keep in mind that even in these automated systems you realistically shouldn't be able to cause a crash because to do so would require you the plane to exceed conditional parameters that limit how fast or off course a plane can go.
But in the future if someone figures out how to override even those conditionals...
...oh whelp.
[edit]
A more elaborate response on the difficulties of manipulating a plane by phone provided by Patrick Smith thanks to chaostrophy for providing the link.
Teso, a trained commercial pilot for 12 years, reiterated that the Automated Dependent Surveillance-Broadcast (ADS-B) is unencrypted and unauthenticated which can lead to passive attacks like eavesdropping or active attacks such as message jamming and injection. Furthermore, the Aircraft Communications Addressing and Reporting System (ACARS) – a service used to send text-based messages between aircraft and ground stations - also has no security.
Once in, he demonstrated how it was possible to manipulate the steering of a Boeing jet while it was in autopilot mode. The security consultant said he could cause a crash by setting the aircraft on a collision course with another jet or even give passengers a scare by dropping down the emergency oxygen masks without warning.
A pilot could thwart an attack by taking the plane out of autopilot although he pointed out that several newer systems no longer include manual controls.
So what are these newer systems that don't include manual controls?
Digital Fly-by-wire
Airbus/Boeing
Main article: Flight control modes (electronic)
Airbus and Boeing commercial airplanes differ in their approaches in using fly-by-wire systems. In Airbus airliners, the flight-envelope control system always retains ultimate flight control when flying under normal law, and it will not permit the pilots to fly outside these performance limits unless flying under alternate law.[14] However, in the event of multiple failures of redundant computers, the A320 does have a mechanical back-up system for its pitch trim and its rudder. The A340-600 has a purely electrical (not electronic) back-up rudder control system, and beginning with the new A380 airliner, all flight-control systems have back-up systems that are purely electrical through the use of a so-called "three-axis Backup Control Module" (BCM)[15]
With the Boeing 777 model airliners, the two pilots can completely override the computerized flight-control system to permit the aircraft to be flown beyond its usual flight-control envelope during emergencies. Airbus's strategy, which began with the Airbus A320, has been continued on subsequent Airbus airliners.
Currently a hack like this wouldn't work due to manual override. But because studies have proven automated controls are less error prone than pilots especially in stressful situations there is a push for automation.
Keep in mind that even in these automated systems you realistically shouldn't be able to cause a crash because to do so would require you the plane to exceed conditional parameters that limit how fast or off course a plane can go.
But in the future if someone figures out how to override even those conditionals...
...oh whelp.
[edit]
A more elaborate response on the difficulties of manipulating a plane by phone provided by Patrick Smith thanks to chaostrophy for providing the link.
On the one hand, Hugo Teso, the person behind this lecture/experiment, has a solid understanding of how planes fly, and is presumably familiar with the way pilots and their technology interact. Unfortunately, he’s extrapolating wildly — or the media is extrapolating wildly — and giving people the entirely wrong impression. What could be an interesting conversation is instead being dumbed down into alarmist nonsense.
Teso wants you to believe your smartphone can send these instructions as well, causing a dangerous disruption.
The problem is, the FMS — and certainly not ACARS — does not directly control an airplane the way people think it does, and the way, with respect to this story, media reports are implying. Neither the FMS nor the autopilot flies the plane. The crew flies the plane through these components. We tell it what to do, when to do it, and how to do it. Whatever data finds its way into the FMS, and regardless of where it’s coming from, it still needs to make sense to the crew. If it doesn’t, we’re not going to allow the plane, or ourselves, to follow it.
The sorts of disruptions that might arise aren’t anything a crew couldn’t notice and easily override. The FMS cannot say to the plane, “descend toward the ground now!” or “Slow to stall speed now!” or “Turn left and fly into that building!” It doesn’t work that way. What you might see would be something like an en route waypoint that would, if followed, carry you astray of course, or an altitude that’s out of whack with what ATC or the charts tells you it ought to be. That sort of thing. Anything weird or unsafe — an incorrect course or altitude — would be corrected very quickly by the pilots.
Several websites that have picked up the story seem to contradict this by claiming that many modern planes “lack analog instruments” or have autopilot systems that cannot be switched off, etc., etc. — basically claiming that pilots would be unable to recognize or react in time to pirate uplinks. For instance, in this report, it states: “A pilot could thwart an attack by taking the plane out of autopilot although he pointed out that several newer systems no longer include manual controls.”
This is simply false.
To be clear, none of this is to suggest that beaming uninvited data into the electronic architecture of the cockpit is a good or safe idea. Of course it is not. That it might be possible is, to be sure, a cause for alarm, and I’m more than a little dismayed that Mr. Teso is cavalier enough to openly share how such a thing might be done. But, even so, this is not by any stretch the sort of imminent threat people are being led to think it is. Scary words like “hijack” and “takeover” have no place in this conversation.