Researchers Hack a Boeing 737 with a Coin-Sized Device
Coin-Sized Device Can Hack a Boeing 737
Security researchers have demonstrated a new hacking technique that can compromise a Boeing 737 by physically accessing a port on the aircraft's exterior. In less than 60 seconds, they can plug in a small, Wi-Fi-enabled device that can spoof commands to the plane's Flight Management Computer and Multipurpose Control Display Unit, potentially redirecting the autopilot or altering critical takeoff calculations. The researchers, from UC San Diego and Oberlin College, will present their findings at the Usenix cybersecurity conference. They argue that physical access attacks represent a significant blind spot in aircraft security, and they suggest simple mitigations like plugging the port with epoxy.
If you could get 60 seconds with an airplane, what could you do? Well, it turns out there’s a port that’s externally accessible. You can get to it with no special tools in about 15 seconds. And you can shove in a piece of electronics a little bigger than a quarter that lets you basically tell the autopilot what to do and lie to the pilot about changes to the flight plan.
- userbinator
one that's routinely within reach of maintenance workers or other airport and airline staff between flights
You already trust them (as well as the pilots) every time with your flight.
- United857
> less than a minute, that hardware implant can be fitted into a port accessible via a hatch on the exterior of the plane
Just as with computers, as the saying goes, if you have physical access to the device then all bets are off. The tricky part is getting that physical access in the first place...
- WalterBright
> the company may not in fact implement any such update to their systems for years to come, given how rarely commercial airplanes are redesigned.
Boeing commercial airplanes are constantly updated. As long as the airplane is in service, Boeing retains a team of engineers that update parts as needed. If FAA review is needed, this will of course take longer.
BTW, anyone with access to the internals of an airplane could potentially sabotage it. Sadly, all people with access need to undergo a security check.
- snapsnail
- numpad0
...so they built an equivalent of OBDII reader for planes, and it worked just the same as ones for cars? Interesting but not as scary as the title may suggest.