Slashdot Mirror


Hackers Briefly Controlled US Government Satellites

Orome1 writes "Two U.S. satellites have been tampered with by hackers — possibly Chinese ones — in 2007 and 2008, claims a soon-to-be released report by the the U.S.-China Economic and Security Review Commission. The two satellites, Landsat-7 and Terra AM-1, had been interfered with on four separate occasions, allowing the attackers to be in command of the satellites for two to over twelve minutes each time. Luckily, both of the satellites are used only for observing the Earth's climate and terrain, and the hackers never actually misused their control over them in any way."

28 of 261 comments (clear)

  1. Pardon me, but by chispito · · Score: 4, Insightful

    the hackers never actually misused their control over them in any way

    Can we agree that that hacking into a satellite is, by definition, misuse? That there is no proper use in this scenario?

    --
    The Daddy casts sleep on the Baby. The Baby resists!
    1. Re:Pardon me, but by Anonymous Coward · · Score: 2

      You have a dog. You train your dog to respond to voice commands -- sit, roll over, heel, and attack. Would you consider that "misuse"? Of course you wouldn't.

      Of course I would. You don't have my permission to order my dog around. He's mine, not yours.

  2. Just testing ... by perpenso · · Score: 3, Insightful

    hackers never actually misused their control over them in any way

    So they are at an early testing stage. That is not overly reassuring.

  3. Not this time: by Oswald+McWeany · · Score: 5, Insightful

    the hackers never actually misused their control over them in any way

    No... they were just trying out a proof-of-concept. Now they know how to take over the satelites though- the Chinese will have us in their grasp if we ever go to war... ... think about it- next time we consider going to war with China- they will take over our satellites and force us to watch Chinese Opera on our TV sets. ... our surrender will be so quick the French will call US surrender monkeys.

    --
    "That's the way to do it" - Punch
    1. Re:Not this time: by Dunbal · · Score: 2, Insightful

      our surrender will be so quick the French will call US surrender monkeys.

      Sigh. I guess you've never been to Paris, huh? What is the name of that place, ahh yes, Place Charles de Gaulle, there's a big monument there. They call it the arch something. The arch of surrender I think. It symbolizes all the times the French have run away, and all the battles they have lost, around the entire globe, right? Why do they still speak French from the Caribbean, across Africa, to Indo-China, I wonder?

      As for "Case Yellow", I doubt very much that the US would have fared much better had it had Germany for a border instead of Mexico and Canada. In fact, the US generally does very badly when at war unless surrounded with a sea of allies it can shoot at (oops sorry hur hur). Please list the wars won by America since 1946. Back to the trailer park with you.

      --
      Seven puppies were harmed during the making of this post.
    2. Re:Not this time: by MikeyC01 · · Score: 2

      Is it true that like the Eskimos have a dozen words for "ice" that the French have dozens of words for "surrender"? ;)

    3. Re:Not this time: by Dunbal · · Score: 2

      Also you may have missed the news for the past 10 year or something but the US did defeat 2 countries.

      Which two countries? Oh you mean the ISAF destroyed the Afghan military. Yeah ok that's true. Way to forget your allies there, which include France by the way. And yes, the US destroyed Iraq's puny army - the one that was previously destroyed in 1991 and he was not permitted to rebuild but managed to scrape together with ancient equipment? Yeah ok, you got that one too. Next I suppose you will be claiming astounding victories in Grenada and Panama too?

      By the way, what is the plan with those countries that you "won"? I mean like you said, it's been 10 years...

      No, the long and short of it is that in 1812 while all of Europe and most of North Africa was firmly under the French boot and Napoleon was sitting pretty in Moscow, the US was busy getting it's ass kicked by - Canada. Way to go there, eh? Yeah, I'm Canadian. French Canadian.

      --
      Seven puppies were harmed during the making of this post.
    4. Re:Not this time: by Martin+Foster · · Score: 2

      Source: http://www.synonyms.net/synonym/surrender

      surrender, yielding, capitulation, giving up, resignation, fall, forsaking, concession, surrender, resignation, conceding

      Depending on your point of view these can apply as well: Withdraw, fall back, retreat.

      So what does that say about English speaking countries?

    5. Re:Not this time: by Lumpy · · Score: 3, Funny

      we steal all the other languages words.

      --
      Do not look at laser with remaining good eye.
    6. Re:Not this time: by LastGunslinger · · Score: 3, Informative

      The French have not won a major war in nearly 300 years in which the United States was not their ally. French-Indian / Seven Years War - lost; Napoleon - kicked major ass and wreaked havoc for years and still lost; Franco-Prussian War - lost; Algeria - lost; Vietnam - lost before the US made the same mistake. We don't even need to mention WWII, the collapse of the Republic, and the whole Vichy collaborationist thing. What's that you say? The French made a major contribution towards the American War of Independence, fought valiantly in WWI, and have been good allies to the US during wars of the past few decades? And none of that really has to to do with the US being their ally any more than the US winning wars has to do with the bit part the other nations play in our coalitions, save perhaps Britain.

    7. Re:Not this time: by Big+Smirk · · Score: 2, Insightful

      Ah yes, Charles de Gaulle. When he got France out of NATO, and told US President Johnson that he wanted all US troops out of France, Johnson ask "Does that include the ones buried there?"

      French view of history seems to be very myopic.

      --
      TODO: create/find/steal funny sig.
  4. Nimbus by Anonymous Coward · · Score: 5, Interesting

    When GE built Nimbus (an early weather satellite) my grandfather was one of the engineers. He had security clearance high enough that it got him out of the draft and an armed guard was required when he went to the dentist (to shoot him should he start saying the wrong things under the gas). As he put it: "there's no way it's just looking at the clouds".

    1. Re:Nimbus by chill · · Score: 5, Interesting

      Really? My grandfather essentially told me the same story. He was a radioman specializing in radar in the early 1940s. He, too, had armed escorts to dentist appointments. Nor was he allowed to leave the base during the training period. No visitors, either.

      Damn near everything he was doing was classified out the wazoo. Times were different then.

      --
      Learning HOW to think is more important than learning WHAT to think.
  5. Re:Global Warming by Dunbal · · Score: 2

    China is only consuming about half as much oil as the US - assuming oil/energy production and consumption play a major role in global warming. On the other hand, most of that consumption is being done to produce goods to be shipped to the US and Europe. Can you really blame someone for bleeding if you're the one that cut them?

    --
    Seven puppies were harmed during the making of this post.
  6. over 12 minutes? by FunkyELF · · Score: 2

    Does that mean 12 and some change? If it was 13.5 minutes they would have said over 13?

    Its like saying "My daughter took top 17 in the beauty pageant."... it means she got exactly 17th.

  7. China doesn't care about subtlety by almitchell · · Score: 2

    When China freely admits that it was them who took out the NE US power grid in 2003 just to see if they could (race condition, indeed), you have to wonder what they're doing that they don't tell us about. Several experts debunked that theory, but they're openly publishing papers like this: http://standeyo.com/NEWS/10_Sci_Tech/100323.CH.US.Power.Grid.pdf. I dunno. The Chinese think we're pretty laughable. I wouldn't put anything past them.

    --
    Baseless self confidence kills more people each year than bathtubs.
    1. Re:China doesn't care about subtlety by Lumpy · · Score: 2

      "The Chinese think we're pretty laughable."

      and we are. we have Retarded executives making infrastructure decisions that dont even have the IQ or education to decide how to make coffee. WE have Critical SCADA systems on public networks, we have stupid design decisions driven by managers, Security catering to users that think passwords are "hard".. etc....

      We are pretty darn laughable.

      --
      Do not look at laser with remaining good eye.
  8. Re:related? by Jeng · · Score: 2

    We did it, but just in a more polite manner.

    http://en.wikipedia.org/wiki/Anti-satellite_weapon#United_States

    --
    Don't know something? Look it up. Still don't know? Then ask.
  9. Re:WTF! by jhoegl · · Score: 2

    I like how there is a subtle implication of Chinas involvement because they may have made them.

    What... people really yearn for the good ole days of the Cold war or something?
    That and our doublestandard that we have come to enjoy... China sucks, they take all our jobs, all our money, and are growing at a crazy pace, so they are evil.
    But lets buy from them anyways... what?

  10. Imagery not good enough... by AliasMarlowe · · Score: 2, Funny

    As soon as the spy satellite images are good enough to resolve pubic hairs, the Chinese hackers will be all over them.

    When that happens, nude sunbathing in the decadent West might just cripple the Chinese military effort... So do your duty, girls!

    --
    Those who can make you believe absurdities can make you commit atrocities. - Voltaire
    1. Re:Imagery not good enough... by Pope · · Score: 2

      You're assuming the decadent Western nude sunbathers still have their pubic hairs intact.

      --
      It doesn't mean much now, it's built for the future.
    2. Re:Imagery not good enough... by AliasMarlowe · · Score: 5, Informative

      You don't think the government satellites don't have that type of imagery yet?

      Nope. Do the math, the resolving power dR of an optically perfect instrument of diameter D and focal length L using light of wavelength W at working distance equal to focal length is given by:
      dR=1.22 W L/D
      So for a really thick pube of diameter 0.1mm, using blue light of wavelength 0.0004mm, the L/D must not exceed 204. For low orbit, L is at least 50 kilometers, which suggests D must be at least 250 meters. The larger spy satellites have imperfect mirrors of only 2 or 3 meters, so good luck with scaling their diameters up by two orders of magnitude (i.e. 4 orders of magnitude in area for a simple scaling).

      Google Earth scares the shit out of me b/c I cannot imagine WTF the government has with their technology.

      You're probably thinking of the aerial photography by USGS and others. Not satellite imagery. It's good, but more than an order of magnitude away from resolving a pube, however.

      --
      Those who can make you believe absurdities can make you commit atrocities. - Voltaire
  11. Re:WTF! by Lumpy · · Score: 4, Informative

    WTF? it's not hard to start messing with a satellite C&C. IT's not like they are on the internet and the older ones have completely open interfaces.

    All it takes is a PC with a sound card, custom software, and some ham radio gear and a nice big antenna array. if you can overwhelm the C&C signal from the main control point you can certainly start messing with it, non GEOSYNC birds typically are only communicated with when needed so it's easy to just contact it and send a command.

    Hell if a hacker made a big enough antenna array they can screw with Mars rovers.

    A little bit of education in how things you rely on work will turn your WTF! into a DUH!. mostly because most older satellites don't even require a username and password to connect and control it.

    --
    Do not look at laser with remaining good eye.
  12. That captain midnight guy just over powered HBO by Joe_Dragon · · Score: 2

    That captain midnight guy just over powered HBO and was able to show his test card on HBO.

    1. Re:That captain midnight guy just over powered HBO by Culture20 · · Score: 2

      Back in 1985, I recall that someone took control of some satellite also. I can not really recall the article.

      Back in 1987, a signal from the future took control of televisions everywhere and was used to sell toys that interact with a television show (actually a temporal signal that allowed kids to control UAVs in the future to fight evil bio-dreads). Captain Power changed the course of history, so the show was "canceled".

  13. Re:Security through Geometry? by Remus+Shepherd · · Score: 5, Informative

    I work on the Landsat project.

    Yes, Landsat 7 is controlled from Sioux Falls. But every downlink station (and we have over a dozen of them, including one in China) has the ability to communicate with the satellite to trigger a download of recorded imagery. I assume that's all the hackers did, which means all they would be able to do is wipe some imagery out of the archive. That's a hair-raising scenario for us but not significant for most people.

    Only EROS has the ability to upload flight commands to the satellite. That's not to say that Svalbard couldn't, they just don't have the software and one would hope they don't have the documentation needed to form the command syntax. But if they had those things and a hacker took control of them, they could burn the satellite into the atmosphere or send it careening around in its orbital neighborhood. Chances of it hitting another satellite and breaking into a million disaster-causing pieces are minor but not zero.

    This is a scary news story for us. I'm interested in seeing the full report when it's finally released.

    --
    Genocide Man -- Life is funny. Death is funnier. Mass murder can be hilarious.
  14. Re:WTF! by mug+funky · · Score: 2

    that's all well and good, but so long as the majority don't care enough to also boycott, nothing will change.

    and it's our bosses that decide it's cheaper to do it overseas... and they're correct in that decision.

    i'm increasingly of the opinion that outsourcing to countries with cheap labour is actually capitalism's version of communism. it's raising the standard of living in the cheap countries and lowering it at home. when the standard has raised to the point that it's no longer competitive to outsource there, they find somewhere cheaper.

    china is outsourcing a big chunk of it's clothing business to various African countries. you'll be surprised to find "made in China" may actually be a lie.

    china wont be the world's factory for long - its skill set and wages are increasing very fast.

    is this a bad thing or a good thing? certainly it's bad for us 1%'ers. it's most likely very bad for the global environment, but in the medium term at least it's good for the majority of people.

  15. Re:WTF! by digitalchinky · · Score: 2

    Being a former ELINT drone of many years I'd like to point out one aspect where you are quite wrong Lumpy - the C&C uplinks for near on every bird launched in the last 15 years are encrypted and use quite a few layers of security beyond that to authenticate command and control codes, particularly so for those owned and operated by the US. Not only that but pretty much all of them use entirely different line codes (for want of a better term) so it's not like there is a published standard methodology one can follow to 'own' one.

    A little bit of education on the subject would certainly reveal that you can indeed beam a signal out to the Clark belt using cheap off the shelf kit these days, but there is no way in hell the average individual is going to pull this off without some serious know how and a lot of leg work to intercept and analyze the uplink.

    I think you are confused between C&C and simply relaying a signal across a transponder, the latter having no security at all in just about every instance, the former being secure as hell in the majority.