Stolen NASA Laptop Had Space Station Control Code
astroengine writes "NASA had 5,408 computer security lapses in 2010 and 2011, including the March 2011 loss of a laptop computer that contained algorithms used to command and control the International Space Station, the agency's inspector general told Congress Wednesday. According to his statement (PDF), 'These incidents spanned a wide continuum from individuals testing their skill to break into NASA systems, to well-organized criminal enterprises hacking for profit, to intrusions that may have been sponsored by foreign intelligence services seeking to further their countries’ objectives.'"
to the heart of the first post!
Coming soon to the ISS: "I'm afraid I can't do that, Dave."
I would say that losing the source code to some of the embedded control systems in the ISS is just about the LEAST valuable theft of source code, ever. That code is most likely extremely specialized, designed JUST for whatever system on the ISS in question, and probably had millions of dollars put into refining, optimizing, and debugging it. I bet the code is completely unsuitable for any other purpose for that reason (one way to reduce bugs is to make the code as specific as possible in a low level language).
And, whatever system we are talking about : ventilation, communications, power, water recycling : you can safely bet that the way NASA designed it is TOTALLY unsuitable for commercial use. It probably uses the most expensive possible parts, made by hand, for crucial components of the systems.
It's a physical object so, if there was no consequence before they discovered the theft, there won't be one after.
Unless that control code allowed the user to manipulate the space station and hide the manipulation, which would be kind of retarded on NASA's side.
Seriously, what do you expect for security when a 8 year old can "override the security protocols" at a whim? The engineers who designed that system need to get bitch slapped - repeatedly.
boom goes the dynamite....
Now I can be all the time under a good shade during the summer.
Maybe it's time to store everything in NASA's own cloud, might be easier to control access, instead of leaving *very* important projects on unprotected hard drives?
This doesn't sound like much of an actual threat. If you can't physically access the machine, what good does having its "algorithms" do you ? What, is Elon Musk going to carry this up to the ISS on the Dragon and take over the air handling system ?
Examine source code, take control of systems, lock out everyone else, demand $100,000,000 for the password to unlock it.
This laptop I bought on craigslist with the JPL asset tag and wallpaper is starting to look interesting.
What is this "Plumbing Subroutines" folder? And why does ZoneAlarm have it allowed to connect to ISS.nasa.gov?
Whoops...
Silence is a state of mime.
What if space aliens stole it as part of their nefarious plot of taking it over and killing us all? Just a thought. Too bad nuclear bombs are banned in space or we could just nuke it in orbit. You know, just to be sure.
The soylentnews experiment has been a dismal failure.
This could be spectacular! Tossing water droplets around in zero-G pales in comparison to getting that thing twirling like a baton at a Texas halftime show...
---------------------------------------
Rotate the pod, please, HAL....
YOu see, hackers could get a hold of that code and design a worm and virus around it. Then, by uplinking to a satellite and hacking into the ISS' control systems from that, they could implant the virus and take over the ISS. Then from there, they order the ISS to fire its thrusters and crash into the Whitehouse. BUT, it will be stopped because Chris Pine, after getting his ass kicked by oen of the Russian astronauts, will get up there and stop it with some clever out witting of the astronauts.
So, don't you see?! This has some serious reprocussions in regards to some really really shitty Hollywood script being written and causing all of us much SciFi or SyFy pain. Actually, if it were SyFy, there's be ghosts involved.
The quote in the article says that the laptop was lost rather than saying it was stolen. Also this is discovery news which carries such charming stories as identifying a chupacabra candidate and anuther one that tries to make a mystery out of a "space ball" that fell to earth.
Somehow, I think Wolowitz is responsible....
Why are the control algorithms of the ISS so secret?
http://www.strategypage.com/htmw/htintel/articles/20061110.aspx
Just like how they targeted the US's nuclear weapons research programs for the previous couple decades, they are now targeting NASA and aerospace contractors as they build up their own space program. Hell, this theft probably just gave them a good head start on the control systems for their own private space station.
seriously, how old is the tech in the space station? i bet my iphone is faster than most of the computers on there
When are these companies going to learn. Your critical data has no reason being connected to the web. There is also no reason to let anyone near the computer that has such critical data on it and is untrustworthy. If you are doing these things then you must not care about your data.
...to hack the aliens back with a Mac
A thin-walled tin can in low Earth orbit... It's not exactly Star Trek here folks. It's not like a rogue nation can now point the ISS's phasers at enemy cities! Oh no!!!
I really don't understand why some agencies such as NASA, or the VA can't use TrueCrypt on their Laptops. Full drive encryption and a strong password to protect it, creates excellent peace of mind. I work for a medical facility, and all of our laptops are encrypted this way. Maybe I'm just being paranoid, or maybe.... the command codes to the ISS are 'just' as important as protecting someones personal health data.
Perhaps these things would stop getting lost or stolen if our government made it a requirement when people took these things out of or away from positive physical control at/in a government facility, they were required to be handcuffed to the arm of the person removing it, and that person did not have a key, and moreover, I'm not talking generic handcuffs, but special NASA ones that you couldn't remove without removing the hand of the person wearing it, without the key.
Mostly, I think many of these "stolen" laptops might actually have been sold by the person from whom they were "stolen"... that's the only explanation I can think of for THAT many losses. But what the hell do I know... try the handcuff thing, see if that doesn't reduce losses. If it does, problem solved, and you're welcome.
Who cares? Russia has control of the station anyway since we don't have our own launch craft.
Now we'll have to deal with Dr. Evil running the place.
Some mornings it's hardly worth chewing through the restraints to get out of bed.
Someone else builds a space station and uses the stolen algorithms to control it? Oh No! IP violations!
I am looking at you, Wolowitz.
Do you realize that space stations are not sold in stores? And do you realize that you do not want to hack one to jailbreak it, but to potentially gater intelligence or hold it to ransom?
The testimony was about "control codes", not source code. The word "code" can mean many things, folks.
I can guess what the "control codes" are... Up, Up, Down, Down, Left, Right, Left, Right, B, A, B, A, Select, Start
You almost make it sound cool/useful/dangerous/valuable.
Is the ISS control code 123456? That's the combo to my luggage!
You've got to learn WHY things work on an international space station...
The ISS control code is 16309
That makes perfect sense, ummagumma (ãã¾ãã¾ã or é¦çS) means bearhorse in Japanese.
If my comment didn't sound as good in your head as it did in mine, then I guess we all know who's to blame
That would have been funnier if Slashdot would have supported Unicode in posts. Oh well, live and learn ... . (and then forget).
If my comment didn't sound as good in your head as it did in mine, then I guess we all know who's to blame
All I can say is, big deal. So what, they lost a few laptops. The laptops were most likely encrypted - seriously, every govenrment agency and contractor for years has been encrypting laptops. Even if they used a weak encryption scheme, when the thief realized they were encrypted, he probably just formatted the harddrive, installed a bootlegged OS, and sold it on ebay. I think the bigger issue is here that NASA needs to teach their employees to take better care of their laptops - this probably cost NASA a whole $1,000! :-)