Slashdot Mirror


Most US Drones Still Beam Video Unencrypted

An anonymous reader writes "Four years after discovering that militants were tapping into drone video feeds, the U.S. military still hasn't secured the transmissions of more than half of its fleet of Predator and Reaper drones, Danger Room has learned. The majority of the aircraft still broadcast their classified video streams 'in the clear' — without encryption. With a minimal amount of equipment and know-how, militants can see what America's drones see."

138 comments

  1. Ad link by Anonymous Coward · · Score: 0

    Coinurl.com?

    1. Re:Ad link by sortadan · · Score: 1

      I'm seeing a wired.com link, so looks like the editors went above and beyond the call of duty on this one (which is to say they did anything at all :-).

    2. Re:Ad link by Jeremiah+Cornelius · · Score: 1

      Hooray! Surveillance!

      I hope that 12 year-old Pashtun and Somali kids down every one of these fuckers, with a jammer and a slingshot.

      You know, like the GOOD GUYS in THE BIBLE did.

      --
      "Flyin' in just a sweet place,
      Never been known to fail..."
  2. seriously? by Anonymous Coward · · Score: 0

    you linked us to coinurl?

  3. Soooo maybe that is anticipated by Anonymous Coward · · Score: 0

    and used to feed false ....feeds?

    1. Re:Soooo maybe that is anticipated by Anonymous Coward · · Score: 0

      nah, it's because of the weight of the crptographic encryptions units (which are much lighter now and the planes are more powerful) and the fact they were pushed out so fast and ground units were demanding video.

    2. Re:Soooo maybe that is anticipated by Z00L00K · · Score: 3, Interesting

      Then there is the point that if the hunted knows that he's discovered then it may be enough for them to call off an attack. So unencrypted may actually serve a purpose.

      And when you run encryption there's always one more factor that can go wrong. No picture at all is completely useless.

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    3. Re:Soooo maybe that is anticipated by budgenator · · Score: 1

      The interesting thing is I wouldn't be surprised if you could get the video stream on a 3 generations old smartphone,
        if that the case, and you have enough of the fleet beaming unencrypted video to make it worthwhile to try and intercept, then it's also very possible to transmit false videos over the unencrypted channel and the real video over an encrypted channel. This would have some very interesting tactical possibilities.

      --
      Apocalypse Cancelled, Sorry, No Ticket Refunds
    4. Re:Soooo maybe that is anticipated by HiThere · · Score: 1

      To transmit a false video you'd need to have a camera there...of course you could transmit old footage...but then how do you control the drone?

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    5. Re:Soooo maybe that is anticipated by budgenator · · Score: 1

      My understanding is the camera video stream is both send uplink to a satellite and back to the pilots and sensor operators and sent down to the troops so they get an aerial view of their tactical situation. It shouldn't be technically challengeing to put both an encrypted actual veiw down to the ground troops, and an unencrypted video stream with doctored video to misslead the opposing forces. I'd be surprised if there was only one frequency available for downlinking video.

      --
      Apocalypse Cancelled, Sorry, No Ticket Refunds
  4. Editor: remove the coinurl porn link by Anonymous Coward · · Score: 0

    Somebody is hoping to get a lot of click-through hits on their ads, thanks to Slashdot. Good to see we are helping out the friendly anonyous submitter.

  5. Link is spam by Anonymous Coward · · Score: 5, Informative

    The real Wired article is here.
    http://www.wired.com/dangerroom/2012/10/hack-proof-drone/

    1. Re:Link is spam by Anonymous Coward · · Score: 0

      That's where i read about it as well. It's the video that is broadcast to the ground troops that is being found on terrorists laptops. Also talks about the drone in south Africa that likes to turn it's self on.

    2. Re:Link is spam by Anonymous Coward · · Score: 0

      wtf. i just modded this up. what is wrong with you people, it's the straight link and was mentioned first.

    3. Re:Link is spam by YrWrstNtmr · · Score: 2

      Wireds 'Dangerroom' isn't any better than Coinurl.com. Same scaremongering.

      Yes, the feed is apparently unencrypted. But OMGWEREALLGONNADIE is the standard modus operandi of Dangerroom.

  6. URL is bad by Antony+T+Curtis · · Score: 1

    Moderator asleep at wheel?

    --
    No sig. Move along - nothing to see here.
  7. Coin URL redirect by Anonymous Coward · · Score: 0

    Stop that.

  8. Spam? by Anonymous Coward · · Score: 0

    Link is spam. :|

  9. Re:Editor Fail by Hadlock · · Score: 1, Offtopic

    We got a Glenn Beck link earlier today in the form of a voting machine calibration story. This does not bode well for Slashdot. Either that, or they've been hacked, and they haven't been able to tell anyone yet. I'm not sure which has happened.
     
    When they start linking to dodgy russian warez sites, it'll become more obvious who's in control of the site.

    --
    moox. for a new generation.
  10. Re-direct link??? by Anonymous Coward · · Score: 0

    Why the hell is the initial link a re-direct?

    1. Re:Re-direct link??? by Anonymous Coward · · Score: 1

      Its Timothy. Any other questions?

  11. Spaceballs: When will then be now? Soon. by retroworks · · Score: 4, Funny

    I can picture the Taliban watching the back of their heads on a screen, like in the Mel Brooks film. "Prepare to fast forward!" http://tinyurl.com/cqbwm5y

    --
    Gently reply
  12. Re:Editor Fail by Anonymous Coward · · Score: 0

    Welcome to slashdot. Also don't be shocked when a troll gets +5 and a reasonable post keeps getting buried by the same troll's sockpuppets.

  13. Re:Editor Fail by Anonymous Coward · · Score: 2, Informative
  14. Achmed, check this out, we're on TV! by Freddybear · · Score: 5, Funny

    Wait, are those cross-hairs? Oh shit...

    1. Re:Achmed, check this out, we're on TV! by girlintraining · · Score: 1, Interesting

      While amusing, the ability to watch the video unencrypted probably won't save you from being blown up at that point. What it will do, however, is tell your buddies where the drone took off, where it landed, and what areas are under surveillance. Now if I were an evil scheming terrorist, I'd wait until the drone passed by with its surveillance rig, and once it recorded something the top brass would consider a "target", shuffle in a bunch of women and children in the back way, and then evacuate the building. When Sir Bombsalot comes knocking, have camcorders standing by to show how the bastard americans are targeting innocent women and children.

      It's clear that the US military is better funded than my theoretical terrorist cell of doom, so rather than risk the lives of my people, I'd just as soon leave somebody else in the firing line. Why send someone into a crowded building with a bomb strapped to their chest when your enemy will happily supply an expensive GPS-guided smart bomb instead? And if the equipment to watch the video isn't expensive, equipment to jam the signal and replace it with a fake feed wouldn't be that difficult to come by either. It's not like realtime video manipulation software doesn't exist; they use it for football games, and it fits in the back of a van. Or did you think the yellow scrimmage line got repainted every time they made a new first down?

      --
      #fuckbeta #iamslashdot #dicemustdie
    2. Re:Achmed, check this out, we're on TV! by Isaac+Remuant · · Score: 1

      Reminds me of Tom Clancy's "Executive Orders" (from the Jack Ryan Saga).

      --
      "Science can amuse and fascinate us all, but it is engineering that changes the world. " - Asimov.
    3. Re:Achmed, check this out, we're on TV! by fustakrakich · · Score: 1

      Yes, sir, Officer Obie, I cannot tell a lie, I put that kid under that pile of rubble..

      --
      “He’s not deformed, he’s just drunk!”
    4. Re:Achmed, check this out, we're on TV! by Anonymous Coward · · Score: 2, Informative
      As someone who trains on ISR feeds in Afghanistan, I can tell you that's not how it plays out. If they can't put eyes on target, and confirm 100% there's no collateral, there's no shot. It's written into the Rules of Engagement, and I've watched countless times where a bad guy runs into a house and we waive off the ISR.

      Back to the article, a bad guy sitting there with an antennae, trying to grab ISR RF is going to have a very short life span.

    5. Re:Achmed, check this out, we're on TV! by budgenator · · Score: 0

      Most of the intended audiences for the "OMG the American infadels killed innocent women and children" stories aren't sophisticated enough to actually watch a video anyways.

      --
      Apocalypse Cancelled, Sorry, No Ticket Refunds
    6. Re:Achmed, check this out, we're on TV! by Anonymous Coward · · Score: 0

      How would you know he's a bad guy? Would you just blow up anyone operating a radio?

    7. Re:Achmed, check this out, we're on TV! by dbIII · · Score: 1

      where the drone took off, where it landed

      At the great big airstrip at a US base hundreds of miles away that everyone and their dog already knows about.

      shuffle in a bunch of women and children in the back way, and then evacuate the building. When Sir Bombsalot comes knocking, have camcorders standing by to show how the bastard americans are targeting innocent women and children.

      Nobody with political power really cares anymore. That shark was jumped early in the Iraq war when there was the proud announcement of the success of a difficult operation to blow up a deep bunker full of women and children in the hope that Saddam was in there.

    8. Re:Achmed, check this out, we're on TV! by Anonymous Coward · · Score: 0

      You are either extremely naive, not telling the truth, or just another solider following the leaders official statements.

      The USA has dropped most of the rules they have tried to sell to the developing world. China has learned how they can kill, torture, and hold down people by the USA.

      Reading your post reminds me of listening to the otherwise great General Colin Powell. A man of great intelligence and knowledge, but he is a solider who just says what the leaders want him to say.

      No one have done more to destroy the human rights of the world than USA after the historically small incident more than 10 years ago. No respect.

    9. Re:Achmed, check this out, we're on TV! by Xest · · Score: 1

      So how does it go wrong so often? I'm not trying to stir shit up, but the US has an abysmal track record on civilian casualties so if the rules of engagement are followed as strictly as you suggest then I'm intrigued to know where it goes wrong, and why.

      The problem is that whilst the rules of engagement are exactly what should be done, I'm not convinced they are. You only have to look at the raw original uncommented Wikileaks Apache video to see that at least Apache pilots give not the slightest shit for verifying a target as a threat before firing particularly in the case of the van that pulled up to assist the casualties. There was just no effort at all to avoid civilian casualties and every will to just shoot at anyone in the area "just in case" they were a militant who could harm the incoming US troops if they were. Under normal rules of engagement in that scenario the pilots should have held off firing until the US troops approached, the US troops should have approached carefully with the Apache pilot covering, if any sign of threat was then shown then the Apache pilots should've fired but that's the opposite of what happened. Is it that Apache pilots give less of a shit about the RoE than drone pilots making that example irrelevant in this case?

      I notice you say you train, could the reality be that whilst the RoE say one thing, that in practice, it's not actually what always happens?

  15. Re:Editor Fail by Anonymous Coward · · Score: 1

    It's a shame there isn't a flag to indicate the story was edited to correct this stupidity. I often feel like a complete idiot for coming back to this site (since 1998).

  16. Good enough for government work by Anonymous Coward · · Score: 0

    I'm pretty sure more than video is unencrypted

  17. Can we arrest the vendor? by Anonymous Coward · · Score: 0

    I believe that its illegal to transmit classified data in the clear, so can we arrest the vendor for a security violation?

    1. Re:Can we arrest the vendor? by aliquis · · Score: 1

      Yeah. The problem is the video, not the bombs? :D

      Priorities.

    2. Re:Can we arrest the vendor? by Anonymous Coward · · Score: 1

      No, because the vendor informed the USAF of the vulnerability and the Air Force said "fuck it, we're on a deadline here!"

  18. With any government agency involved by Anonymous Coward · · Score: 1

    Four years is probably barely enough to form a committee to plan the budget for a new feature. Maybe in another four years they'll actually start looking for an implementer.

    1. Re:With any government agency involved by Anonymous Coward · · Score: 0

      In the interest of open government, I demand all these feeds to be streamed to the global internet audience. As the old government saying goes, all these streams are ours, except in Europe. Do not try to send your feeds in there. Use them together, use them in piece.

  19. Neither is the control software. by Anonymous Coward · · Score: 1

    I'm controlling one right now. Don't believe me? Post your address, I'll buzz your house.

    1. Re:Neither is the control software. by Anonymous Coward · · Score: 2, Funny

      1600 Pennsylvania Avenue Northwest Washington, DC 20500

  20. Why is this important? by Anonymous Coward · · Score: 0

    Seriously, who cares if they can watch the video feed right before they get bombed.

    1. Re:Why is this important? by jtownatpunk.net · · Score: 1

      "Hey, Mo, isn't that your house on TV?"

  21. Re:Spaceballs: When will then be now? Soon. by GoodNewsJimDotCom · · Score: 2

    If the drones aren't encrypted, can't they be jammed?

  22. Ivan Artner by Anonymous Coward · · Score: 0

    Ivan would have owned these. RIP Ivan .

  23. To be fair... by BenJeremy · · Score: 1

    ...these drones are build so cheap, they have the same wired remotes that their civilian counterparts my cheap uncle would buy me ffor Christmas - the ones that only turn in reverse.

    Why yes, I'm till bitter about that.

  24. Any technical details? by ArchieBunker · · Score: 1

    Any more details about this? My guess is a cheap USB DTV receiver.

    --
    Only the State obtains its revenue by coercion. - Murray Rothbard
    1. Re:Any technical details? by Pinhedd · · Score: 4, Insightful

      Encryption, real time, and noisy signals don't mix well. This isn't a youtube video in which the client can request that the server resend a packet that contained an error. Unencrypted video streams are fairly error tolerant as an error will only manifest itself as a slight artifact for a few short frames. Strong encryption schemes are not error tolerant, a non-correctable error would result in one or more blocks of data being entirely unusable.

      A stream cipher could be used instead of a block cipher but a stream cipher presents added difficulties in that not only would the bitwise/bytewise encrypted transmission (as opposed to blockwise) have to be tracked, but it would have to be tracked in sync with a key. If the key repeats, it can be determined with a little bit of work in the same fashion that an RC4 key can be determined to break into WEP protected networks.

    2. Re:Any technical details? by ArchieBunker · · Score: 0

      Perhaps you didn't read the article but its UNENCRYPTED. What hardware are they using to receive the signal?

      --
      Only the State obtains its revenue by coercion. - Murray Rothbard
  25. play chess much? by Spiked_Three · · Score: 1, Troll

    The real trick is that the gov can track video receiving equipment (by the frequencies they use to decode the video) - so anyone attempting to receive video from a drone, is probably a worthwhile target :) Gotta love counter intelligence. Remember when we discovered (and thus told the russians) spent uranium bullets did not work? You guys are so gullible.

    --
    slashdot troll = you make a compelling argument I do not like the implications of.
    1. Re:play chess much? by MalleusEBHC · · Score: 1

      The real trick is that the gov can track video receiving equipment (by the frequencies they use to decode the video)

      What is this some Michael Bay "the signal that hacked your network" shit? How could they detect a passive receiver?

    2. Re:play chess much? by Pinhedd · · Score: 1

      While its true that passive receivers and signal amplifiers do reflect or emit parts of the signal that they are receiving, it's not easily detectable unless you know what you're looking for and are close to the target.

    3. Re:play chess much? by ThatsMyNick · · Score: 1

      Wow, if you can track a highly directional satellite dish antenna, I would be very impressed.

    4. Re:play chess much? by Anonymous Coward · · Score: 0

      The real trick is that the gov can track video receiving equipment (by the frequencies they use to decode the video)

      What is this some Michael Bay "the signal that hacked your network" shit? How could they detect a passive receiver?

      It's not unusual for a cop to drive around with this capability, so imagine for a second the military has better toys then them.

    5. Re:play chess much? by Anonymous Coward · · Score: 0

      While its true that passive receivers and signal amplifiers do reflect or emit parts of the signal that they are receiving, it's not easily detectable unless you know what you're looking for and are close to the target.

      You're assuming they would only passively detect receivers, but what would the point of that be?

    6. Re:play chess much? by Anonymous Coward · · Score: 0

      I dare you to prove him wrong, jackass. Right now all you've got is some nerd-ego the size of nebraska because you think you're right. Well, prove it.

    7. Re:play chess much? by Anonymous Coward · · Score: 0

      You're not tracking the antenna, you're tracking the IF radiated from the receiver itself.

    8. Re:play chess much? by Half-pint+HAL · · Score: 1

      I don't think you understand what a "passive receiver" is. It more or less means "an aerial". What you receive radio signals with. It isn't an "active" device because it doesn't emit anything and doesn't require any power (although you might have an active booster somewhere in the signal chain).

      --
      Got them moderator blues I blieve I walk out the do', With these mod-points I been gettin', I 'most never post no mo'
    9. Re:play chess much? by Lloyd_Bryant · · Score: 4, Informative

      What is this some Michael Bay "the signal that hacked your network" shit? How could they detect a passive receiver?

      Because the receiver ain't quite as "passive" as you think. Google for "local oscillator" for an example.

      Digital systems tend to generate noise on predictable frequencies as well - if a device has a chip that's clocked at a given frequency, then somewhere in that device is an oscillator used to generate that clock (though it may or may not be working at that particular frequency).

      The only truly passive receiver is one that is completely shielded to prevent it from radiating any of this noise. But you *have* to have a gap in the shielding in order for the incoming signal to be received. So building an undetectable receiver is not quite as easy as you might think.

      --
      Don't tell me to get a life. I had one once. It sucked.
    10. Re:play chess much? by Anonymous Coward · · Score: 0

      You're never going to have a SIGINT educated person answer this question. Let's just say even receivers have a signature.

    11. Re:play chess much? by zippthorne · · Score: 1

      Tracking it with what, though? The drone isn't big enough to have an antenna of sufficient size for the task. The power of the IF is comparable to the received signal level, and isn't directly driving an antenna.

      --
      Can you be Even More Awesome?!
    12. Re:play chess much? by Fnord666 · · Score: 2

      The real trick is that the gov can track video receiving equipment (by the frequencies they use to decode the video) What is this some Michael Bay "the signal that hacked your network" shit? How could they detect a passive receiver?

      I don't know about applying this to video but this is definitely real and is how LEOs detect radar detectors in states that ban them. This wikipedia article has a description of how it works. The short form is that radar detectors use superheterodyne receivers to detect the radar signal. These receivers are a lot more cost effective than trying to process the actual radar signal. Superheterodyne receivers need a local oscillator. This oscillator is not shielded so it leaks signal and that signal can be detected. Here is a good block diagram of the receiver. The local oscillator at the bottom is what leaks detectable signal.

      The other question is whether this would be detectable in reality. We are talking about a very low power signal if it even exists. This is not something you could build an "anti signal" missile around. At best you might be able to have boots on the ground with a portable detector to figure out if someone in a particular location was actively watching a video signal. Or they could just be watching a youtube video.

      --
      'The tyrant will always find pretext for his tyranny.' - Aesop's Fables
    13. Re:play chess much? by Anonymous Coward · · Score: 0

      No, you might not be able to do it with the drone. My point is, the directionality of the antenna (which ThatsMyNick cited as a challenge) just doesn't matter.

      Although you might be able to do it with the drone, over short enough range -- some of those birds are big, and a SOTA phased array spread over the bottom of fuselage and wings could just be doable. Remember, you're in the air looking down -- there's relatively little of the absorption and diffraction from obstacles that characterizes most surface-to-surface reception. The main consideration would be making sure that none of the drone's other radios have transmissions or LOs in the frequency range of interest -- if there are, you're deaf from the get-go.

    14. Re:play chess much? by Spiked_Three · · Score: 1

      Modded a troll? I bet its my signature that offended you fucking retards.

      --
      slashdot troll = you make a compelling argument I do not like the implications of.
  26. Re:Editor Fail by theshowmecanuck · · Score: 2

    This was the first story I down voted on the recent submissions page when I looked in there today. It really wasn't that hard to click on the link and see the spam site and that this was spam. I even chose the binspam option on the down vote. Whoever is the editor today is slacking. I know I'm not the only voting on those but you'd think anything with a vote of binspam should get an automatic closer look. The second story I down voted was the Glenn Beck trash story. At least for that one I had to highlight the "theblaze" site name and right click on search google to get to the wikipedia link (third or fourth site down the google search) to see that it was bullshit.

    Is this lameness the result of the new ownership? Or is it because it's Friday night and they're network gaming and only spending a few minutes here and there posting stories so they look like they're working?

    --
    -- I ignore anonymous replies to my comments and postings.
  27. Unencrypted Decoy by Anonymous Coward · · Score: 1

    Wouldn't it make sense to leave some drones unencrypted, so the enemy can think they are seeing everything? If everything was encrypted, they might try harder at decryption.

    Or you can let them see unencrypted signals of a trailer park, while your encrypted drones circle a hillside. If the enemy sees the trailer park on his eavesdropped TV, he'll comfortably sit outdoors on that hillside, knowing nothing threating has him in its sights.

    I think it's a brilliant strategy to leave them unencrypted.

  28. Reality Television, Taliban Style by Anonymous Coward · · Score: 0

    On this episode, stir-fry and crispy fried wontons.

  29. So what? by jimmyswimmy · · Score: 1, Insightful

    So what if the video is transmitted in the clear? What does that get you...

    - against a sophisticated enemy? They already know you're there (radar, DF on the transmitted signal). You're flying around in a racetrack centered on your target, so even without the video they know roughly what you're looking at. Problem is solved by an enemy air-to-air missile, or they ignore you and watch you watching them.

    - against an unsophisticated enemy? They don't even know to look for the signal in the first place.

    - against an enemy marginally capable of receiving the video signal? Use more channels, change encoding schemes so that COTS equipment can't pick it up so easily. Or yeah, encode it. But encoding video is fairly difficult considering the need to do it in realtime with limited processing capability and no tolerance for latency (and this is the real reason video is still transmitted in the clear - it's expensive to do anything but!). Or embrace it. Maybe your enemy can see you watching him - that can be played to an advantage.

    --

    Just my $0.55 (US inflation, 1774-2008, for $0.02)
    1. Re:So what? by GoodNewsJimDotCom · · Score: 1

      I would think encryption is very easy if you want to do it dirty with random number seeds without slowing down the speed of transfer except an int. You just send the data stream assembled in different ways based on the random numbers you have off the seed(the int). Then you disassemble the stream based off the random number seed that gives you the instructions to disassemble the stream back into the unencrypted form. If you do it intensively enough, the video should be a static mess to watch.

      If the secrets get out of your encryption algorithm, say a drone gets KO and found and your language gets reverse compiled, so they see how you're encrypting. Simply spend an hour or two writing a new way of assembling the string, and maybe use a different random number generator.

      Now if you want to do the security stronger than this, I'm sure there are ways to do it, but this method comes to mind real easy.

    2. Re:So what? by Pinhedd · · Score: 1

      These are satellite streams which run constantly. The receiving computer would have to be able to track and lock the start of the stream and/or a position in the stream before it could reassemble the packets. If a packet is missed, then the receiver will lose its lock. Thus, frame indexes of some sort would have to be used to help the receiver reacquire the lock. Since there are only so many possible ways to reassemble a real time data stream it's only a matter of time before someone else figures out how to do it simply by trial and error.

    3. Re:So what? by GoodNewsJimDotCom · · Score: 1

      When you put it like that, it makes sense. It is perfectly reasonable to rewrite encryption protocol every 2 weeks or so since it only takes a few hours of coding. But other countries might make a huge deal out of breaking your code like they're doing something special. Why give em that right to brag? Just don't encrypt at all.

    4. Re:So what? by Anonymous Coward · · Score: 0

      Just don't encrypt at all.

      Agreed. Broadcast the feed. There should be a bunch of drone TV channels available to the viewing public.

    5. Re:So what? by Anonymous Coward · · Score: 0

      It is not at all reasonable to rewrite an encryption protocol every 2 weeks when people's lives depend on the data being encrypted. The level of rigour required for this would mean that your process overhead would easily chew up more than 2 weeks per release.

    6. Re:So what? by Anonymous Coward · · Score: 0

      Satellite TV streams HD video encrypted. It costs a lot less than the multi-dozen million dollar drones.

    7. Re:So what? by Half-pint+HAL · · Score: 1

      I think what we're really talking about is having a lightweight encryption scheme but changing the key frequently enough that by the time one cypher is broken, the next is in use.

      --
      Got them moderator blues I blieve I walk out the do', With these mod-points I been gettin', I 'most never post no mo'
    8. Re:So what? by Anonymous Coward · · Score: 0

      So what if the video is transmitted in the clear? What does that get you...

      What about recording the feed, registering how the US killed a bunch of civilians, spreading the footage to all news media channels they can get their hands on and then see the US struggle against a propaganda mishap they caused themselves?

      Some have made more with far less.

    9. Re:So what? by Anonymous Coward · · Score: 0

      Latency. Military application.

      Just sayin', you might want to consider that those two things might motivate some design decisions.

    10. Re:So what? by cryptizard · · Score: 1

      Why would you do this? We already have super-fast stream ciphers designed specifically for situations like this. There are no advantages to your method and quite a few disadvantages. Crypto is one of the areas where it is, as a rule of thumb, very bad to roll your own.

    11. Re:So what? by Anonymous Coward · · Score: 0

      (a) http://www.schneier.com/blog/archives/2009/12/intercepting_pr.html
      (b) if (a) is TLDR then:
                  1. previously mentioned signal degredation issues
                  2. KEY MANAGEMENT... rotating keys and getting them into the field is a big issue.
      (c) Suppose you go with GoodNewsJimDotCom's suggestion and use some weak encryption. Then in 6 months the headline is going to be "Government drones easily hacked" and will quote some PhD Asshat saying that "the encryption is so weak my 2 year old can break it."

      This is one of those rare cases when an decision maker in the US is not bowing to the pressure of an embarassing media headline but is in fact doing the right thing. If only we had one of these guys running the city of New York we would have had a consistent decision regarding the NYC Marathon.

    12. Re:So what? by Pinhedd · · Score: 1

      That can be done automatically, there's no need to recompile it. It's still problematic in that it's worthless if the downstream link can't be locked. Some sort of unencrypted marker is necessary

    13. Re:So what? by Anonymous Coward · · Score: 0

      I think we're talking about non-cryptographers designing cryptosystems. Which is why I was ignoring the whole mess...

  30. The art of war by Anonymous Coward · · Score: 1

    It is probably done to strike fear into those who are thinking of joining or feel the effort is worth it, when they know at anytime there is a drone waiting to kill them. Maybe after a few years they will encrypt some of the video feeds and intentionally leave others without encryption. Not sure why this is a big deal or even worth reporting. The US is fully aware of how tech savvy the middle east is, they have some of the best hackers, so if you have a silly notion that they are dumb neanderthal like people you are arrogant.

    It would be more interesting to find out if the domestic (those being used intentionally to spy on US citizens or whatever else there evil minds decide to do) drones video feeds are encrypted.

    I say it is not a big deal because 60% of war is all about mind games. Either getting your troops to rally and conquer, or you demoralize the enemy not with a body count but with fear.

    Brings up other question!! Why is the US fucking around allowing them to live? Why aren't these attacks being carried out on the training camps, and why are they not destroying targets when they encounter them? I guess the do not want to end this, or at least fracture it, making it somewhat easier for allied forces, or the countries own military/police force to manage the remaining small groups, seems like the US want to continue to prolong terrorism.

    The Taliban is restructuring into more of a policing group, they even allow and print there own newspaper, blending in with everyone else, and trying to eliminate there old testament (if you will) of death, destruction, censorship, and ridding oneself of modern life. To a more open, and commonly shared view of mainstream Muslims. PBS and Frontline has a video on this new Taliban.

    1. Re:The art of war by Anonymous Coward · · Score: 0

      I will add, and do not be mistaken, the US and other allies do have spies within these groups, add to that all the surveillance, satellites, spies, drones, and the other spy equipment they have, this should not be as difficult as there making it to be.

  31. Return to Coordinates Zero, Zero, Zero by Anonymous Coward · · Score: 0

    Remember the introduction to the Borg? Imagine while we think of broadcasting false aerial photos to make baddies flee from their outhouses, some smart kid on the other side comes up with a gadget to "return to sender" all this love.

  32. Re:Editor Fail by Elbereth · · Score: 1

    Slashdot has always been like this. In fact, things have arguably gotten better, as hard as that is to believe. Back in the early days, there was quite a bit of outcry over the incredibly lazy editing and numerous dupes. CmdrTaco's response? That amateurish nonsense was part of the charm of the site, and he steadfastly refused address those concerns (or pretty much any other complaints or feature requests, for that matter). Now that he's finally gone, we might see the sight getting a little more professional, but I kind of doubt it. The remaining editors are probably just as philosophically opposed to looking professional (and doing work). Making it to the point where the site is even halfway presentable is quite amazing, and I suppose we should be thankful that anything at all on this site works, given its history.

    Still, linking to outright spam sites is a new low, even for Slashdot. However, Slashdot has been linking to pointless blogspam for years and years, which is only marginally better. And that's not even counting the slashvertisements...

  33. "Holy %$&^!" by Anonymous Coward · · Score: 0

    "Holy %$&^! Achmed, look! We're live on Drone TV! Look, there it is. Hi Mom!"

  34. True Story by Anonymous Coward · · Score: 3, Informative

    I was deployed in Afghanistan in 2010, had a bunch of prototype "advanced" receiver equipment that I was volentold to test. When I asked how I'm supposed to load keys into the decoder, "Oh you don't need that" Confused, I looked in the unit to see the keyfiles empty. Somehow the unit still worked. After playing with the equipment, even in-theater, our drones were broadcasting completely in the clear on UHF. Whenever there was one overhead, I could simply fire up this heavy POS attached to my kit, and watch us on the ground walk around, (Or whatever female medic on one of the local FOBs the UAV operator was stalking)

    Actually most of the time, the UAV was watching the chicks on the big FOB.. Yeah.

    1. Re:True Story by Anonymous Coward · · Score: 0

      If the operators are spending their time looking at your own troops instead of over the next bound you've got more issues then unencrypted video.

      UAVs are used for targeting and soldier SA. I don't need to see that Pte. Jimmy is laying down fire. The leader on the ground has that covered. I just need to see WHY should I be placing said Pte. to the North to laydown cover. The enemy should not being seeing my own positions on unencrypted feed, and if he's seeing his own he better watch out ;) ...

      Then again, that might be original intent(war fighting) and the current usage (spying) butting heads...

  35. Re:Editor Fail by SomePgmr · · Score: 2

    I've been saying for a while that there should be something like version control on the summaries. Maybe just show a "diff" link underneath and last edited hh:mm.

  36. Good Campaign Advert by Anonymous Coward · · Score: 0

    These videos would make a wonderful advertisement for Ron Paul's 2016 campaign.

  37. Pardon my ignorance but... by joelito_pr · · Score: 0

    Would something similar to an ssh tunnel for the video signal suffice?

  38. Re:Spaceballs: When will then be now? Soon. by Anonymous Coward · · Score: 0

    We have identified their location, it's the moon of vega. Set a course and prepare for our arrival! By high noon tomorrow, they will be our prisoners!

  39. Breach of Privacy! by krashnburn200 · · Score: 3, Insightful

    Almost as bad as if they had revealed the number of Americans they spied on.

    1. Re:Breach of Privacy! by Anonymous Coward · · Score: 0

      Almost as bad as if they had revealed the number of Americans they spied on.

      The public is protected, not spied on. Countries are freed, not attacked.

    2. Re:Breach of Privacy! by scarboni888 · · Score: 3, Insightful

      We've always been at war with Eurasia.

      Freedom is slavery.

      Weakness is strength.

  40. You misunderstand by backslashdot · · Score: 5, Insightful

    You misunderstand. Pinhedd is saying that with an unencrypted signal .. unlike a digital encrypted signal .. if the signal is weak and lossy you can still see usable information.. it may have image noise .. but you'll be able to make out rough outlines. But if the signal is encrypted .. with most forms of encryption you either get a perfect imagery or nothing. Either you will see a clear image or random total image noise. If you make the signal more resilient to noise, the weaker the encryption quality. This also means you lose out on range too since you need a clear strong signal.

    We need better ways to encrypt.

    1. Re:You misunderstand by fustakrakich · · Score: 2

      We need better ways to encrypt.

      We need better defense against drones... For once, think of the children

      --
      “He’s not deformed, he’s just drunk!”
    2. Re:You misunderstand by drinkypoo · · Score: 0

      Nobody cares what he's saying, it's a lot of shit. That sort of thing was true with analog but it is not at all true with digital. It doesn't matter if it's encrypted or not, any lost data and you throw away the entire packet.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    3. Re:You misunderstand by mysidia · · Score: 4, Insightful

      Use a reliable strongly encrypted side-channel for controlling crypto of the primary channel.

      Use a "one-time pad" for the video channel used as a "multi-time pad instead", XOR each block by a random value preloaded on both sender and receiver, each block also XOR'ed by a value negotiated over an encrypted control channel protected with a shared key, pick a new XOR value every 10 - 20 seconds to transmit over the encrypted channel, for the next N seconds of video, and a number of One time PAD bits to skip in the transmission, also transmit a value indicating a pattern for a certain number of 'extra' bits of noise or false signal to be included --- possibly a FALSE unencrypted video stream transmitted alongside the real one.

      Include enough "one time pad" / random data stored on a memory card, for 18 - 24 hours of video, then recycle the pad.

      One time pads are resilient against 'noise' because they result in the same number of bits noise in the output.

      The non-sophisticated adversaries are not likely to defeat even an imperfect implementation. Strictly speaking, any reuse or multiple use of a one time pad makes the stream immediately decipherable by a potential adversary, who has successfully recorded enough ciphertext encoded with the same pad bits, in that they can determine parts of the one time pad.

      The possible range of original plaintext for video are much larger than readable human language -- any arbitrary value. Even with simple 'scramble every bit by XORing it with a fixed value' will be extremely tough for unsophisticated adversaries, trying lots of XOR values to decrypt is easy -- ANALYZING the output of every value that you try, requires an adversary to have some serious computer vision technology, to decide if the output of each attempted value is the video stream being searched for or not.

      However, 'skipping' a certain number of pad bits, for every transmission, introduces unpredictability, and means only a proportion of bits in a frame might be reused, that requires an adversary not only have more than 48hours recorded data but also conduct complex difficult matching, in the process of trying to figure out which bits might be reused --- only a percentage of bits in the transmission may be reused, and by the time they have conducted the search, the drone's mission is done.

      XOR'ing every block over a period of time by the same reference block, is also immediately decipherable by an adversary, who can conduct an analysis to figure out what the XOR block is.

      However, combining XOR with a "one time" or "multi use" pad, significantly complicates the process of attempting to figure out the XOR key. No analysis of that is possible without first figuring out the random pad data of a block.

      And the simple / militant adversaries, are not likely to break any level of encryption. Or at least, if they do, by the time they were able to decode the video stream: again, the mission will already be over by the time they get it.

      And they are in no better position to decode the next video stream (assuming new keys and random pads are loaded on every drone, before its next mission).

    4. Re:You misunderstand by rtfa-troll · · Score: 1

      any lost data and you throw away the entire packet.

      There are plenty of techniques which mean that you can recover from bit errors even in digital signals. Look up e.g. "forward error correction". Fortunately these techniques work on both encrypted and unencrypted systems.

      --
      =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
    5. Re:You misunderstand by Anonymous Coward · · Score: 0

      All we really need is a simple scrambling scheme that can be changed per flight, or that changes on a timestamp. If it takes them a few hours to get the video sorted out, we're already there and gone.

    6. Re:You misunderstand by Anonymous Coward · · Score: 0

      If you take a secure block cipher and put it in CTR mode, then it is secure and robust to line noise - only the particular bits that were flipped in the encrypted signal will be incorrectly decrypted.

    7. Re:You misunderstand by budgenator · · Score: 1

      I do not understand why an encrypted digital signal would be less robust than an unecrypted digital stream; unless your implying that the unencrypted stream is also analog.

      --
      Apocalypse Cancelled, Sorry, No Ticket Refunds
    8. Re:You misunderstand by Anonymous Coward · · Score: 0

      This is a common misconception. The specific concern here stems from chained-block-cipher and similar types of encryption schemes where the decryption of a specific block of data relies on the correct decryption of the previous block. When one bit or one packet is in error (after all FEC has been applied), these schemes would result in corruption of the remaining data stream. Thus any data loss and you throw away all future packets as well.

      Compression methods can also have a similar issue if they send only the differences between two frames. This is seen on some TV formats where blocks smear around the screen -- the receiver doesn't know what the block was (due to errors), but it knows where it moved (the only information in following packets), and tries to do the best it can.

      Of lesser importance, if there are uncorrectable bit errors within a packet, it could still be used. The results would degrade the video in some way. If the packet is dropped, the video degradation might be more severe. But with encryption, an incorrect bit is designed to have an an affect on several other bits. This forces dropped packets instead of just single bit errors.

    9. Re:You misunderstand by Anonymous Coward · · Score: 0

      This is false. Not all encryption is authenticated. Just need to pick the right cipher suite.

    10. Re:You misunderstand by BetterSense · · Score: 1

      Interesting post. This reiterates a principle of cryptography: how much do you need? For a sports results that will be publicly announced in 48 hours, encryption that takes a week to break might be plenty. For a trade secret that won't be of any use in a year, encryption that takes 5 years to break might be plenty. For a predator video stream, even minutes or hours might be vastly better than nothing.

  41. Look ma! by Anonymous Coward · · Score: 0

    Look ma, no hands!

  42. Solution by Anonymous Coward · · Score: 0

    Is the navigation commands also sent "in the clear"? I would think the military would of made sure not just anyone could tell a drone where to go - seems if that's the case, just use the same encryption for the video. No fuss, no second list of codes or new launch procedures to worry about, just make the change in the drone software and the base side software. Updated base side hardware could then operate any drone, updated or not, and set updated drones to check the version of the base side software and fallback to unencrypted video if not supported. This is the army, things should work no matter what, and this accomplishes that without changing anything in current deployment procedures. Schedule the update for the next hardware maintenance, problem solved.

  43. just before impact by kenorland · · Score: 1

    Hey, look at this, Ali, you're on TV!

  44. This can be solved by coder111 · · Score: 1

    Add redundancy (something like par2), transmit more information- well, this requires faster links. Then you can recover more frames. Don't encrypt entire monolythic stream, encrypt each 10 second chunk of video separately (or something similar). If one chunk gets garbled and unecryptable, you can still see others. If you have two way link, you can monitor link quality and adjust the amount of recovery/redundant information sent. Or adjust resolution/quality to lower the amount of information sent.

    Anyway, with some research and experimentation this can be made to work well encrypted.

    --Coder

    1. Re:This can be solved by Anonymous Coward · · Score: 0

      That's the trade off between strong encryption (should look like noise aka a lack of information), and error correction (redundant information).

    2. Re:This can be solved by Anonymous Coward · · Score: 0

      Bullshit. Just because you encapsulate the encrypted stream in error-correction frames it doesn't mean the encryption is any weaker.

  45. OMG by Poorcku · · Score: 3, Funny

    Unencrpyted and barely legal! LOL

    --
    I take my children to see Madonna(..), but I never for once ever thought I was in the same business.Chris Rea.
  46. When you have that much military strength by scarboni888 · · Score: 1

    you don't need to encrypt your stuff.

  47. Re:Spaceballs: When will then be now? Soon. by Anonymous Coward · · Score: 0

    So do you really want to pay a major defense contractor to add encryption to a tiny dronw, increasing botht he ddesign and production cost, and the challenges for the folks using it? We don't do half-assed encryption. We super-insane NSA encryption or none. The super-insane crypto has an attitude problem and disables itself after a few days to prevent the system from using old (potentially compromised) crypto.

    The comms links, however, are encrypted to prevent spoofing. Those, since the UAV and the operator see eachother before flight, work, since it can get new crypto from the operator.

  48. Re:Spaceballs: When will then be now? Soon. by aix+tom · · Score: 2

    I heard rumours they also tried cheaper Hollywood-style encryption, but they had to many casualties because the drone wasn't operational fast enough.

    They had to watch too many FBI warnings before they could start it up.

  49. False by baffled · · Score: 1

    Sorry, this is vaguely true, but dead wrong in practice. Any block of unencrypted data received successfully could have been encrypted byte-for-byte. Only key negotiation requires additional data, and this is a truly miniscule amount relative to a video feed of any resolution (assuming a reasonable renegotiation period)

    1. Re:False by baffled · · Score: 2

      Thinking about it more, key negotiation shouldn't even be necessary.

      You need a pre-determined set of sufficiently-large encryption keys on a removable module of sorts, like a USB key. Produce the key-set USB-key in pairs, for transmitter & receiver. Encryption cycles through the key-set at a predetermined schedule. Timing is managed with an internal clock. Imprecision of timing at change-over intervals is handled by simple dual-decryption attempts, and determination of correct sequence by CRC or some such block header data. This is basic smut. Why am I even bothering..

    2. Re:False by Pinhedd · · Score: 1

      That's called a stream cipher, which I mentioned in my post.

  50. Re:Editor Fail by Anonymous Coward · · Score: 0

    Yes, when it spews leftard garbage left and right Slashdot is da shit. Now, a solitary Glenn Beck link? OMG it's the end of Slashdot!!!!!!!!!!!!!!!!!!!!!! RUN FOR THE HILLS!!!!!

  51. SSH Tunnel by Anonymous Coward · · Score: 0

    Why not use a SSH tunnel to secure the data being channeled to the pilots?

    1. Re:SSH Tunnel by Anonymous Coward · · Score: 0

      Because a one-way radio link is not suitable for TCP/IP, which ssh runs on?

      Seriously man, think for like 3 seconds before you type.

  52. nicetjore by Anonymous Coward · · Score: 0

    ummmm very good www.film4y.blogspot.com

  53. 2 drones, 1 decoy? by Anonymous Coward · · Score: 0

    Hah, get a look at this, they're nowhere near us. Relax guys, put down that portable SAM....kaaabooom!

  54. Do they worry? I don't think so... by Anonymous Coward · · Score: 0

    A decade or so ago it was even worse.
    There was a continuous feed of 4 of those drone video streams on a Telstar satellite at 37.5 degrees west.
    All over Europe (and maybe also on the US Eastcoast, I don't remember the actual footprint details) it was
    possible to watch a live stream of drones hovering over ex-Yugoslavia with a standard DVB-S receiver, and
    a 2-3ft dish pointed at that satellite.
    I was amazed when I first installed a steerable dish, scanned the different satellites for programmes and
    stumbled upon that (of course not knowing what it was at first).

    However, another hobbyist viewer spoiled it by bringing the matter to the attention of the BBC who aired an
    item on the evening news, taken over by lots of other news programmes. Then, they put some form of
    encryption on the satellite transmission (which was a relay of the signal received locally on the ground, not
    an immediate relay from the drones themselves).

    But apparently it was only fixed for the satellite stream, not for the drones.

  55. Re:Spaceballs: When will then be now? Soon. by elashish14 · · Score: 1

    That depends on whether their Schwartz is as big as ours.

    --
    I have left slashdot and am now on Soylent News. FUCK YOU DICE.
  56. It's all a matter of who you consider an enemy by Anonymous Coward · · Score: 0

    The US military obviously does not care if the Taliban are watching drone footage. Now if drone footage was being viewed by US citizens the signals would all be encrypted within a month. Shows you just who our own government considers its true enemies doesn't it.

  57. If they encrypt it by Anonymous Coward · · Score: 0

    If they encrypt it, then the bad guys will just get it from the Pirate Bay.

  58. Back when this was happening 10+ years ago by dbIII · · Score: 1

    Back when this was happening from piloted aircraft broadcasting video streams 10+ years ago some speculation here was:
    1/ Encryption gets in the way of any military unit that wants to see it so if it's for general distribution don't encrypt.
    2/ None of the stuff shown in the videos belongs to the US and their allies so it often won't matter if somebody else gets it.

    There's plenty of counterarguments and edge cases, (please don't try any on me since I tunnel just about everything through ssh as a matter of habit so you'll be preaching to the converted), but I can see those two points that came up in earlier discussions have some validity.

  59. Magical thinking by dbIII · · Score: 1

    It's a "needle in a haystack" situation so the "Why is the US fucking around allowing them to live?" question is answered by the problem that they have to be found first, and there is no magic to find them quickly, only hard (and deadly) work.

  60. Re:Narrow Minded thinking by Anonymous Coward · · Score: 0

    The US is paying off locals, even threatening locals with imprisonment for being terrorists (when they are not) to become spies, who sole purpose is to find and join terrorist groups, rely what they know back to the US. Not to mention all the other Intelligence/satellite/and other whys to track or spy in on targets, add to that the other countries outside the ones claiming to be helping out. The "needle in a haystack" is more like a 10' knitting needle.

    The sad part are the men and women who are getting killed, and even they ask the same question as the above statement. I find it hard to believe that once they find a target they somehow "lose" it, with all the things at there disposal.

    The camps are being reported by the spies or informants.

  61. Re:Narrow Minded thinking by dbIII · · Score: 1

    So then, how do you find a reliable spy for sale instead of one that is just looking for a buck or wants to turn in their personal enemies?
    As I said, needle in a haystack, and it's a pity I have to go as far as stating the incredibly obvious to cure that magical thinking.

  62. Why by Anonymous Coward · · Score: 0

    "Broadcast" is the wrong word. No doubt these signals are intended to be received by US satellites. The drones would probably have a vertical antenna with an omnidirectional pattern because a dish would be too large and would need to be aimed. The omni antenna would allow reception from any direction but the interceptor would still need to be within line of sight range and have a satellite type receiver on the right band with appropriate filtering and demodulation. This is not impossible, but it is not that easy either, and when the drone moves away the signal drops out.

    My guess is that while it can be done, it is too much trouble for the small gain involved. Better to just let the Yankees think we do it all the time. Google "RC FPV" and see what our hobbyists are doing - mostly with stuff that is made in China.