Slashdot Mirror


US Government Probes Airplane Vulnerabilities, Says Airline Hack Is 'Only a Matter of Time' (vice.com)

Joseph Cox, writing for Motherboard: U.S. government researchers believe it is only a matter of time before a cybersecurity breach on an airline occurs, according to government documents obtained by Motherboard. The comment was included in a recent presentation talking about efforts to uncover vulnerabilities in widely used commercial aircraft, building on research in which a Department of Homeland Security (DHS) team successfully remotely hacked a Boeing 737.

The documents, which include internal presentations and risk assessments, indicate researchers working on behalf of the DHS may have already conducted another test against an aircraft. They also show what the US government anticipates would happen after an aircraft hack, and how planes still in use have little or no cybersecurity protections in place.

"Potential of catastrophic disaster is inherently greater in an airborne vehicle," a section of a presentation dated this year from the Pacific Northwest National Laboratory (PNNL), a Department of Energy government research laboratory, reads. Those particular slides are focused on PNNL's findings around aviation cybersecurity. "A matter of time before a cyber security breach on an airline occurs," the document adds.

65 of 125 comments (clear)

  1. Just a matter of time... by The+Fat+Bastard · · Score: 1

    Before someone think they're flying a toy drone to accidentally fly a real airplane.

  2. 737? by b0s0z0ku · · Score: 1

    Isn't a 737 mostly hydraulic flight controls with manual reversion? Hacking the flight control systems on such an aircraft shouldn't be possible. Same goes for other mostly-manual aircraft like MD-80/90 and the CRJ/Dash 8 series.

    True FBW systems should also be air-gapped from anything like in-flight WiFi and entertainment. Ideally running a RTOS with programs stored in ROM that's only updated by either (1) removing a card and installing a new out, or (2) using a serial programmer directly connected to the computer systems.

    If they're talking about dispatch systems or something like that being hacked, it will be expensive, annoying, but unlikely to be lethal.

    1. Re:737? by iggymanz · · Score: 1

      they all have autopilot that can work those hydraulic controls, the autopilot is a hydraulic system that the flight management computer directs

    2. Re:737? by b0s0z0ku · · Score: 1

      Autopilot can be disabled by tripping a breaker or two, then the aircraft is back to manual/hydraulic flight.

    3. Re:737? by w3woody · · Score: 2

      Autopilot systems are generally designed to allow the pilot--with sufficient force--to override the autopilot motors in the event the autopilot acts up.

      (I once flew a DA-40 whose autopilot decided a hard left turn was the right answer--it took a little upper-body strength, but not a lot, to force the plane from flipping over while I reached for the breaker to turn off the autopilot. Same principle applies in large aircraft like 737s, and that's by design.)

    4. Re:737? by b0s0z0ku · · Score: 1

      The fun part is when there's only a side-stick that controls the autopilot computers via variable resistors, like in the Scarebus 320 and up. No direct connection to the flight controls. 777/787 are fly-by-wire, but with a control yoke -- not sure if there are backup manual controls.

    5. Re:737? by b0s0z0ku · · Score: 2

      Are you talking about UAL-262, a DC-10 where the failure of the rear engine took out all three hydraulic systems? It still landed (sort of, in two pieces, in a farmers' field) because the pilots could use the throttles to control the aircraft.

    6. Re:737? by AHuxley · · Score: 1

      Think of this https://en.wikipedia.org/wiki/... but wide open to todays internet.

      --
      Domestic spying is now "Benign Information Gathering"
    7. Re:737? by aaarrrgggh · · Score: 1

      But the control yoke on a 777 doesn't have direct control of surfaces; it just has a reactive force motor that you work against, no?

    8. Re:737? by iggymanz · · Score: 1

      and suppose part of the nefarious plan is to incapacitate the pilot, which can be done by subverting certain systems?

    9. Re:737? by iggymanz · · Score: 1

      "you're not thinking 4th dimensionally, Marty" -- Dr. Brown

      but suppose part of the compromising of systems also renders the pilot unconscious or immobile before he can override AP?

    10. Re:737? by PPH · · Score: 2

      No fly by wire system is updateable

      Not true. Having worked at Boeing, I've seen numerous systems updated by plugging a laptop into the controller and uploading a new s/w version. With some, you do have to pull the box, open a cover and access a port (JTAG). But at the other end of the spectrum, 787 systems can be accessed over the on-board network.

      Boeing applied for and received approval from the FAA to allow connection between passenger entertainment and avionics networks on the 787. Now all that one needs to do is to upload a malicious app into the video and game processor. One third party vendor has already sued to gain permission to sell their entertainment apps directly to airlines to be run on onboard systems. So, we are practically there.

      --
      Have gnu, will travel.
    11. Re: 737? by PPH · · Score: 2

      Not really. The 'firewall' is an enhancement to Ethernet that checks packet sources against a list of 'approved' hardware MAC addresses. But if you cat trick the passenger entertainment equipment into running Evil applications, you are in the system talking to the avionics.

      --
      Have gnu, will travel.
  3. Re:Commercial aircraft connected to the Internet? by w3woody · · Score: 4, Interesting

    So passengers can use WiFi while on board. Duh.

    The real question is "why is the cockpit navigational equipment connected to the Internet," and the answer is "it isn't." Nor is the autopilot on most designs.

  4. Re:Commercial aircraft connected to the Internet? by b0s0z0ku · · Score: 1

    It's not clear that they are. The aircraft in question (737 or 757, depending on whom you ask) is essentially a pre-Internet design. This isn't to say that (say) a sufficiently strong radio signal can't confuse things like GPS and other navigation aids. Possibly also mess around with things like digital engine controls.

  5. Homebrew by GrBear · · Score: 1

    Of course the US Gov't knows this is possible.. they likely have a cache of aircraft hacks in their back pocket already ready to use on 'bad actors', foreign and domestic.

  6. Forseen... by unique_parrot · · Score: 1

    ...https://www.heise.de/imgs/18/1/2/6/3/5/5/9/gross-163291294902e030.jpeg

    1. Re:Forseen... by angel'o'sphere · · Score: 1

      I remember that one, quite funny :D

      --
      Cost free eBook I read (by iBook/Kobo/Amazon/ObookO/Gutenberg etc.): "The Green Odyssey" by Philip Jose Farmer.
    2. Re:Forseen... by unique_parrot · · Score: 2

      Future is promising https://imgur.com/gallery/AN8X... :D

  7. Re:Commercial aircraft connected to the Internet? by iggymanz · · Score: 2

    who said the attack was via internet? planes act on received radio signals, have internal signal buses, etc.

  8. *sigh* The vulnerabilities are not what we think. by w3woody · · Score: 5, Interesting

    First, all pilots are trained to fly the airplane manually, with all air surfaces controlled by hydraulics on most aircraft. Electric motors are also connected to these hydraulics to allow the autopilot to fly the airplane, but as a convenience. Pilots are supposed to know how to fly the airplane without the use of the autopilot and by using radio signals received by VORs (radio-directional beacons) in order to navigate using a paper chart (or an iPad with a chart on it).

    That Air France Flight 447 went down was not due to "poor training" or because of a lack of ability to detect a cyber-attack, but because the copilot in that airplane panicked and pulled when he should have pushed. (Frankly his mistake was a rookie mistake that student pilots are supposed to unlearn within the first 20 hours of training.)

    Now are there attack vectors which can be used to sabotage an airplane? Absolutely--but they're not the "I plugged the laptop into the network and hacked the airplane's firewall" variety, since most aircraft (certainly the 737) run parallel networks--with the avionics physically disconnected from the entertainment and WiFi systems used by the passengers.

    Attack vectors would be for a passenger or someone on the ground to jam and spoof GPS signals, and to jam and spoof directional VOR and ILS transmissions, to fool the navigation equipment on the aircraft to think it's somewhere it's not. Another attack vector is jamming and overriding the air traffic voice and text communications by someone spoofing air traffic control.

    The problem is exacerbated by NextGen, where aircraft broadcast their GPS location (rather than their location being detected by ground-based radar), so it makes it harder for Air Traffic Control (who watches all commercial aircraft like a hawk, alerting pilots if they deviate from their flight plan) to determine if someone has gone off course. And of course the problem is made worse by inattentive pilots who often sit around the cockpit bored when they are supposed to be monitoring the navigational equipment to make sure it looks correct. (Remember when two pilots flew off course because both of them fell asleep at the wheel?)

    But onboard cyber-attacks? Puh-lease...

    The solution to all of this is the solution first taught to student pilots flying their first Cessna 172: fly the damned plane. Left hand on the yoke, right hand on the throttles, both feet on the rudders, and do that stick-and-yoke thing so many of them have forgotten because they think the computer is the best pilot in the cockpit.

    If I had my way, the first thing I'd mandate is that all commercial pilots--including those flying the largest A-380 airplanes--spend at least a few hours a month flying the same Cessna 172 they learned in. That way they remain viscerally connected to flying by stick and yoke--and when the computer acts up, as it always seems to do at the worst moment in the cockpit, you can still look out the window, see that piece of cement in the distance, and put the airplane down where it's supposed to go.

  9. Huh? by sheph · · Score: 1

    This seems like fear mongering, and potentially government agency funding generation. If this is as large of an issue as they think it is, why hasn't it been happening up til now? Government is always behind the curve. This sounds like a solution looking for a problem.

    --
    I don't believe in karma, I just call it like I see it.
  10. Obligatory DEFCON Talk by xxxJonBoyxxx · · Score: 3, Informative

    Obligatory DEFCON Talk
    https://www.defcon.org/images/defcon-22/dc-22-presentations/Polstra/DEFCON-22-Phil-Polstra-Cyber-hijacking-Airplanes-Truth-or-Fiction-Updated.pdf

    I thought this was 23 but it was actually 22. Getting old.

  11. Re:*sigh* The vulnerabilities are not what we thin by DesertNomad · · Score: 1

    That Air France Flight 447 went down was not due to "poor training" or because of a lack of ability to detect a cyber-attack, but because the copilot in that airplane panicked and pulled when he should have pushed. (Frankly his mistake was a rookie mistake that student pilots are supposed to unlearn within the first 20 hours of training.)

    AF447 was a "rookie" problem? No.

    From the WTF Wikipedia:

    "There were three pilots in the aircrew:[23]

            The captain, 58-year-old Marc Dubois (PNF-Pilot Not Flying)[24] had joined Air France (at the time, Air Inter) in February 1988 and had 10,988 flying hours, of which 6,258 were as captain, including 1,700 hours on the Airbus A330; had carried out 16 rotations in the South America sector since he arrived in the A330/A340 division in 2007.
            The first officer, co-pilot in left seat, 37-year-old David Robert (PNF-Pilot Not Flying) had joined Air France in July 1998 and had 6,547 flying hours, of which 4,479 hours were on the Airbus A330; had carried out 39 rotations in the South America sector since he arrived in the A330/A340 division in 2002. Robert had graduated from École Nationale de l'Aviation Civile (ENAC), one of the elite Grandes Écoles, and had transitioned from a pilot to a management job at the airline's operations center. He served as a pilot on this flight in order to maintain his flying credentials.[25]
            The first officer, co-pilot in right seat, 32-year-old Pierre-Cédric Bonin (PF-Pilot Flying) had joined Air France in October 2003 and had 2,936 flight hours, of which 807 hours were on the Airbus A330; had carried out five rotations in the South America sector since arriving in the A330/A340 division in 2008."

    From this, it is certainly not apparent that there were any "rookies" in the cockpit. It is far more likely that as autopilot systems become more sophisticated, and are able to fine-tune the flight performance more closely against the allowable envelope, that there becomes less margin for humans to take over when the autopilot gives up.

    While it isn't obvious that some kind network engineer has connected passenger entertainment systems to avionics systems, this could be a real hazard. As you point out, that's not the only attack vector possible.

    Your desire for pilots to fly the plane manually is laudable, but planes have become highly sophisticated beasties. Some (many?) aren't particularly aerodynamic without lots of autonomous feedback. Incredible performance is available, but at or beyond the edge of human hand-eye-seat of pants ability. I do not believe that it's possible to stop the rising tide of autonomy and I personally don't think that these flight deck advances are bad "in the long run".

    Spoofing the inputs to the flight deck is very doable, requiring computing skill and jamming abilities. Like AF447, where spoofing was unintentional but generated very real flight disturbances, it's a way to upset a metastable condition and create disaster.

  12. Re:*sigh* The vulnerabilities are not what we thin by w3woody · · Score: 4, Interesting

    I did not say the pilots were rookies. I said the copilot made a rookie mistake:

    I notice you didn't quote the relevant part of the Wikipedia article:

    In response to the stall, first officer Robert took over control and pushed his control stick forward to lower the nose and recover from the stall; however, Bonin was still pulling his control stick back, lifting the nose further up. The inputs cancelled each other out.

    Rookie mistake. (1) You always clearly announce who is in control of the aircraft. Generally this is announced by one pilot saying "my controls", and the other responding "your controls." Two pilots trying to do the opposite action is rookie mistake number 1.

    (1) When the aircraft is in a stall, it's because insufficient air is flowing over the wing, and the wing cannot provide lift. This is solved by pushing the nose down, allowing the aircraft to regain airspeed. Bonin, the co-pilot, was pulling the stick back, which can only be read as that he panicked, and forgot training he should have learned while learning how to recover from stalls waaaaaay back when he first started learning to fly and got his basic pilots certificate. The pilot pulling when he should push is rookie mistake number 2.

    On top of all of this, your assertion:

    Your desire for pilots to fly the plane manually is laudable, but planes have become highly sophisticated beasties.

    Are you asserting flying is too hard for humans? Because that would worry the fuck out of me. Or are you asserting flying commercial jets is hard? Because there I'd completely agree with you; the most complex thing I've flown is a single-prop high-performance retractible out of a Class C airport in IFR, and the idea of flying a jet is intimidating as hell. But then, that's why the guys who fly commercial jets get additional training: to learn how to keep ahead of these highly sophisticated beasties.

  13. Re:*sigh* The vulnerabilities are not what we thin by Registered+Coward+v2 · · Score: 1

    The solution to all of this is the solution first taught to student pilots flying their first Cessna 172: fly the damned plane. Left hand on the yoke, right hand on the throttles, both feet on the rudders, and do that stick-and-yoke thing so many of them have forgotten because they think the computer is the best pilot in the cockpit.

    If I had my way, the first thing I'd mandate is that all commercial pilots--including those flying the largest A-380 airplanes--spend at least a few hours a month flying the same Cessna 172 they learned in. That way they remain viscerally connected to flying by stick and yoke--and when the computer acts up, as it always seems to do at the worst moment in the cockpit, you can still look out the window, see that piece of cement in the distance, and put the airplane down where it's supposed to go.

    Great points, and when in the 172 (or Cherokee) cover up the instruments and let them do some real flying. The problem with all the advanced avionics (or instrumentation in many industries) is we put to much faith in the instruments and have lot that fingerspitzengefuehl that tells us something is not quite right and we need to do something. Information overload can be an issue as well as we bombard pilots or operators with a lot of data they then try to process, as well as how the data is presented. It's not just aviation, TMI for example was caused by operators relying on faulty information and thus not properly diagnosing a minor problem that resulted in an much less desirable outcome.

    --
    I'm a consultant - I convert gibberish into cash-flow.
  14. Re:*sigh* The vulnerabilities are not what we thin by w3woody · · Score: 5, Informative

    How the hell is that different from most company's mandates that pilots require 3 hand flown landings per month?

    The point of my recommendation is to connect the pilot back to all of the stick and rudder skills, including proficiency in handling stalls as well as smooth stick and rudder operations. The corporate landing mandate can be handled by taking over on the final approach, but I want the guy to be able to hand fly the airplane and demonstrate proficiency in stick and rudder skill (including shit you don't want to do with passengers, such as side slips and power-on and power-off stalls).

    Remember, the guy who managed to put down the Gimli Glider (Air Canada Flight 143) happened to also be an experienced glider pilot, so by accident he happened to be in the right place at the right time.

    I don't like luck.

  15. Re:*sigh* The vulnerabilities are not what we thin by MountainLogic · · Score: 1

    W3Woody,
    All good points as GPS is such a weak signal it does offer lots of opportunity for mischief. There is also the risk of someone with physical access reprogramming the avionics - think cleaning crew. Change one byte on a scaling coefficient on a fuel calculation then 1000 miles from land you are suddenly running on fumes. There are also multiple RF data links to the ground, but most of them are relatively low band width. Of course there is the whole electronic flight bag used to replace maps, that are basically just PCs and ripe to get hacked - don't connect to the plane, but still pilots base many decisions on them. The Internet connection everyone thinks about in the pax cabin is air-gaped from the avionics except for a one-way serial connection feeding nav data from the avionics to the IFE (In Flight Entertainment) to display the you are here map.

  16. Rick-roll them by jfdavis668 · · Score: 3, Funny

    I'm going to hack into the plane's system, and have the PA system play "Never gonna give you up" on repeat for the entire remainder of the flight.

  17. Re:Commercial aircraft connected to the Internet? by sarren1901 · · Score: 1

    Internet isn't required if someone that's suppose to be maintaining the plane decides to tamper with it. Someone could hack in and leave a nasty time bomb for later or when certain conditions are met. Doesn't have to be connected to any kind of network at all.

  18. Worst /. headline ever by rickb928 · · Score: 1

    Is it airlines, or airplanes, or both?

    --
    deleting the extra space after periods so i can stay relevant, yeah.
  19. Re:Commercial aircraft connected to the Internet? by AHuxley · · Score: 1

    So telcos can sell broadband bandwidth to airlines globally.

    --
    Domestic spying is now "Benign Information Gathering"
  20. EVERYTHING is hackable at the moment by Rick+Schumann · · Score: 1

    All you have to do is read the news to see that. And people give me shit for paying cash for things (reduce exposure to payment system data breaches as much as possible) and why I refuse to own a smartphone (your kitchen collander has fewer holes) or have IoT devices, or have anything to do with social media sites.

  21. Re: Remotely hacked 9/11 by c6gunner · · Score: 1

    Horseshit. The article is pure FUD. Nobody has ever demonstrated a way to remotely control any of the aircraft currently flying without first installing a bunch of new software and hardware. Given the way mission computers and flight controls are designed, it's insanely unlikely that anyone ever will.

  22. Re:*sigh* The vulnerabilities are not what we thin by TigerPlish · · Score: 1

    Pulling back when you should put the nose down a bit is a rookie mistake. But that said, what no one, ever, has ever convinvingly sold me on is an explanation as to WHY ON GOD'S GREEN EARTH did this aircrew on AF 447 drive the airplane, nose-high in a a a stall, all the way from cruise (they were above 30,000) to the sea the whole time.

    I understand that on the airbus the stall horn shuts up when they had the nose hard up and would sound again if they pushed the nose down, but for fuck's sake, .... I just fail to comprehend that one crash. Makes no sense to me.

    It's more than a rookie mistake. And cue the Airbus apologists: I think there's something borked in their philosophy. Now, I'm not an airline pilot so I'll shut the fuck up now, but.. I just don't understand this one wreck. PUT THE BLOODY NOSE DOWN! You had 30,000 ft to do it....

    --
    The "Civilized World" jumped the shark ca. 1973.
  23. Re:*sigh* The vulnerabilities are not what we thin by phantomfive · · Score: 1

    Attack vectors would be for a passenger or someone on the ground to jam and spoof GPS signals,

    This can be done from a laptop on a plane, too, fwiw.

    --
    "First they came for the slanderers and i said nothing."
  24. Re:Commercial aircraft connected to the Internet? by vtcodger · · Score: 1

    GPS satellite spoofing certainly seems technically feasible. Wikipedia even has a paragraph or three on the subject. https://en.wikipedia.org/wiki/.... Of course there is some possibility that an aircraft crew might be capable of recognizing the problem and of navigating without GPS. My understanding is that Charles Lindbergh managed to find Europe without GPS.

    --
    You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey
  25. Re: Remotely hacked 9/11 by Narcocide · · Score: 1

    Before "9/11" anyone would have told you that the US Air Force would have shot down any hijacked commercial planes if it would have saved lives of people in buildings on the ground. The 1 in 365 chance that terrorists would get lucky and pick the one day the entire Air Force is having a picnic was considered "insanely unlikely."

  26. Re:"Let's fly a plane in the ground and blame Russ by Narcocide · · Score: 1

    Thousands of unsecured IP cameras world wide belie your claims.

  27. Re:*sigh* The vulnerabilities are not what we thin by Zontar_Thing_From_Ve · · Score: 2

    That Air France Flight 447 went down was not due to "poor training" or because of a lack of ability to detect a cyber-attack, but because the copilot in that airplane panicked and pulled when he should have pushed. (Frankly his mistake was a rookie mistake that student pilots are supposed to unlearn within the first 20 hours of training.)

    This is a gross oversimplification of what happened. A US pilot and airline safety expert wrote a book on the crash and his conclusion was that the junior co-pilot in charge of the plane reacted exactly as he was trained but there were issues with the training. It's a really complex situation regarding the crash. The pilot would almost certainly not have made the mistake that crashed the plane but he got 1 hour of sleep the night before and took his break early due to being tired. Inexplicably he put the most junior of the 2 co-pilots in charge. There''s been some thought that the senior of the 2 co-pilots would have safely flown through the storm had he been placed in charge. Also, the faulty air speed indicators weren't replaced in Brazil, where I have no doubts that a competent replacement could have been done, because Air France wanted the plane flown to France to do the work there because the French are control freaks to the n-th degree and they don't trust anybody else to do technical work.

    The crash was due to an amazing set of circumstances where EVERY decision made in a long chain of events was wrong starting with some instrument setting failures before the plane even took off. This all enabled the plane to get into alternate law mode, which neither of the 2 co-pilots realized in time had happened. The plane crashed because in alternate law mode the plane allows the pilot to do anything, including things that could crash the plane, and junior co-pilot put the plane into a stall due to failure of his training to account for the situation he actually found himself in. His thinking got screwed up and he pulled up on the stick to try to climb, which actually put the plane into a stall that nobody noticed. There were also some design issues with how Airbus designed the plane's control sticks and audio warnings and the 2 co-pilots failed to fully understand that the Airbus design decisions were odd and had to be accounted for.

  28. Re: Remotely hacked 9/11 by vtcodger · · Score: 1

    I think military aircraft might be more vulnerable than civilian airliners. On a lot of missions, military craft use information/receive orders from external sources while in flight. Plus which, they may be operating in an environment with sophisticated jamming and countermeasures in place. That said, I would assume that the military has taken a few precautions to discourage folks from diverting/hijacking/repurposing their multimillion dollar weapons systems.

    --
    You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey
  29. Re:*sigh* The vulnerabilities are not what we thin by BronsCon · · Score: 1

    they think the computer is the best pilot in the cockpit

    Well, the ones who think that are, most likely, correct.

    --
    APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  30. Re:Commercial aircraft connected to the Internet? by iggymanz · · Score: 1

    it's interesting in that report they say attacks were done from passenger's seats

  31. Re:*sigh* The vulnerabilities are not what we thin by w3woody · · Score: 5, Informative

    This is a gross oversimplification of what happened.

    Well, of course it was a gross oversimplification; I summed up a chain of events and circumstances and training and inputs and actions that can trace their roots back minutes, and even hours, back before the actual crash took place, into two pithy sentences.

    But at the bottom of the stack, the airplane hit the water in a nose-up stall, having held the nose-up stall for several minutes as the plane descended from 30,000 feet to sea level. The plane hit the water in a nose-up stall because the co-pilot was pulling up on the yoke--countermanding the inputs from the pilot, without indicating who was in charge of the airplane. And the airplane maintained a nose-up stall through several minutes because the co-pilot was putting the wrong inputs on the controls, in almost complete contradiction to all the training he received--since there are no slow-speed aircraft attitudes where recovery is achieved by pulling the nose up. Zero. None. The only time you pull the yoke back to recover the aircraft is either (a) if you have an indication that you are going too fast, or (b) you're panicked and are trying to gain altitude. If you have the yoke up and the altimeter is unwinding, the hardest god damned thing in the world to do is the thing that will save your life, the thing the pilot of that aircraft was trying to do but the thing the co-pilot refused to try, is to push the nose down.

    Now how we got to here--that's important. And probably more important than the co-pilot making a rookie mistake--because if we stop with "the co-pilot is an idiot", rather than trying to determine if there is something more we can do to assure greater safety in commercial flight, we've basically thrown up our hands and said "sometimes people die."

    And that is unacceptable.

    (Frankly, by the way, I wish more organizations or corporations thought like the FAA--which, when faced with pilot error, tries to understand why there was pilot error. They try to figure out if it was information overload or improper inputs or inattentiveness or improper training. They try to figure out how we can make flying safe, even with imperfect pilots and imperfect equipment.)

    Now, I had a CFI who once told me that the people he hated the most to give checkrides to were commercial pilots. Because none of these guys have really had to do any real stick-and-rudder work since they first started working for the large commercial airlines. One of the scariest thing he's ever done is to give a particular older pilot--retiring from the airlines and who bought his own little 4 seater prop airplane to continue to tool around in the air--a quick refresher in stalls. Because this guy seemed hell bent on doing exactly the wrong thing when the airplane started to buffet in that prelude to a stall, once nearly putting the aircraft into a fatal spin because he simply didn't know how to use the rudder.

    It's why my wish is for all commercial pilots to spend some time each month in a Cessna 172, practicing things like power-on and power-off stalls.

    Because I honestly and sincerely think if that co-pilot had recent experience with stalls, rather than (as is typical for a lot of those bus drivers) not having done stall work or rudder work for perhaps a decade or more, the 216 people who died aboard Air France 447 would be alive today.

  32. Re: Remotely hacked 9/11 by c6gunner · · Score: 1

    Before "9/11" anyone would have told you that the US Air Force would have shot down any hijacked commercial planes if it would have saved lives of people in buildings on the ground.

    Ans this anyone would have been an idiot with no understanding of the subject. If instead of asking "anyone" you had asked the people who do that work for a living you would have gotten a much different answer.

  33. Re: Remotely hacked 9/11 by c6gunner · · Score: 1

    On a lot of missions, military craft use information/receive orders from external sources while in flight.

    And those systems are completely sepearted from the actual flight controls and mission computers. Source: worked on military aircraft.

    With the most modern aircraft which have the capacity to share targeting data it might be a bit more of an issue in that someone could theoretically feed you invalid data so your weapons hit the wrong target. This is also quite unlikely, but at least plausible. If we ever do find that it's happening we can always turn off that particular capability and go back to doing things the old fashioned way until the vulnerability is patched.

  34. Re:*sigh* The vulnerabilities are not what we thin by Anonymous Coward · · Score: 2, Informative

    On an airbus plane in normal law they are trained that the airplane will not allow them to stall and they can pull back all they like. So when the pilot sees indications that the plane is descending he pulls back, expecting the airplane to do whatever it needs to maintain controlled flight and eventually climb.

    The problem is that when you lose normal law and go into direct law the airplane doesn't have the stall protections so you have to remember to push forward until you get the airspeed.

    The fundamental problem is that because of all the protections built in Airbus airplanes pilots fly the plane differently when in normal law vs when things go bad and they go into direct law.

    Flying in direct law is a 1X10^-9 probability event so when it does happen noone is ready for it.

  35. The Galactica by Trondheim · · Score: 1

    Remember: The Galactica was the only battlestar (Pegasus aside) that survived the Cylon attack because it wasn't networked. Lesson to be learned? :)

  36. Re:*sigh* The vulnerabilities are not what we thin by Richard_at_work · · Score: 2

    Nope, you misunderstood the explanation for the crews reactions.

    Firstly, the aircraft was in a data mismatch situation - it couldn't trust the information it was being given by external sensors, so it hands control back to the crew who have a standard check list for such a situation.

    What the crew should have done was ride throttle and stick, increasing throttle with a slightly nose up attitude until the sensors became trustworthy again.

    What they did was pull back on the stick and slow the aircraft down, giving it very little forward velocity but significant downward velocity - this just confuses matters even more with regard to data.

    During all this, the sensors became trustworthy again, but the aircraft was now in a situation where the crew simply didn't believe the data they were being give, even though it was correct.

    Below a certain forward velocity and high angle of attack, stall warnings on all aircraft cease to sound because it's an insane situation which should never happen - by pushing down on the stick, the crew were actually activating the stall warnings by increasing the airspeed back past the minimum threshold for it sounding, but they were convinced that they were actually achieving the opposite, slowing the aircraft down so the airspeed dropped to the upper threshold for the warning. So they kept the nose up, and induced an aerodynamic stall - exactly what they thought they were avoiding.

    The angle of the airflow over the wings was at more than 35 degrees, which is far beyond that needed for an aerodynamic stall.

    The same year that AF447 crashed due to an airspeed data mismatch, there were over 100 other incidents on Airbus aircraft of the same thing - but only AF447 crashed. All the other crews had no issues with the Airbus approach.

    And Airbuses rate of airspeed errors in this area are almost identical to Boeings year on year - if the crew properly follow their training, it's a non-issue. In whatever aircraft you are flying.

    The data mismatch situation only lasted a minute, but the crew ignored the instruments from the point of autopilot disconnect until impact.

    It's worth noting that the Captain, Marc Dubois, *did* realise what was wrong when Bonin told him "I've been at maximum nose up for a while", but at that point the aircraft was seconds away from impact, and Dubois had only been back in the cockpit for a minute or so - Dubois is heard on the voice recorder saying "no, don't climb!"

    The two co-pilots lost situational awareness and failed to follow guidelines.

  37. Re:*sigh* The vulnerabilities are not what we thin by Shinobi · · Score: 1

    Actually, it has been explained properly: The co-pilots were both utter fucktards who had gone out to a nightclub, drinking alcohol and smoking weed, so their mental state was not the one required for proper high function in a crisis, as shown by the fact that they didn't even try to circumvent the storm. The captain had sleep issues and had gone to take a nap, and came to the cockpit mid-situation, with the two fucktards at the controls.

  38. Re:Commercial aircraft connected to the Internet? by geekmux · · Score: 1

    take a fucking bus/train/other ground transport so you can keep your internet addiction alive

    Those also existed before "before das intertubularz" so according to your reasoning no one should use wi-fi on those modes of transport either.

    Security is a lot about risk mitigation. If WiFi or other extraneous services start introducing vulnerabilities to any form of transport, particularly the ability to safely control it, then you properly weigh those risks against the reward of satisfying a tube full of internet junkies.

    Honestly, the proper decision should have been made back on the drawing board when the extraneous-services-network was being built into the plane; No ability to communicate in any way with the transport or its control systems. That doesn't mean firewall or DMZ either. That means air-gapped, tamper-proof, and TEMPEST-shielded throughout.

  39. Re:Commercial aircraft connected to the Internet? by geekmux · · Score: 1

    Sandwiches also existed "before das intertubularz" so people should also not use the internet during lunch.

    Given the amount of germs that sit on keyboards and the increased chance of users spilling liquid on their computer, this is actually wisdom valued far beyond the sarcasm that was intended. It's about risk mitigation.

  40. Already happened by sad_ · · Score: 1

    see flight 370

    --
    On a long enough timeline, the survival rate for everyone drops to zero.
  41. Re:Commercial aircraft connected to the Internet? by ixidor · · Score: 1

    good luck with that last one, too heavy for aircraft.

  42. Re: Remotely hacked 9/11 by stealth_finger · · Score: 1

    Before "9/11" anyone would have told you that the US Air Force would have shot down any hijacked commercial planes if it would have saved lives of people in buildings on the ground. The 1 in 365 chance that terrorists would get lucky and pick the one day the entire Air Force is having a picnic was considered "insanely unlikely."

    They weren't having a picnic they were practicing for that exact thing happening.

    --
    Wanna buy a shirt?
    https://www.redbubble.com/people/stealthfinger/shop?asc=u
  43. Re: Remotely hacked 9/11 by vtcodger · · Score: 1

    I agree with both posters above. OTOH, the level of motivation and resource available to those who might wish to attack a military aircraft is probably much higher than civil aircraft. And the Iranians dis manage to hijack a USAF drone in flight a few years ago and apparently even managed to land the thing.

    BTW, I' worked with command and control of military weapons systems for a number of decades. But that was a LONG time ago and things have changed a lot.

    --
    You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey
  44. Re:Commercial aircraft connected to the Internet? by PPH · · Score: 1

    People flew fine, lived fine, without such nonsense.

    Now convince some sperglord that he can't play his MMPORG while stuck in an airplane for 6 hours. Watch the neurotic fits ensue.

    --
    Have gnu, will travel.
  45. Re:You still answer to your parents SOYBoy? LOL! by BronsCon · · Score: 1

    I think you're replying to the wrong person... Please, take your meds.

    --
    APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  46. Re:FALSE by Shotgun · · Score: 1

    The benefit of a mechanical system is actually the non-zero wear rate. I know when my elevator cables are worn by running a cloth down them. I know by wheel bearing need replacing when there is shimmy in the wheels. I know the attitude indicator is on it's last leg when it starts taking longer to settle down after start-up or whine with the wrong tone after shutdown. In each case, the "wearing out" is progressive and provides clues that maintenance is necessary.

    The electronics failure mode is that one day it just quits working. Maybe you smell some hot wiring a few minutes before, very likely not.

    --
    Aah, change is good. -- Rafiki
    Yeah, but it ain't easy. -- Simba
  47. Re:*sigh* The vulnerabilities are not what we thin by Shotgun · · Score: 1

    Cessna 172? WTF for? Maybe for one year. Have them BFR in a glider. A Cub the next time. Switch out to an RV with nothing but steam gauges, or maybe a Rutan design, and then any of the LSAs. An airline should be able to afford a fleet of small planes that take away all the electronic goodies and force the pilot to be more than a systems control engineer.

    Then, put him BACK in the simulator and force him to prove that he can be a systems control engineer.

    --
    Aah, change is good. -- Rafiki
    Yeah, but it ain't easy. -- Simba
  48. Re:*sigh* The vulnerabilities are not what we thin by w3woody · · Score: 1

    'Cause Cessna 172's are as common as fleas on a dog. Though any single prop manually controlled aircraft that one would train in (Pipers Archers, DA-20's, whatever) will do in a pinch: anything where you can feel the bite of the air on the yoke and feel the pitch of the aircraft on the rudder.

  49. Re:Commercial aircraft connected to the Internet? by geekmux · · Score: 1

    good luck with that last one, too heavy for aircraft.

    I wonder how heavy a class-action lawsuit is against an airline? From a financial standpoint, probably heavy enough to tip the scales of insolvency.

    Someone should probably weigh the risks of electronic manipulation via exposed communications.

  50. Re: Remotely hacked 9/11 by c6gunner · · Score: 1

    There are a lot of outstanding questions about what exactly happened with that drone. Some Iranian sources have claimed that they jammed it's communications links and then fed it spoofed GPS data to get it to land. This is somewhat plausible, but the drones don't rely purely on GPS data so it seems unlikely that this would have worked.

    It's definitely an interesting occurrence, but "hijacked" implies they had direct control, which doesn't seem to be the case.

  51. Malaysia Airlines Flight 370 ... done by fygment · · Score: 1

    Test complet

    --
    "Consensus" in science is _always_ a political construct.