Join the discussion
Write your take first — we'll ask for email only when you're ready to publish.
- Hacker News
- by snapsnail
- > the company may not in fact implement any such update to their systems for years to come, given how rarely commercial airplanes are redesigned.
Boeing commercial airplanes are constantly updated. As long as the airplane is in service, Boeing retains a team of engineers that update parts as needed. If FAA review is needed, this will of course take longer.
BTW, anyone with access to the internals of an airplane could potentially sabotage it. Sadly, all people with access need to undergo a security check.
by WalterBright - “researchers aren't revealing which port they targeted on the 737, nor are they releasing some details of how their hacking device is able to spoof commands to the plane's computers”
Bro. You put “429 interceptor” on the PCB. You’re just fucking on the ARINC 429 bus.
Also, this exists as a commercial product (in some ways): https://www.astronics.com/wireless-electronic-flight-bags-we...
There's already a dongle on the market hooked in some 737s that gives you WiFi access to the 429 and 717 busses through the same port...
EDIT (again): Oh come on, the paper says they went into the Open Maintenance Connector through the E&E bay through the nose gear. C'moooon.
Double-triple edit: Also - ARINC 429 is kinda fun. You can do things like take old glass cockpit hardware and work it into your flight simulator by just feeding the cockpit hardware simulated 429 messages over the wire from your flight sim.
Here's some 737 instruments being driven from FSX: https://www.youtube.com/watch?v=RtTJiU-vArs
by kotaKat - > In their paper, the researchers outline a range of fixes for the vulnerability they've uncovered, starting with removing the connector in the vulnerable port altogether, or plugging it with epoxy.
If you can safely disable the port completely, that implies the port is not needed to begin with. Is that really true? What's the purpose for it?
by kmoser - The connector shown in the article is apparently the 24-pin connector known as the Open Maintenance Connector (OMC). It's located in the electronics and equipment bay under the nose of the Boeing 737 NG and 737 Max.
I say "apparently" as I had Gemini identify the port from the image.
The OMC provides direct access to key avionics data networks, including the ARINC 429 buses that link the pilot's Flight Management Computer (FMC) to the Multi-Function Control and Display Unit (MCDU).
by ctippett - I started my career proper as a junior network engineer for a regional British airline (British Midland, since subsumed by BA) in 2001, just before 9/11 continuing for 3 years until mid 2004. Throughout that time, I held an airside pass at LHR that allowed me to get pretty much anywhere I liked, apart from the taxiways and runways of course.
This was pretty standard for most staff - once you’re airside, there were not many restrictions about getting down under the ramp or anywhere around an aircraft on a stand.
Never was this illustrated better than the final homecoming of a BA Concorde in late 2003, when a whole load of staff from different roles across the airport all piled out onto the edge of the apron to wave it home.
A junior IT bod in a high-vis touching something on the outside of an aircraft ? Wouldn’t stand out to anyone watching a CCTV feed. Maybe the other ramp staff would notice, but if you timed it right…
What I’m trying to say is that physical access to aeroplanes even at a place like LHR was pretty much open to anyone who holds an airside pass.
by danw1979 - > less than a minute, that hardware implant can be fitted into a port accessible via a hatch on the exterior of the plane
Just as with computers, as the saying goes, if you have physical access to the device then all bets are off. The tricky part is getting that physical access in the first place...
by United857 - one that's routinely within reach of maintenance workers or other airport and airline staff between flights
You already trust them (as well as the pilots) every time with your flight.
by userbinator