Hacker Shows How To Attack An Airplane's Systems—Using A Phone

Weak aircraft security systems seem vulnerable to mobile hacks.

A German security researcher has demonstrated how easy it can be to hack into the digital systems of an airliner in flight using the right coding knowledge and hardware that's not hard to get—including a Samsung smartphone.

Hugo Teso presented at the Amsterdam security conference The Hack In The Box. His exploit used more or less readily-available information and electronics. Relying on the fact that two critical aircraft systems use no encryption during their chatter to ground-based servers, Teso was able to hack into the flight control software of an airliner—one that could, theoretically, be in flight. He was able to divert the aircraft's autopilot settings, potentially placing the vehicle at risk of collision, and even pull off stunts like dropping the oxygen masks in the passenger compartment.

Teso's hacking demonstration, like many "white hat" hacks, is intended to prompt the industries concerned to seriously beef up their security before a malicious hacker exploits the same vulnerabilities. The sort of direct hack that Teso used may remind you of the hardware-targeted hacks that are said to have devastated Iran's nuclear production facilities in recent years.

[Image: Flickr user francoisroche]

Add New Comment

5 Comments

  • Kenneth J Hoffman Jr.

    BULLSHIT...turning off the autopilot and dropping oxygen masks aint gonna drop no jet

  • Rammohanpotturi

    Every software under the sky can be  tampered because it is just an human creation. Any 'security' put around that is also another software and that too again being a human creation can be tampered. Thus, threat, tampering, intrusion these are all part of the process, It is all about who does that, when and where.  Only way out available is such gadgets or devices have to be totally banned on journey's on all Airways.  Rammohan Potturi  (rammohanpotturi@hotmail.com)

  • Lee Stevens

    Not a particularly wise idea to publish this story until the fix is put in is it?