Could ADS-B 'be used in a Bad Way' ?

[VE6CPP]

Interesting Read (in a way) Somewhat of a 'Chicken Little Scenario' IMHO..but his perspective I guess ! Everyone is entitled to their own opinion as they say ! But..interesting none the less !

http://www.airsport-corp.com/adsb2.htm

VE6CPP
F-CYQL1

[speedbird1960]

I think we will see a lot more of these sort of wild theories in the future due to the attention that MH370 has brought to ADS-B.

[fungus]

"My purpose in writing these scenarios is to illustrate the problems that I perceive. I am not delivering a threat, rather I am delivering the message that ADS-B is a threat."

Unfortunately the problem with this argument is that almost everything man has ever invented can be deemed 'dangerous' or a 'threat.' Life is full of danger. (I was an electrician before retiring- crickey that stuff needs to be banned).

Perhaps we should all go back to the dark or stone age? No, wait, they had flint and were able to produce fire- bloody dangerous stuff that.

I've never seen such a rubbish argument in my life. We should all curl into the fetal position and crawl back into bed- we're doomed? What utter rot! Let's all give up on new technology and raise the white flag of surrender? Garbage!

That's just my humble viewpoint. Now, back to bed and tuck my head under the pillow and hide.

Regards,
Gregg

[YSWG]

Dick Smith had suggested that ADS-B could be spoofed a few years ago.

http://www.dicksmithflyer.com.au/DS_to_Minister_re_ADS-B_spoofing.php

[Exadios]

That original page is quite old. The give away are the references to Litton equipment. Litton was bought out by Northrop Grumman about 15 years ago. I used to work for Litton many years ago.

ADS-B has already been cracked. The details were given at Blackhat 2012 and subsequently. When I first looked at the ADS-B spec. I was reminded of the internet circa 1985 - wide open. In my view the ADS-B spec. is very seriously flawed.

However MH370 was certainly not a ADS-B hack!

[F-EGLF1]

Almost anything can be used in a bad way, look at how many people are killed by cars each year!!! You can misuse the police radio comms if you are so inclined (just ask the ambulance chasing "lawyers"), the Internet is misused millions of times a day around the world, perhaps it should be banned??
I find it hard to think of any human inventions that cannot be misused, so why single out ADS-B?

[Exadios]

Almost anything can be used in a bad way, look at how many people are killed by cars each year!!! You can misuse the police radio comms if you are so inclined (just ask the ambulance chasing "lawyers"), the Internet is misused millions of times a day around the world, perhaps it should be banned??
I find it hard to think of any human inventions that cannot be misused, so why single out ADS-B?

Because ADS-B is a poor design. Its shoddy engineering. Its "unsafe at any speed".

[peterhr]

Because ADS-B is a poor design. Its shoddy engineering. Its "unsafe at any speed".

So you get it encrypted, then we cant see it, FR24 is finished ... and the bad boys will have bought the latest positronic realtime decryption module and will view the data freely. (remember - decryption modules will be available because pilots in other aircraft need access to the data for collision avoidance)

Just like guns being banned in the UK - they're banned, the police have them, so do many many criminals.

[Exadios]

So you get it encrypted, then we cant see it, FR24 is finished ... and the bad boys will have bought the latest positronic realtime decryption module and will view the data freely. (remember - decryption modules will be available because pilots in other aircraft need access to the data for collision avoidance)

Just like guns being banned in the UK - they're banned, the police have them, so do many many criminals.

I haven't mentioned encryption. And I not sure how much you understand the subject.

I'm not particularly concerned about any of the 'passive attacks' since any real harm in this case is done by an agency outside of ADS-B.

However active attacks are a real problem so the spec. should have required signed packets.

What the spec. has to do with UK gun laws I cannot imagine. Possibly a connection that is only apparent to you?

[jhmb]

So you get it encrypted, then we cant see it, FR24 is finished ...

Not necessarily. Think something like SSL encryption and certifcate authorities.
Although your bank probably has a https site, it's website still is visible to everyone, yet everyone knows it's (probably) the real site.
I know there are exceptions, and problems as well, but it's a lot safer than no encryption at all, and still readable to all, including FR24.

[peterhr]

Not necessarily. Think something like SSL encryption and certifcate authorities.
Although your bank probably has a https site, it's website still is visible to everyone, yet everyone knows it's (probably) the real site.
I know there are exceptions, and problems as well, but it's a lot safer than no encryption at all, and still readable to all, including FR24.

The point in encryption here would be so the data is only visible to those who have need to see it.

It's a minefield of the data is exceedingly useful to ATC and to on board systems for collision avoidance. You also need to have affordable equipment - so aircraft operators can fit it.

If you have any system that is affordable and able manage collision avoidance, then it could be programmed to do the opposite ... encryption just adds complexity.

On guns - no matter what the rules are - the bad boys will find a way around them.

[jhmb]

The point in encryption here would be so the data is only visible to those who have need to see it.

No, the point would be that what you get is what was intended, e.g. the info can be trusted. So only trusted parties should be able to produce the info, while everybody is able to read it.

[airnrail]

"My purpose in writing these scenarios is to illustrate the problems that I perceive. I am not delivering a threat, rather I am delivering the message that ADS-B is a threat."

Unfortunately the problem with this argument is that almost everything man has ever invented can be deemed 'dangerous' or a 'threat.' Life is full of danger. (I was an electrician before retiring- crickey that stuff needs to be banned).

Perhaps we should all go back to the dark or stone age? No, wait, they had flint and were able to produce fire- bloody dangerous stuff that.

I've never seen such a rubbish argument in my life. We should all curl into the fetal position and crawl back into bed- we're doomed? What utter rot! Let's all give up on new technology and raise the white flag of surrender? Garbage!

That's just my humble viewpoint. Now, back to bed and tuck my head under the pillow and hide.

Regards,
Gregg

Well said. I don't think this topic serves the best interests of a community whose ongoing primary interest (after MH370 is no longer newsworthy) is plane spotting for fun and it should be terminated. Those who want to speculate are able to do so elsewhere on any number of fringe blogs.

[Exadios]

No, the point would be that what you get is what was intended, e.g. the info can be trusted. So only trusted parties should be able to produce the info, while everybody is able to read it.

This is the point.

The stated aim of the ADS-B deployment is to provide primary ATC coverage - at least in those areas that have no radar / Mode S coverage. And with this increased coverage comes with the promise increased traffic density and so on.

But none of these gains can be realized if the system cannot be trusted. The protocol has no security at all. Attacks against ADS-B could hardly be characterized as attacks since that characterization would imply some level of difficulty.

Rather than being an affordable system ADS-B it risks becoming a very expensive one in that the money has been spent with no real hope of achieving the goals set.

[peterhr]

Well said. I don't think this topic serves the best interests of a community whose ongoing primary interest (after MH370 is no longer newsworthy) is plane spotting for fun and it should be terminated. Those who want to speculate are able to do so elsewhere on any number of fringe blogs.

Agreed.

-----

(a few mor characters to get above the minimum post size)