AI Assistant
Notifications
Clear all

How to bring down mission-critical GPS networks with $2,500

4 Posts
3 Users
0 Reactions
304 Views
fattiretom
(@fattiretom)
Posts: 335
Member
Topic starter
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Well this is crazy...They took out Trimble CORS stations and many others...

http://arstechnica.com/security/2012/12/how-to-bring-down-mission-critical-gps-networks-with-2500/

Tom


 
Posted : December 14, 2012 9:09 am
jhframe
(@jim-frame)
Posts: 7465
Member
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

It's not like they didn't see this coming, but as in most enterprises that grow organically, it's not a problem until it's a problem. This ought to keep the designers and coders busy for quite awhile.


 
Posted : December 14, 2012 10:16 am
John1Minor2
(@john1minor2)
Posts: 688
Member
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Well, no doubt Javad will fix this problem in no time at all! 😉


 
Posted : December 14, 2012 9:31 pm
jhframe
(@jim-frame)
Posts: 7465
Member
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

> Well, no doubt Javad will fix this problem in no time at all! 😉

I know this was posted in jest, but I'm not sure it's simply a matter of hardening the receiver algorithms. Problems like the NetRS divide-by-zero vulnerability will be relatively easy to fix -- at least in new receivers -- but they're also going to have to figure out a way for the receiver to authenticate the navigation messages. That'll be challenging without reworking the messages to include reliable credentials, and that's not a trivial undertaking.


 
Posted : December 15, 2012 12:20 am