I suppose the headline says it all, and it is now down to the little details which should interest many an airline passenger. At least this lends some weight to the argument that one should ensure all electronic items, including smartphones, be turned off throughout the flight, as it just isn’t cool to be on a hijacked flight. Animalnewyork.com has “proof” that smartphones and airplanes are not a desirable mix when you have someone with the technical know how as well as nefarious attitude, where during a security conference in Amsterdam, hacker and researcher Hugo Teso showed off to the world how it is possible to actually hijack a plane’s controls from the ground with an Android-powered smartphone.
This makes things all the more creepier, as it shows that the hacker himself or herself does not even need to be physically present on the plane to do so. How did Teso perform this seemingly impossible task? Well, he exploited the Aircraft Communications Addressing and Report System (ACARS), which so happens to control the plane’s flight management systems, and lacks a whole lot in terms of security.
Teso said, “You can use this system to modify approximately everything related to the navigation of the plane. That includes a lot of nasty things. ACARS has no security at all. The airplane has no means to know if the messages it receives are valid or not, so they accept them and you can use them to upload data to the airplane that triggers these vulnerabilities. And then it’s game over.”
Update: The FAA has dismissed this “hack”, and you can read all about it here.
Filed in Hacking.
. Read more about