Go Back  PPRuNe Forums > Aircrew Forums > Military Aviation
Reload this Page >

Are we crackers to be anxious over hackers?

Wikiposts
Search
Military Aviation A forum for the professionals who fly military hardware. Also for the backroom boys and girls who support the flying and maintain the equipment, and without whom nothing would ever leave the ground. All armies, navies and air forces of the world equally welcome here.

Are we crackers to be anxious over hackers?

Thread Tools
 
Search this Thread
 
Old 12th May 2013, 15:36
  #1 (permalink)  
Thread Starter
 
Join Date: Jan 2012
Location: Royal Leamington Spa
Age: 78
Posts: 440
Likes: 0
Received 0 Likes on 0 Posts
Are we crackers to be anxious over hackers?

Chinese hackers caught trying to steal secrets of our new stealth fighter as tens of thousands of cyber attacks are launched on jet manufacturer every week
Anthony Supplebottom is offline  
Old 12th May 2013, 16:00
  #2 (permalink)  
 
Join Date: May 2000
Location: UK
Posts: 4,334
Received 80 Likes on 32 Posts
No, but this type of thing has been going on for years now. Started with the MiG 15 to the APG-65 from the F-18. That is why we have compartments and security caveats to try and keep things 'water tight'.
Lima Juliet is offline  
Old 12th May 2013, 16:15
  #3 (permalink)  
 
Join Date: Jan 2005
Location: Somewhere
Posts: 868
Likes: 0
Received 0 Likes on 0 Posts
Prawn crackers??
TheWizard is offline  
Old 12th May 2013, 16:39
  #4 (permalink)  
 
Join Date: Mar 2000
Location: UK
Posts: 1,447
Received 0 Likes on 0 Posts
Google Solar Sunrise and see what you come up with....
Megaton is offline  
Old 12th May 2013, 16:53
  #5 (permalink)  
 
Join Date: Nov 2011
Location: Southern Europe
Posts: 5,335
Received 17 Likes on 6 Posts
Simple. If you connect your intranet to the internet, someone will find a way in. If your secrets are important to you, don't share them with the world by using the internet. It all seems very obvious to me, but maybe that's just me.

Last edited by Courtney Mil; 12th May 2013 at 16:55.
Courtney Mil is offline  
Old 12th May 2013, 16:57
  #6 (permalink)  
Thread Starter
 
Join Date: Jan 2012
Location: Royal Leamington Spa
Age: 78
Posts: 440
Likes: 0
Received 0 Likes on 0 Posts
Google Solar Sunrise and see what you come up with....
Ok.

Result was: Solar Sunrise - Cumbria's leading specialist in solar panel design and installation.

Anthony Supplebottom is offline  
Old 12th May 2013, 17:34
  #7 (permalink)  
 
Join Date: Aug 2003
Location: Stamford
Posts: 498
Likes: 0
Received 1 Like on 1 Post
http://www.pprune.org/military-aircr...h-america.html

and

Mandiant Intelligence Center Report | Mandiant®
Stuff is offline  
Old 12th May 2013, 18:12
  #8 (permalink)  
 
Join Date: Jun 2005
Location: On the Bump
Age: 68
Posts: 9
Likes: 0
Received 0 Likes on 0 Posts
Shhh, keep it to yourself.
whisperair is offline  
Old 12th May 2013, 19:09
  #9 (permalink)  
I don't own this space under my name. I should have leased it while I still could
 
Join Date: Dec 2002
Location: Lincolnshire
Age: 81
Posts: 16,777
Received 5 Likes on 5 Posts
Courtney, it may seem simple but as the MOD does connect intra to inter . . .

As most users know there are system blocks that are permanent or temporary - eBay being but one. Certain words and images are another. But where there is a software block there will inevitably be several software keys.

For a start, who makes the chips?

Last edited by Pontius Navigator; 12th May 2013 at 20:46.
Pontius Navigator is offline  
Old 12th May 2013, 19:10
  #10 (permalink)  
 
Join Date: Jan 2013
Location: Wiltshire
Age: 71
Posts: 2,063
Likes: 0
Received 1 Like on 1 Post
Ooooohhh buggerlet, does this mean the little slanty eyed buggles are interfering with my "profit making" roof mounted solar panels ? Or, can I rely on the integrity of our fearless operatives of MI whatsit, to make sure that all is well ? Hmmmm thought not
smujsmith is offline  
Old 12th May 2013, 20:23
  #11 (permalink)  
 
Join Date: Nov 2011
Location: Southern Europe
Posts: 5,335
Received 17 Likes on 6 Posts
PN, you usually make a lot of sense, but I only got half of that. I take issue with your opening statement. I could sit at an HQ or Station terminal and access both the intranet and the internet. Therefore there is a connection. Stranger things happened on the pink side and I had no desire to understand the connectivity there.

My point was, if your system is completely isolated from the outside world, no physical paths, it doesn't matter who made the chips, they can't create a link where none exists.
Courtney Mil is offline  
Old 12th May 2013, 20:30
  #12 (permalink)  
 
Join Date: Jul 2006
Location: bristol
Age: 56
Posts: 1,051
Likes: 0
Received 0 Likes on 0 Posts
My point was, if your system is completely isolated from the outside world, no physical paths, it doesn't matter who made the chips, they can't create a link where none exists.

If only that were true!

Sadly PC's and laptops tend to have USB ports or Bluetooth and this makes a net connection easy to sort, or of course to import viruses or remove data.

I am typing this on a tablet that has no Internet connection wired to it, but it does have Bluetooth, just as my phone does, and my phone is providing the Internet hotspot.

Last edited by barnstormer1968; 12th May 2013 at 20:32.
barnstormer1968 is offline  
Old 12th May 2013, 20:45
  #13 (permalink)  
I don't own this space under my name. I should have leased it while I still could
 
Join Date: Dec 2002
Location: Lincolnshire
Age: 81
Posts: 16,777
Received 5 Likes on 5 Posts
Originally Posted by Courtney Mil
My point was, if your system is completely isolated from the outside world, no physical paths, it doesn't matter who made the chips, they can't create a link where none exists.
Agree. My point however is that there are connections in practise. You are right, an air gap should ensure that there is no interconnection. Regarding foreign chips, it is quite conceivable that a chip could have the capability of bridging such an air gap which is one reason why some computers are supposed to operate in a bubble.

It is relatively easy to view the lateral dimensions of the bubble - you can see if your colleague brings his IPad/IPhone/PAD etc in proximity to your secure PC. It is less easy to not what is happening the other side of a wall, or above or below your office.

The problem with IT security is people. Where there are rules that are overly restrictive then those rules will be circumvented. The rules concerning my MOD laptop were so restrictive I never bothered to use it. At Henlow the passwords were on cards attached to the laptop bags even when the bags were taken off base.

Ed:

While what BS says is true, of intranet machines they are usually locked down to prevent access to unauthorised USB sticks and I guess Bluetooth, but these tend to be human breaks rather than deliberate attacks. My point was that human circumvention of the rules can open up an otherwise secure system to attack.

Some years ago, and I don't know how, but someone got in to the MOD phone system, linked in to Sqn Ldr Ops phone in Akrotiri and then bounced out to Tehran. Apparently it was just a means of getting a free phone call from UK but it showed what was possible.

Last edited by Pontius Navigator; 12th May 2013 at 20:51.
Pontius Navigator is offline  
Old 12th May 2013, 21:06
  #14 (permalink)  
 
Join Date: Nov 2011
Location: Southern Europe
Posts: 5,335
Received 17 Likes on 6 Posts
Points well made, PN & BS. Would it be correct to say that the hacking being discussed here is through a hard wire or other methods?

The problem with laptops is that it's hard, if not impossible, to buy one today that does not have wifi and bluetooth and a load of background apps that are simply there to get them into action. I see your point.

Bring on the air gap and tin foil hats for computers, eh?

Last edited by Courtney Mil; 12th May 2013 at 21:07.
Courtney Mil is offline  
Old 13th May 2013, 06:39
  #15 (permalink)  
 
Join Date: Apr 1998
Location: Mesopotamos
Posts: 5
Likes: 0
Received 0 Likes on 0 Posts
The problem with air gaps is someone inevitably comes along and joins the two together to solve his/her problem.

When I was working for guvmint many moons ago we used to talk about using two different network technologies that cannot be joined together by "chance". But the people at the top never understood it plus they couldn't justify spending more in a climate of spending less on administrative costs. That said, the real big leaks in that place came from a manager with the assistance of a HR person, who would lend his secretary to other senior managers to data mine their computers when their secretary called in sick. Fortunately it all came unstuck for him in a most tabloid kind of way.

More PPRuNE discussion here
http://www.pprune.org/military-aircr...h-america.html

Last edited by cattletruck; 13th May 2013 at 06:56.
cattletruck is offline  
Old 13th May 2013, 07:04
  #16 (permalink)  
 
Join Date: Feb 2008
Location: East Sussex UK
Age: 66
Posts: 6,995
Likes: 0
Received 1 Like on 1 Post
I used to work with a number of people who had Air Gaps between their ears
CoffmanStarter is offline  
Old 13th May 2013, 08:06
  #17 (permalink)  
 
Join Date: May 1999
Location: Quite near 'An aerodrome somewhere in England'
Posts: 26,806
Received 270 Likes on 109 Posts
Contacting people using their MoD e-mail addresses can often be very frustrating if your e-mail includes an image such as a table or screenshot. No warning of delay / blocking is given, so the assumption is often that the addressee is being b****y rude and not responding. At least other organisations advise you that an e-mail is being delayed for screening, if their suspicious anti-spam software hasn't fathomed out that the e-mail is safe..

Which then leads to the same e-mail being resent to a private address, with all the associated risk.

I recall one meeting which included government people. Everyone was able to upload the relevant working documents except the MoD reps. So we printed off half a rain forest for them instead.....
BEagle is online now  
Old 13th May 2013, 09:02
  #18 (permalink)  
 
Join Date: Feb 2008
Location: East Sussex UK
Age: 66
Posts: 6,995
Likes: 0
Received 1 Like on 1 Post
Ahhh ... Tumbleweed on the FireWall perhaps ... able to detect "flesh tones" for those dodgy attachments BEagle
CoffmanStarter is offline  
Old 13th May 2013, 12:18
  #19 (permalink)  
I don't own this space under my name. I should have leased it while I still could
 
Join Date: Dec 2002
Location: Lincolnshire
Age: 81
Posts: 16,777
Received 5 Likes on 5 Posts
Originally Posted by Courtney Mil
Bring on the air gap and tin foil hats for computers, eh?
Unfortunately tin foil is not what they need. The SOMA VDUs were gold film and on charge at £4,000 a pop at 1987 prices. They were also security key locked, the same key as nuclear weapons and gaming machines.

What price security?
Pontius Navigator is offline  
Old 13th May 2013, 14:50
  #20 (permalink)  
 
Join Date: Mar 2005
Location: Hove
Age: 72
Posts: 1,026
Likes: 0
Received 0 Likes on 0 Posts
"the same key as nuclear weapons and gaming machines."

Already have visions of that stupid git on TV shouting "Game on" and then a bucket of instant sunshine appearing. Lets hope the two don't get mixed up.
clicker is offline  


Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.