Penetration testing blog

Yes, just as you read in this article’s title - it’s insane and far from being true.. but the question is.. how far? Take a look at this article from wired.com - http://www.wired.com/politics/security/news/2008/01/dreamliner_security

They are stating that “The computer network in the Dreamliner’s passenger compartment, designed to give passengers in-flight internet access, is connected to the plane’s control, navigation and communication systems, an FAA report reveals.” which is hard to believe but if it was the case, then I would simply stop flying those damn planes

I know and believe me _I know_ how distorted a story arrives to the media. As with any non-critical security vulnerability that arrives to the press, ends up being the-end-of-the-world as in a Tom Cruise movie.

Either way, my experience is that *thank god the passenger interfaces are isolated* - I once took a plane that had multiplayer gamming software in each seat. I believe it was from ALITALIA. You were able to invite other seats into playing with you, through standard games or you could also play old Mame games (which rocked) but that was a single plane and then there’s the standard small-screen with digital phone planes. They are equipped by default with a joystick behind the phone but unluckily never used by the company. I have seen live how by messing around with the digital phone control, not only your screen can core-dump but a whole column of seats behind you as well. I’m not saying *how* so this is partial information, I’m not feeding any terrorists out there with new information

If they isolate one network from the other with firewalls, anyone flying that plane is screwed. If they isolate one network from the other with anything other than real physical isolation that isn’t the output of a programmer, then anyone flying that plane is screwed.

Good luck on your next trip!