By Jim Finkle BOSTON (Reuters) - Cyber security researcher Ruben Santamarta says he has figured out how to hack the satellite communications equipment on passenger jets through their WiFi and inflight entertainment systems - a claim that, if confirmed, could prompt a review of aircraft security. Santamarta, a consultant with cyber security firm IOActive, is scheduled to lay out the technical details of his research at this week's Black Hat hacking conference in Las Vegas, an annual convention where thousands of hackers and security experts meet to discuss emerging cyber threats and improve security measures. His presentation on Thursday on vulnerabilities in satellite communications systems used in aerospace and other industries is expected to be one of the most widely watched at the conference. "These devices are wide open. The goal of this talk is to help change that situation," Santamarta, 32, told Reuters. The researcher said he discovered the vulnerabilities by "reverse engineering" - or decoding - highly specialized software known as firmware, used to operate communications equipment made by Cobham Plc, Harris Corp, EchoStar Corp's Hughes Network Systems, Iridium Communications Inc and Japan Radio Co Ltd. In theory, a hacker could use a plane's onboard WiFi signal or inflight entertainment system to hack into its avionics equipment, potentially disrupting or modifying satellite communications, which could interfere with the aircraft's navigation and safety systems, Santamarta said. He acknowledged that his hacks have only been tested in controlled environments, such as IOActive's Madrid laboratory, and they might be difficult to replicate in the real world. Santamarta said he decided to go public to encourage manufacturers to fix what he saw as risky security flaws. Representatives for Cobham, Harris, Hughes and Iridium said they had reviewed Santamarta's research and confirmed some of his findings, but downplayed the risks. For instance, Cobham, whose Aviation 700 aircraft satellite communications equipment was the focus of Santamarta's research, said it is not possible for hackers to use WiFi signals to interfere with critical systems that rely on satellite communications for navigation and safety. The hackers must have physical access to Cobham's equipment, according to Cobham spokesman Greg Caires. "In the aviation and maritime markets we serve, there are strict requirements restricting such access to authorized personnel only," said Caires. A Japan Radio Co spokesman declined to comment, saying information on such vulnerabilities was not public. BUGGY 'FIRMWARE' Black Hat, which was founded in 1997, has often been a venue for hackers to present breakthrough research. In 2009, Charlie Miller and Collin Mulliner demonstrated a method for attacking iPhones with malicious text messages, prompting Apple Inc to release a patch. In 2011, Jay Radcliffe demonstrated methods for attacking Medtronic Inc's insulin pumps, which helped prompt an industry review of security. Santamarta published a 25-page research report in April that detailed what he said were multiple bugs in firmware used in satellite communications equipment made by Cobham, Harris, Hughes, Iridium and Japan Radio Co for a wide variety of industries, including aerospace, military, maritime transportation, energy and communications. The report laid out scenarios by which hackers could launch attacks, though it did not provide the level of technical details that Santamarta said he will disclose at Black Hat. Harris spokesman Jim Burke said the company had reviewed Santamarta's paper. "We concluded that the risk of compromise is very small," he said. Iridium spokesman Diane Hockenberry said, "We have determined that the risk to Iridium subscribers is minimal, but we are taking precautionary measures to safeguard our users." One vulnerability that Santamarta said he found in equipment from all five manufacturers was the use of "hardcoded" log-in credentials, which are designed to let service technicians access any piece of equipment with the same login and password. The problem is that hackers can retrieve those passwords by hacking into the firmware, then use the credentials to access sensitive systems, Santamarta said. Hughes spokeswoman Judy Blake said hardcoded credentials were "a necessary" feature for customer service. The worst a hacker could do is to disable the communication link, she said. Santamarta said he will respond to the comments from manufacturers during his presentation, then take questions during an open Q&A session after his talk. Vincenzo Iozzo, a member of Black Hat's review board, said Santamarta's paper marked the first time a researcher had identified potentially devastating vulnerabilities in satellite communications equipment. "I am not sure we can actually launch an attack from the passenger inflight entertainment system into the cockpit," he said. "The core point is the type of vulnerabilities he discovered are pretty scary just because they involve very basic security things that vendors should already be aware of." (Reporting by Jim Finkle; Additional reporting by Andrea Shalal in Washington and Teppei Kasai in Tokyo; Editing by Richard Valdmanis and Tiffany Wu)
- The Week
Prince Harry gave an honest assessment of his relationship with his father, Prince Charles, and brother, Prince William, telling Oprah Winfrey that he has "compassion" for both of them because the are "trapped" inside the royal family. During an interview that aired on CBS Sunday night, Harry said he did not "blindside" his grandmother, Queen Elizabeth II, with the news that he would be stepping back from his royal duties, saying he has too much "respect" for her. Last year, Harry and his wife, Meghan Markle, moved from Britain to California, and he said that recently, he's actually spoken to the queen more than usual, and they have a "really good relationship." It's been harder to relate with his father, though. Harry said he is "disappointed" in him, and does not think the family did enough to protect Markle from bad press. "I saw history repeating itself," he said, referring to his mother, the late Princess Diana, who was hounded by tabloids. Harry said he asked for help, but Charles stopped answering his calls. Had he received assistance, "we wouldn't have left," Harry said, but "we did what we had to do." He denied having long ago decided he would leave his royal duties, and Markle backed him up. "I left my career, my life," she said. "I left everything because I love him. Our plan was to do this forever." Harry told Winfrey he has money his mother left him, and believes she would have been "very angry at how this has played out, and sad. But ultimately, all she'd ever want is for us to be happy." Today, Harry said Charles is accepting his phone calls, but "there's a lot to work through there." He thought his father would be more understanding, and "there's a lot of hurt that's happened." It is now one of Harry's "priorities to try and heal that relationship," he added. As for William, Harry said he "loves him to bits" but "we're on different paths." Through Markle, Harry said he was able to see he was stuck in the "institution" he was born into, and his father and brother "are trapped. They don't get to leave. And I have compassion for that." More stories from theweek.com7 spondiferously funny cartoons about the Dr. Seuss controversyWhy the Dr. Seuss 'cancellation' is chillingExperimental antiviral drug shows promise in treating COVID-19
Princess Diana's chief of staff says Prince Harry and Meghan Markle's royal rift echoes the past - and responsibility for reconciliation lies with 'senior palace management'
Ahead of bombshell Oprah interview, Patrick Jephson told CNN that previous tell-all interviews with the royal family "in all cases" has "backfired."
- Business Insider
A Trump appointee who was arrested after participating in the Capitol riot asked a judge if he could be transferred to a cell with no cockroaches
Federico Klein is believed to the first Trump appointee arrested in connection with the Capitol riot.
Meghan Markle revealed that she had suicidal thoughts, while Prince Harry said Charles stopped returning his phone calls.
- Business Insider
The Intercept reported that McConnell's political protégé, state Attorney General Daniel Cameron, is at the top of a list of possible successors.
- Business Insider
Lindsey Graham said he deals with Trump's 'dark side' because he thinks he has a 'magic' other Republicans don't
Graham told "Axios on HBO" that Trump could make the party bigger, stronger, and more diverse, but that he "also could destroy it."
Indian police have detained more than 150 Rohingya refugees found living illegally in the northern region of Jammu and Kashmir and a process has begun to deport them back to Myanmar, two officials said on Sunday. Dozens of Rohingya are in a makeshift "holding centre" at Jammu's Hira Nagar jail after local authorities conducted biometric and other tests on hundreds of people to verify their identities. "The drive is part of an exercise to trace foreigners living in Jammu without valid documents," said one of the two officials, who declined to be named as they are not authorized to speak to the media.
"TWD" is stirring the pot with Daryl's sexuality after 10 seasons. Fans have been vocal on who they have wanted to see Daryl paired with, if anyone.
Austrian authorities have suspended inoculations with a batch of AstraZeneca's COVID-19 vaccine as a precaution while investigating the death of one person and the illness of another after the shots, a health agency said on Sunday. "The Federal Office for Safety in Health Care (BASG) has received two reports in a temporal connection with a vaccination from the same batch of the AstraZeneca vaccine in the district clinic of Zwettl" in Lower Austria province, it said.
Activists say the worker for Aung San Suu Kyi's party was beaten after being arrested.
- The Telegraph
The Duchess of Sussex has revealed she had suicidal thoughts and struggled with her mental health after joining the Royal family. The Duchess, 39, said in an extraordinarily candid interview that the “stress and isolation” drove her to contemplate taking her own life while pregnant with son Archie. She claimed she told a senior Palace official that she wanted to get treatment for her depression, but was denied because it would “look bad”. "[Going to a hospital] is what I was asking to do, I was told I couldn't because it wouldn't be good for the institution,” the Duchess told Oprah Winfrey during their two-hour interview. She said she felt so low at one point that she told the Duke of Sussex that she could not be left alone because she was afraid she might harm herself. She describes a particularly distressing time when she was attending a concert with her husband at the Royal Albert Hall.
Past US presidents have left a legacy of untruths ranging from the bizarre to the horrifying.
Olivier Dassault was killed on Sunday in a helicopter crash, a police source said, with President Emmanuel Macron paying tribute to the 69-year old conservative politician.
- The Independent
Lauren Boebert: Congresswoman linked to QAnon attacks Democrats for being ‘obsessed with conspiracies’
Freshman Republican complains: ‘Judge Jeanine, this is complete bonkers that we are keeping people out the United States Capitol’
- Associated Press
Gary Sánchez has impressed the New York Yankees early on at spring training as the catcher strives to rebound from a disastrous 2020 season. Sánchez poked an opposite-field single to right in the second inning against Zack Wheeler and scored on Brett Gardner’s grand slam as the Yankees beat the Philadelphia Phillies 4-0 on Sunday. “I think overall just a much more confident version of the Gary Sánchez that we saw in 2020,” Yankees catching coach Tanner Swanson said.
- Business Insider
Tesla's stock price - and many of its competitors - struggled last week following impressive gains at the beginning of 2020.
In Asia, some vaccination programmes are either yet to begin, or are at a very early stage.
- Reuters Videos
An official from the party of deposed Myanmar leader Aung San Suu Kyi died sometime overnight, Saturday to Sunday (March 7) in police custody, according to his associates.The cause of Khin Maung Latt's death was not known, but Reuters saw a photograph of his body with a bloodstained cloth around the head.Police in the region declined to comment.It comes as security forces cracked down on demonstrators staging further widespread protests against last month's coup.Local media and video posted to Facebook said police fired stun grenades and tear gas to break up protesters in Yangon and a sit-in protest by tens of thousands of people in Mandalay, where at least 70 people were arrested.Footage filmed by the Myitkyina News Journal on February 28 showed a nun - which local media identified as Sister Ann Roza, begging police not to fire. She was later photographed on her knees, stopping the police from advancing.The United Nations says security forces have killed more than 50 people in trying to stamp out daily demonstrations and strikes in the Southeast Asian nation, since the military overthrew and detained Suu Kyi at the beginning of February.Figures from the Assistance Association for Political Prisoners advocacy group say well over 1,700 people have been detained under the military junta.An alliance of influential worker unions in Myanmar has now called for an extended nationwide strike starting Monday, with the intention of causing the "full, extended shutdown" of the country's economy in an attempt to end the military coup.
- Associated Press
Dubai’s airport, the world’s busiest for international travel, can already feel surreal, with its cavernous duty-free stores, artificial palm trees, gleaming terminals, water cascades and near-Arctic levels of air conditioning. It’s the latest artificial intelligence program the United Arab Emirates has launched amid the surging coronavirus pandemic, contact-less technology the government promotes as helping to stem the spread of the virus. Dubai's airport started offering the program to all passengers last month.
A judge questioned the 'QAnon Shaman' about his '60 Minutes+' interview that was billed to the jail as a call with his lawyer
A lawyer for the "QAnon Shaman" was pressed in court over how a virtual visit with his client shirked the proper policy for interviews from custody.