Fresh from the WSJ this morning.It seems Iraqi insurgents are beginning to steal signals from US drones. Evidence backing John Robb’s Global Guerillas theory seems to mount daily. Here’s the article
Militants in Iraq have used $26 off-the-shelf software to intercept live video feeds from U.S. Predator drones, potentially providing them with information they need to evade or monitor U.S. military operations.Senior defense and intelligence officials said Iranian-backed insurgents intercepted the video feeds by taking advantage of an unprotected communications link in some of the remotely flown planes’ systems. Shiite fighters in Iraq used software programs such as SkyGrabber—available for as little as $25.95 on the Internet—to regularly capture drone video feeds, according to a person familiar with reports on the matter.
U.S. officials say there is no evidence that militants were able to take control of the drones or otherwise interfere with their flights. Still, the intercepts could give America’s enemies battlefield advantages by removing the element of surprise from certain missions and making it easier for insurgents to determine which roads and buildings are under U.S. surveillance.
Comment: This is the other side of technology that we haven’t heard much about. While certainly it is not a surprise to many experts, it is an area that seems largely undiscussed in public. I would hope the military is already planning for contingencies that include the enemy taking control of unmanned land, sea and air vehicles. But the article continuously stating that things are ok, and no damage was done makes this author rather suspicious. One has to wonder whether this is also occuring in Afghanistan and Pakistan. The ‘honeymoon phase’ of unmanned vehicles is slowlycoming to an end.

Comments to this entry
Wilson
December 17, 2009
4:51 pm
They should just be using TLS to secure the transport along with a private key loaded on the drone and the operator's system.
That sounds like about two days of work to me; if their architecture is so complex that this is a difficult task, then there is no hope for US battlespace security.
The WSJ article implies that there is some kind of additional hardware needed to implement this? While I don't know the implementation details of the drone network, this seems like a 100% software problem to me. At first I was speculating that there might not be enough CPU power on the drones to do this, but then I remembered that this is 2009 and my cellphone can encrypt a high-res video stream on the fly with room left over to let me listen to music and read email.
Maybe the DoD can pay Raytheon to duct-tape iPhones to their drones? http://bits.blogs.nytimes.com/2009/12/16/the-iphone-goes-to-war/?hp
DJ
December 17, 2009
6:25 pm
They did not hack anything, they just got software and a receiver and are picking up live video feeds.
SJPONeill
December 17, 2009
7:04 pm
Last Call for 2009 « The World According to Me…
December 17, 2009
8:03 pm
Wilson
December 17, 2009
9:35 pm
(see the section on Electromagnetic Spectrum Threats)
T. Greer
December 18, 2009
12:40 am
ElamBend
December 18, 2009
4:10 am
I'm curious to how they stumbled onto this. One possibility is that they had receivers for their own drones provided by the Iranians and stumbled onto it. I haven't seen any reports of black hat drones in Iraq, but if Hezbollah had em...
Wilson
December 18, 2009
5:04 am
Jim - Hacker Forums
December 18, 2009
12:39 pm
marku
December 19, 2009
11:41 pm
http://www.wired.com/dangerroom/2009/12/not-just-drones-militants-can-snoop-on-most-us-warplanes/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+wired%2Findex+%28Wired%3A+Index+3+%28Top+Stories+2%29%29&utm_content=Google+Feedfetcher
And it is not simple to fix, as the article points out:
"Can these feeds be encrypted with 99.5 percent chance of no compromise? Absolutely! Can you guarantee that all the encryption keys make it down to the lowest levels in the Army or USMC [United States Marine Corps]? No way,” adds a second Air Force officer, familiar with the ROVER issue. “Do they trust their soldiers/Marines with these encryption keys? Don’t know that.”
Dumb.