- cross-posted to:
- europe@lemmy.dbzer0.com
You must log in or # to comment.
The official expressed concern that sensitive information — notably command data for European satellites — is unencrypted, because many were launched years ago without advanced onboard computers or encryption capabilities.
Maybe those should be replaced?
What the fuck are we in the 1910’s???
Do you have some B€ to spare?
Uuh yeah i do (because taxes), but its being funneled into the pockets of corrupt politicians, the car industry and AI slop.
Hah. I don’t disagree that money is not well used, but trust me, replacing those satellites is no small endeavour on many levels: Industrial capacity, launch capacity, workforce capacity, cost, will…
The official expressed concern that sensitive information — notably command data for European satellites — is unencrypted, because many were launched years ago without advanced onboard computers or encryption capabilities.
According to the article the satellites that were shadowed were:
Satellite Launch date RASCOM-QAF1R August 4, 2010 Eutelsat 3B July 2014 Eutelsat Konnect VHTS September 7, 2022 Astra 4A November 18, 2007 SES-5 July 9, 2012 Eutelsat KA-SAT 9A December 26, 2010 Eutelsat 9B January 30, 2016 Eutelsat 3C February 12, 2009 That wasn’t that long ago relative to encryption being done on computers.
I’m a software engineer in space and the things I’ve heard are astounding. Basically space software as a sector is super backwards and operated under a “We’re too far away to be hacked” mentality for way too long. Thankfully, that is changing, and the EU Space Act mandates cybersec in some cases
What’s it like typing in zero-G? Does the keyboard float away from you?
No, we tape it to the table, duh. But it’s annoying when the tape covers the spacebar!
What I observe is not so much a “we’re too far away to be hacked” mentality, but rather a lackluster approach to software: “Software is just the cream on top that enables the real power of the hardware. So let’s have our hardware engineers do the software as a side exercise. Surely it can’t be that hard.” Then you get hardware engineers, most of whom are fucking stupid in terms of SW development, writing flight software.
My understanding is that in space systems, generally robustness trumps everything else, so old stable versions of everything are preferred. So it’s generally a very conservative software stack and process.
generally robustness trumps everything else
Theoretically
So it’s generally a very conservative software stack and process.
Yes, but that sort of process promotes non-adoption of techniques and processes that could increase robustness but are shunned due to pessimistic conservativeness
Oh yes absolutely. I was not trying to justify the design choices, just trying to explain their internal rationale.
Yeah a fair bit of that too!
Ah yes, assuming experience in your field basically translates to every other field. A tale as old as time.
How quickly could a radio wave get to Earth orbit? Three minutes? Nah, it’s fine. /s
Yeah, wtf is going on. GPG was released in 1999 and encryption existed before that too. https://www.ssldragon.com/blog/history-of-ssl-tls-versions/
How is this unencrypted
There was something of a to-do a couple years ago when some researchers were trying to see how strong encryption satellites were using and whether they could break it and discovered that a number of of satellite operators weren’t bothering to encrypt things at all.
EDIT:
This might be more recent than that:
https://www.kratosspace.com/constellations/articles/the-state-of-satellite-encryption
A new study from the University of California San Diego (UCSD) and the University of Maryland has performed the most comprehensive public exploration into geostationary (GEO) satellite security yet, logging large amounts of unencrypted data being broadcast across 411 transponders on 39 GEO satellites, which were intercepted with a simple commercial-off-the-shelf satellite dish costing a few hundred dollars.
Wow. Amazing. I basically encrypt everything by default because I’m so paranoid. Sometimes multiple layers of encryption
Paywalled. Archive link.
That captcha is not letting me through no matter how many times I try.
Hate those multiple choice images, they’re terrible captcha, or I’m a bot.
Which country is this available in, so I can use the right VPN.
It’s blocked with a Swiss and German IP.
Works in Finland
Moonraker?
They probably saw the illegal tetris shape and had the shut down such transgressions fast. Can’t have those fall down from above.
But Luch-1 may no longer be functional. On January 30, Earth telescopes observed what appeared to be a plume of gas coming from the satellite. Shortly after, it appeared to at least partially fragment.
“It looks like it began with something to do with the propulsion,” said Marchand, adding that afterwards there “was certainly a fragmentation” and the satellite was “still tumbling”.
Smells like a shadow space war.
Relevant 39c3 talk (but dealing with civilian sattelites): Don’t look up
