Hacking in Space

Key takeaways

Satellites serve critical roles in modern society, affecting everything from GPS navigation to weather forecasting.
The Hack-A-Sat contest aims to address satellite security vulnerabilities with the involvement of hackers and engineers.
Cyber attacks on satellites can lead to significant economic consequences and disruptions in daily operations.
Understanding satellite architecture is crucial to developing strategies for defense against potential hacking incidents.
Hack-A-Sat 4 represents a leap forward as it includes an actual satellite launch, pushing the boundaries in satellite security challenges.

Summary

Introduction to Satellite Security

The episode opens with host Kerry Parker introducing Aaron Mark from Aerospace Corporation, discussing the exciting realm of space technology security, specifically focusing on satellite hacking. Parker urges listeners with Apple devices or ASUS routers to update them due to newly discovered security vulnerabilities.

Hack-A-Sat Contest Overview

Parker and Mark discuss the Hack-A-Sat contest, an initiative aimed at crowdsourcing answers to satellite security concerns through a Capture The Flag (CTF) competition. The event encourages hackers to explore methods of securing satellites, which are integral to communication, navigation, and various monitoring functions.

Role and Importance of Satellites

Mark describes the critical role satellites play in our daily lives— from GPS systems facilitating global communications to disaster management and environmental monitoring. He emphasizes the complex, interconnected systems which rely on satellites, shedding light on lesser-known applications such as fire detection.

Risks and Impacts of Satellite Vulnerabilities

The talk highlights the dire consequences of satellite attacks, such as the loss of GPS impacting economic activities worth a billion dollars a day. Mark discusses historical cyber events, demonstrating the vulnerabilities of these systems and the potential fallout from disruptions.

Logistics of Hacking Satellites

Mark describes the multi-faceted approach needed for hackers to breach satellite security, addressing the challenges of attacking systems thousands of miles away. He discusses the different segments of satellite architecture (ground, link, space, user) each presenting unique risks and mitigations.

Understanding Cybersecurity in Space

The discussion dives into the nuanced differences between traditional cybersecurity and satellite cybersecurity. Mark explains the constructs of vulnerability assessments in a space environment compared to terrestrial systems, alongside challenges in debugging and understanding incidents involving satellites.

The Future of Hack-A-Sat

Mark shares exciting prospects for Hack-A-Sat 4, where an actual satellite, named Moonlighter, will be launched into orbit. This new phase not only invites hackers to test their skills on real satellite technology but also focuses on development and innovation within the space domain.

Education and Community Engagement

Parker and Mark close by discussing the educational initiatives surrounding Hack-A-Sat. They highlight the importance of collaboration between cyber experts and space engineers, encouraging a community approach to tackling satellite security challenges.

Show notes

Right now there are thousands of satellites orbiting above our heads performing crucial tasks. At the end of the day, they're just computers running software - albeit at thousands of miles up and thousands of miles per hour. Can they be hacked? What are the dangers? Aaron Myrick and the Hack-A-Sat team are trying to answer those questions. And they're doing it by launching an actual satellite into low earth orbit for this year's DEF CON hacking contest and asking talented hackers from around the world to take their best shot.

Interview Notes

Moonlighter Fact Sheet: https://aerospace.org/fact-sheet/moonlighter-fact-sheet

Hack-A-Sat 4: https://hackasat.com/moonlighter/

Hack-A-Sat GitHub resources: https://github.com/deptofdefense/hack-a-sat-library

Space-Track.org: https://www.space-track.org/

Moonlighter launch: https://vimeo.com/833432259/4ba9b0927b

Further Info

Amulet of Entropy (DEF CON badge): https://amuletofentropy.com/

Nominate someone for a challenge coin: https://fdsd.me/quest

Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch

Give the gift of privacy and security: https://fdsd.me/coupons

Send me your questions! https://fdsd.me/qna

Support our mission! https://fdsd.me/support

Subscribe to the newsletter: https://fdsd.me/newsletter

Check out my book, Firewalls Don’t Stop Dragons: https://fdsd.me/book

Generate secure passphrases! https://d20key.com/#/

Table of Contents

Use these timestamps to jump to a particular section of the show.

0:00:36: Update Apple devices, ASUS routers

0:01:03: Misc updates

0:03:08: Interview setup

0:04:19: What is Aerospace Corp and what do you do there?

0:08:25: What are things satellites do that we might not think about?

0:13:42: Break down some key stats on satellites for us.

0:17:27: How might we be affected by loss of satellites?

0:21:31: How do you hack an orbiting satellite, logistically?

0:24:38: What sorts of attacks are we worried about?

0:26:58: How do we debug problems in orbiting satellites?

0:30:55: How is hacking a satellite different from a computer?

0:35:23: What happens to old satellites?

0:41:26: What is the Hack-A-Sat program about?

0:43:35: How did the target systems work, prior to this year?

0:46:39: What have we learned so far from past contests?

0:51:24: What's new with Hack-a-Sat 4?

0:52:43: When and how will Moonlighter launch?

0:58:30: What kinds of things can I hack on Moonlighter?

1:00:43: What's the future for Hack-a-Sat?

1:03:26: Wrap-up