Re: WP: Russian military behind hack of satellite communication devices

2022-03-25 Thread Sean Donelan
On Fri, 25 Mar 2022, Eric Kuhnke wrote: I'd be willing to bet that this was either a malicious firmware push that was applied to the CPEs without proper authentication methods being in place, such as CPEs being able to verify a crypto key signed firmware signature, or a configuration file pushed

Re: WP: Russian military behind hack of satellite communication devices

2022-03-25 Thread Eric Kuhnke
Point to multipoint / TDMA contended access VSAT hub and CPE networks are well known for not having much security. In many setups the remote CPE modems, which are built from a fairly cheap BOM of hardware, implicitly trust the hub linecard. Have seen this with 3 different vendors' platforms. I'd

WP: Russian military behind hack of satellite communication devices

2022-03-24 Thread Sean Donelan
Not yet official, but the U.S. intelligence community seems to continue its rapid release of intelligence. I think everyone was expecting it, especially since Viasat executives declined to say it earlier this week at the SATCOM 2022 conference.