Follow your favourite podcasts, listen offline and in the car with CarPlay and Android Auto, and always pick up where you left off. Free to try.
Big thanks to DeleteMe for sponsoring this video. Protect your business with DeleteMe by using the following Link: https://joindeleteme.com/bombal-biz You’ll also get a free year of social media protection for every seat you purchase.
How do you hack a satellite? The attack can start on the ground. Watch a mission control demo showing how web vulnerabilities can change a simulated spacecraft’s orbit.
At DEF CON, I meet Milenko and Andrzej, the authors of The Spacecraft Hackers Handbook, to explore spacecraft cybersecurity. They explain the infrastructure behind satellite operations, what the Via sat attack actually targeted, and why protecting spacecraft requires both security and space engineering knowledge. Then Andrzej demonstrates previously patched vulnerabilities in an older version of mission control software. Using Burp Suite, he shows how path traversal exposes configuration files and how cross-site scripting can trigger a spacecraft command through an operator’s browser.
We cover: • Why satellite security extends to systems on the ground • How path traversal and XSS affect mission control software • Telemetry, telecommands, CCSDS and the SDLS security layer • How GPS supports timing as well as navigation • Python examples, a prepared lab VM and learning resources • The authors’ nine satellite cybersecurity challenges on Hack The Box • Skills and career opportunities in spacecraft cybersecurity
The demonstration uses a spacecraft simulator. The vulnerabilities shown were disclosed to the vendor and patched.
// Link to No Starch Website for Milenko and Andrzej’s Book// The Spacecraft Hacker’s Handbook: https://nostarch.com/spacecraft-hacke... Use Coupon Code SPACE25 for 25% off The Spacecraft Hacker’s Handbook.
// MY STUFF // https://www.amazon.com/shop/davidbombal
// SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
// MENU // 0:00 - Intro 0:52 - How Russia hacked satellites 02:12 - The Spacecraft Hacker's Handbook 03:23 - VisionSpace 04:04 - DeleteMe sponsor segment 05:29 - Growth in satellites launched 06:28 - What would losing satellites mean 07:12 - Protocols explained 08:00 - Misconceptions of satellite hacking 09:28 - Threat level of satellite hacking 10:39 - Upcoming demo explained 12:20 - Who is the book for? 16:46 - A gap 17:48 - Other recommendations 19:49 - Hacking satellite demo overview 20:34 - Hacking satellite demo walkthrough 33:54 - Demo next steps 34:29 - Demo walkthrough continued 38:51 - Conclusion
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Disclaimer: This video is for educational purposes only. #sattelitehacking #spacecraftcybersecurity #defcon