Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 


Forgot your password?
Close
typodupeerror
×
Encryption The Military United States IT Technology

Most US Drones Still Beam Video Unencrypted 138

Posted by timothy from the hey-it-beats-satellite-piracy dept.
An anonymous reader writes "Four years after discovering that militants were tapping into drone video feeds, the U.S. military still hasn't secured the transmissions of more than half of its fleet of Predator and Reaper drones, Danger Room has learned. The majority of the aircraft still broadcast their classified video streams 'in the clear' — without encryption. With a minimal amount of equipment and know-how, militants can see what America's drones see."
This discussion has been archived. No new comments can be posted.

Most US Drones Still Beam Video Unencrypted More

Most US Drones Still Beam Video Unencrypted

Comments Filter:

  • Link is spam (Score:5, Informative)

    by Anonymous Coward on Friday November 02, 2012 @10:48PM (#41861835)

    The real Wired article is here.
    http://www.wired.com/dangerroom/2012/10/hack-proof-drone/

    • Wireds 'Dangerroom' isn't any better than Coinurl.com. Same scaremongering.

      Yes, the feed is apparently unencrypted. But OMGWEREALLGONNADIE is the standard modus operandi of Dangerroom.

  • Moderator asleep at wheel?

  • Spaceballs: When will then be now? Soon. (Score:5, Funny)

    by retroworks ( 652802 ) on Friday November 02, 2012 @10:51PM (#41861863) Homepage Journal
    I can picture the Taliban watching the back of their heads on a screen, like in the Mel Brooks film. "Prepare to fast forward!" http://tinyurl.com/cqbwm5y [tinyurl.com]

  • Achmed, check this out, we're on TV! (Score:5, Funny)

    by Freddybear ( 1805256 ) on Friday November 02, 2012 @10:55PM (#41861883)
    Wait, are those cross-hairs? Oh shit...

    • Re: (Score:2, Interesting)

      by girlintraining ( 1395911 )

      While amusing, the ability to watch the video unencrypted probably won't save you from being blown up at that point. What it will do, however, is tell your buddies where the drone took off, where it landed, and what areas are under surveillance. Now if I were an evil scheming terrorist, I'd wait until the drone passed by with its surveillance rig, and once it recorded something the top brass would consider a "target", shuffle in a bunch of women and children in the back way, and then evacuate the building.

      • Yes, sir, Officer Obie, I cannot tell a lie, I put that kid under that pile of rubble..

      • Re: (Score:2, Informative)

        by Anonymous Coward
        As someone who trains on ISR feeds in Afghanistan, I can tell you that's not how it plays out. If they can't put eyes on target, and confirm 100% there's no collateral, there's no shot. It's written into the Rules of Engagement, and I've watched countless times where a bad guy runs into a house and we waive off the ISR.

        Back to the article, a bad guy sitting there with an antennae, trying to grab ISR RF is going to have a very short life span.

        • Re: (Score:2)

          by Xest ( 935314 )

          So how does it go wrong so often? I'm not trying to stir shit up, but the US has an abysmal track record on civilian casualties so if the rules of engagement are followed as strictly as you suggest then I'm intrigued to know where it goes wrong, and why.

          The problem is that whilst the rules of engagement are exactly what should be done, I'm not convinced they are. You only have to look at the raw original uncommented Wikileaks Apache video to see that at least Apache pilots give not the slightest shit for ve

      • Most of the intended audiences for the "OMG the American infadels killed innocent women and children" stories aren't sophisticated enough to actually watch a video anyways.

      • Re: (Score:2)

        by dbIII ( 701233 )

        where the drone took off, where it landed

        At the great big airstrip at a US base hundreds of miles away that everyone and their dog already knows about.

        shuffle in a bunch of women and children in the back way, and then evacuate the building. When Sir Bombsalot comes knocking, have camcorders standing by to show how the bastard americans are targeting innocent women and children.

        Nobody with political power really cares anymore. That shark was jumped early in the Iraq war when there was the proud announcement

    • Reminds me of Tom Clancy's "Executive Orders" (from the Jack Ryan Saga).

  • With any government agency involved (Score:1)

    by Anonymous Coward
    Four years is probably barely enough to form a committee to plan the budget for a new feature. Maybe in another four years they'll actually start looking for an implementer.

  • Neither is the control software. (Score:1)

    by Anonymous Coward

    I'm controlling one right now. Don't believe me? Post your address, I'll buzz your house.

    • Re: (Score:2, Funny)

      by Anonymous Coward

      1600 Pennsylvania Avenue Northwest Washington, DC 20500

  • ...these drones are build so cheap, they have the same wired remotes that their civilian counterparts my cheap uncle would buy me ffor Christmas - the ones that only turn in reverse.

    Why yes, I'm till bitter about that.

  • Any more details about this? My guess is a cheap USB DTV receiver.

    • Re:Any technical details? (Score:5, Insightful)

      by Pinhedd ( 1661735 ) on Saturday November 03, 2012 @12:23AM (#41862335)

      Encryption, real time, and noisy signals don't mix well. This isn't a youtube video in which the client can request that the server resend a packet that contained an error. Unencrypted video streams are fairly error tolerant as an error will only manifest itself as a slight artifact for a few short frames. Strong encryption schemes are not error tolerant, a non-correctable error would result in one or more blocks of data being entirely unusable.

      A stream cipher could be used instead of a block cipher but a stream cipher presents added difficulties in that not only would the bitwise/bytewise encrypted transmission (as opposed to blockwise) have to be tracked, but it would have to be tracked in sync with a key. If the key repeats, it can be determined with a little bit of work in the same fashion that an RC4 key can be determined to break into WEP protected networks.

      • Perhaps you didn't read the article but its UNENCRYPTED. What hardware are they using to receive the signal?

        • You misunderstand (Score:5, Insightful)

          by backslashdot ( 95548 ) on Saturday November 03, 2012 @03:07AM (#41862855)

          You misunderstand. Pinhedd is saying that with an unencrypted signal .. unlike a digital encrypted signal .. if the signal is weak and lossy you can still see usable information.. it may have image noise .. but you'll be able to make out rough outlines. But if the signal is encrypted .. with most forms of encryption you either get a perfect imagery or nothing. Either you will see a clear image or random total image noise. If you make the signal more resilient to noise, the weaker the encryption quality. This also means you lose out on range too since you need a clear strong signal.

          We need better ways to encrypt.

          • We need better ways to encrypt.

            We need better defense against drones... For once, think of the children [blogspot.com]

          • Nobody cares what he's saying, it's a lot of shit. That sort of thing was true with analog but it is not at all true with digital. It doesn't matter if it's encrypted or not, any lost data and you throw away the entire packet.

            • any lost data and you throw away the entire packet.

              There are plenty of techniques which mean that you can recover from bit errors even in digital signals. Look up e.g. "forward error correction". Fortunately these techniques work on both encrypted and unencrypted systems.

          • Re:You misunderstand (Score:5, Insightful)

            by mysidia ( 191772 ) on Saturday November 03, 2012 @09:12AM (#41863915)

            Use a reliable strongly encrypted side-channel for controlling crypto of the primary channel.

            Use a "one-time pad" for the video channel used as a "multi-time pad instead", XOR each block by a random value preloaded on both sender and receiver, each block also XOR'ed by a value negotiated over an encrypted control channel protected with a shared key, pick a new XOR value every 10 - 20 seconds to transmit over the encrypted channel, for the next N seconds of video, and a number of One time PAD bits to skip in the transmission, also transmit a value indicating a pattern for a certain number of 'extra' bits of noise or false signal to be included --- possibly a FALSE unencrypted video stream transmitted alongside the real one.

            Include enough "one time pad" / random data stored on a memory card, for 18 - 24 hours of video, then recycle the pad.

            One time pads are resilient against 'noise' because they result in the same number of bits noise in the output.

            The non-sophisticated adversaries are not likely to defeat even an imperfect implementation. Strictly speaking, any reuse or multiple use of a one time pad makes the stream immediately decipherable by a potential adversary, who has successfully recorded enough ciphertext encoded with the same pad bits, in that they can determine parts of the one time pad.

            The possible range of original plaintext for video are much larger than readable human language -- any arbitrary value. Even with simple 'scramble every bit by XORing it with a fixed value' will be extremely tough for unsophisticated adversaries, trying lots of XOR values to decrypt is easy -- ANALYZING the output of every value that you try, requires an adversary to have some serious computer vision technology, to decide if the output of each attempted value is the video stream being searched for or not.

            However, 'skipping' a certain number of pad bits, for every transmission, introduces unpredictability, and means only a proportion of bits in a frame might be reused, that requires an adversary not only have more than 48hours recorded data but also conduct complex difficult matching, in the process of trying to figure out which bits might be reused --- only a percentage of bits in the transmission may be reused, and by the time they have conducted the search, the drone's mission is done.

            XOR'ing every block over a period of time by the same reference block, is also immediately decipherable by an adversary, who can conduct an analysis to figure out what the XOR block is.

            However, combining XOR with a "one time" or "multi use" pad, significantly complicates the process of attempting to figure out the XOR key. No analysis of that is possible without first figuring out the random pad data of a block.

            And the simple / militant adversaries, are not likely to break any level of encryption. Or at least, if they do, by the time they were able to decode the video stream: again, the mission will already be over by the time they get it.

            And they are in no better position to decode the next video stream (assuming new keys and random pads are loaded on every drone, before its next mission).

            • Interesting post. This reiterates a principle of cryptography: how much do you need? For a sports results that will be publicly announced in 48 hours, encryption that takes a week to break might be plenty. For a trade secret that won't be of any use in a year, encryption that takes 5 years to break might be plenty. For a predator video stream, even minutes or hours might be vastly better than nothing.

          • I do not understand why an encrypted digital signal would be less robust than an unecrypted digital stream; unless your implying that the unencrypted stream is also analog.

      • Add redundancy (something like par2), transmit more information- well, this requires faster links. Then you can recover more frames. Don't encrypt entire monolythic stream, encrypt each 10 second chunk of video separately (or something similar). If one chunk gets garbled and unecryptable, you can still see others. If you have two way link, you can monitor link quality and adjust the amount of recovery/redundant information sent. Or adjust resolution/quality to lower the amount of information sent.

        Anyway,

      • Sorry, this is vaguely true, but dead wrong in practice. Any block of unencrypted data received successfully could have been encrypted byte-for-byte. Only key negotiation requires additional data, and this is a truly miniscule amount relative to a video feed of any resolution (assuming a reasonable renegotiation period)

        • Thinking about it more, key negotiation shouldn't even be necessary.

          You need a pre-determined set of sufficiently-large encryption keys on a removable module of sorts, like a USB key. Produce the key-set USB-key in pairs, for transmitter & receiver. Encryption cycles through the key-set at a predetermined schedule. Timing is managed with an internal clock. Imprecision of timing at change-over intervals is handled by simple dual-decryption attempts, and determination of correct sequence by CRC or som

        • That's called a stream cipher, which I mentioned in my post.

  • The real trick is that the gov can track video receiving equipment (by the frequencies they use to decode the video) - so anyone attempting to receive video from a drone, is probably a worthwhile target :) Gotta love counter intelligence. Remember when we discovered (and thus told the russians) spent uranium bullets did not work? You guys are so gullible.

    • The real trick is that the gov can track video receiving equipment (by the frequencies they use to decode the video)

      What is this some Michael Bay "the signal that hacked your network" shit? How could they detect a passive receiver?

      • Re:play chess much? (Score:5, Informative)

        by Lloyd_Bryant ( 73136 ) on Saturday November 03, 2012 @05:44AM (#41863279)

        What is this some Michael Bay "the signal that hacked your network" shit? How could they detect a passive receiver?

        Because the receiver ain't quite as "passive" as you think. Google for "local oscillator" for an example.

        Digital systems tend to generate noise on predictable frequencies as well - if a device has a chip that's clocked at a given frequency, then somewhere in that device is an oscillator used to generate that clock (though it may or may not be working at that particular frequency).

        The only truly passive receiver is one that is completely shielded to prevent it from radiating any of this noise. But you *have* to have a gap in the shielding in order for the incoming signal to be received. So building an undetectable receiver is not quite as easy as you might think.

      • The real trick is that the gov can track video receiving equipment (by the frequencies they use to decode the video) What is this some Michael Bay "the signal that hacked your network" shit? How could they detect a passive receiver?

        I don't know about applying this to video but this is definitely real and is how LEOs detect radar detectors in states that ban them. This wikipedia article [wikipedia.org] has a description of how it works. The short form is that radar detectors use superheterodyne [wikipedia.org] receivers to detect the radar signal. These receivers are a lot more cost effective than trying to process the actual radar signal. Superheterodyne receivers need a local oscillator. This oscillator is not shielded so it leaks signal and that signal can be

    • While its true that passive receivers and signal amplifiers do reflect or emit parts of the signal that they are receiving, it's not easily detectable unless you know what you're looking for and are close to the target.

    • Wow, if you can track a highly directional satellite dish antenna, I would be very impressed.

    • Modded a troll? I bet its my signature that offended you fucking retards.

  • Unencrypted Decoy (Score:1)

    by Anonymous Coward

    Wouldn't it make sense to leave some drones unencrypted, so the enemy can think they are seeing everything? If everything was encrypted, they might try harder at decryption.

    Or you can let them see unencrypted signals of a trailer park, while your encrypted drones circle a hillside. If the enemy sees the trailer park on his eavesdropped TV, he'll comfortably sit outdoors on that hillside, knowing nothing threating has him in its sights.

    I think it's a brilliant strategy to leave them unencrypted.

  • So what? (Score:2, Insightful)

    by jimmyswimmy ( 749153 )

    So what if the video is transmitted in the clear? What does that get you...

    - against a sophisticated enemy? They already know you're there (radar, DF on the transmitted signal). You're flying around in a racetrack centered on your target, so even without the video they know roughly what you're looking at. Problem is solved by an enemy air-to-air missile, or they ignore you and watch you watching them.

    - against an unsophisticated enemy? They don't even know to look for the signal in the first place.

    - ag

    • I would think encryption is very easy if you want to do it dirty with random number seeds without slowing down the speed of transfer except an int. You just send the data stream assembled in different ways based on the random numbers you have off the seed(the int). Then you disassemble the stream based off the random number seed that gives you the instructions to disassemble the stream back into the unencrypted form. If you do it intensively enough, the video should be a static mess to watch.

      If the sec

      • These are satellite streams which run constantly. The receiving computer would have to be able to track and lock the start of the stream and/or a position in the stream before it could reassemble the packets. If a packet is missed, then the receiver will lose its lock. Thus, frame indexes of some sort would have to be used to help the receiver reacquire the lock. Since there are only so many possible ways to reassemble a real time data stream it's only a matter of time before someone else figures out how to

        • When you put it like that, it makes sense. It is perfectly reasonable to rewrite encryption protocol every 2 weeks or so since it only takes a few hours of coding. But other countries might make a huge deal out of breaking your code like they're doing something special. Why give em that right to brag? Just don't encrypt at all.
      • Why would you do this? We already have super-fast stream ciphers designed specifically for situations like this. There are no advantages to your method and quite a few disadvantages. Crypto is one of the areas where it is, as a rule of thumb, very bad to roll your own.

  • The art of war (Score:1)

    by Anonymous Coward

    It is probably done to strike fear into those who are thinking of joining or feel the effort is worth it, when they know at anytime there is a drone waiting to kill them. Maybe after a few years they will encrypt some of the video feeds and intentionally leave others without encryption. Not sure why this is a big deal or even worth reporting. The US is fully aware of how tech savvy the middle east is, they have some of the best hackers, so if you have a silly notion that they are dumb neanderthal like peopl

    • It's a "needle in a haystack" situation so the "Why is the US fucking around allowing them to live?" question is answered by the problem that they have to be found first, and there is no magic to find them quickly, only hard (and deadly) work.

  • True Story (Score:3, Informative)

    by Anonymous Coward on Saturday November 03, 2012 @01:24AM (#41862543)

    I was deployed in Afghanistan in 2010, had a bunch of prototype "advanced" receiver equipment that I was volentold to test. When I asked how I'm supposed to load keys into the decoder, "Oh you don't need that" Confused, I looked in the unit to see the keyfiles empty. Somehow the unit still worked. After playing with the equipment, even in-theater, our drones were broadcasting completely in the clear on UHF. Whenever there was one overhead, I could simply fire up this heavy POS attached to my kit, and watch us on the ground walk around, (Or whatever female medic on one of the local FOBs the UAV operator was stalking)

    Actually most of the time, the UAV was watching the chicks on the big FOB.. Yeah.

  • Breach of Privacy! (Score:3, Insightful)

    by krashnburn200 ( 1031132 ) on Saturday November 03, 2012 @02:07AM (#41862697)
    Almost as bad as if they had revealed the number of Americans they spied on.

  • Hey, look at this, Ali, you're on TV!

  • OMG (Score:4, Funny)

    by Poorcku ( 831174 ) on Saturday November 03, 2012 @06:44AM (#41863431) Homepage
    Unencrpyted and barely legal! LOL

  • you don't need to encrypt your stuff.

Slashdot Top Deals

"If it ain't broke, don't fix it." - Bert Lantz

Close