funsec mailing list archives

Renesys: Tracking a Plane Flight via BGP Updates


From: "Fergie" <fergdawg () netzero net>
Date: Thu, 11 May 2006 15:50:19 GMT

This might just be interesting to us hardcare routing geeks,
but I found this article fascinating.

The security implications are an exercise for the reader. ;-)

Via the Renesys Blog.

[snip]

I just saw my plane cross the mid-Atlantic, not by looking out the window, but by watching routing updates cascade 
across the Internet. I'm writing from a Lufthansa jet right now, travelling from Munich to Boston. This plane offers 
the (relatively) new Connexion by Boeing wifi + satellite Internet service. It's seriously cool stuff - high latency, 
but absolutely functional. I've been aware of it for a while since the Boeing folks did a NANOG presentation about it 
last year. But this is the first time I've been able to use it.

Renesys has been tracking Internet updates for a very long time. We set realtime routing alerts to tell us when changes 
in the Internet's structure are a violation of someone's routing or security policy. We have known that due to 
satellite connectivity, the Internet routing tables could be used for tracking aircraft and the like. But this is the 
first time I've been on an Internet-connected vehicle, travelling 950kph, that changed its connection to the Internet. 
If this interconnection architecture is used by others, this could signal the rise of all kinds of interesting uses of 
the global Internet for monitoring.

I was able to see the mid-Atlantic shift because the plane I'm on withdrew its routes from the European communications 
satellites and re-announced them in North America. The Boeing engineers faced some interesting challenges in designing 
this system. They wanted a wifi-delivered platform that was easy to use. They also wanted fully-functional 
connectivity. They were targetting business customers so simple web connectivity was not enough: customers would want 
VPNs, ssh and all manner of connections to corporate applications. And finally, if this service was going to work 
properly, it would have to be as low-latency as possible, not just high bandwidth.

[snip]

More of this great tech article here:
http://www.renesys.com/blog/2006/04/tracking_plane_flight_on_inter.shtml

- ferg


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg () netzero net or fergdawg () sbcglobal net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: