Why Banning in Flight Wi-Fi is NOT a Solution
With the airlines, TSA, DHS and those in between creating such hurdles and uncomfortable travel with flying, I wonder how long before people just say screw flying. This latest regarding the need to ban wi-fi is not only absurd from a technical standpoint, but proof that we have people with severe lack of technical understanding in charge of very important areas of society.
The wi-fi that exists on planes may have some slight potential threat but considering that in order to use the on-board wi-fi, a user must first signup with whatever company is providing the service. That process requires using a credit card and keying in personal information. Could a terrorist go through that process? Sure, but why would they want to waste the time or even the risk of getting flagged by a credit card company (via DHS targeting software)? There are much simpler ways that they could achieve their goal. The banning of the commercial wi-fi service on board a flight is simply another hassle and inconvenience to those traveling and does nothing to stop a determined bad guy.
If a terrorist was going to utilize wi-fi for an attack operation, they could simply create a adhoc wi-fi network of their own, complete with security mechanisms to insure only they had knowledge and access to that connection. This concept would work even if airlines banned commercial wi-fi onboard. Likewise, just banning the use of wi-fi on an aircraft won’t inhibit a “bad guy”, since I seriously doubt they will follow the rules. There is also no way for flight attendants to know whether a person is utilizing a private adhoc wi-fi connection.
So how would this ad-hoc wi-fi work? Here is a simple example of using a device to talk to a parking meter which contains a micro-controller. I won’t go into the specifics of how it can be done, but this is def. a good starting point for the concept.
The bigger picture here is that wi-fi is not even required, it is just a technology being targeted as a “bad guy enabler”. There are dozens of ways a “bad guy” could take down the aircraft with either a technology based solution or a non-technology based solution.
From the technology based, there is Bluetooth, Mesh, altimeter (both watch and app based), gyroscopes just to name a few. This does not even take into consideration how one could hack medical based devices that could be taken on board trains, planes, buses, etc. with much less scrutiny than personal gadgets. For instance a talented hardware hacker could modify a portable insulin pump with a miniature wi-fi or micro blue-tooth transmitter to be a controller or trigger. That is the simple aspect.
What happens when humans are using electronic tissue interfaces in their bodies and again, these could be augmented or modified to act as a weapon? Will they be banned from flying?
There are a slew of non-tech threats as well, which I shall refrain from posting, in case the “bad guys” might not have already thought of it.
So this quick post is just to illustrate that banning the commercial wi-fi on planes is not the answer to solving potential threats. It does not deter nor does it impede the “bad guys”, it merely pisses off the consumer who is already suffering from all the nutty TSA, DHS, and airline guidelines.
Currently, I feel the terrorists have already won. They set off a fear epidemic in the US and the US government has just propagated that fear even further with all the crazy bans on airline travel.
If the “bad guys” want to down an aircraft, all the bullshit bans that have been put in place already will not stop them. Why? Anything can be made into a weapon and the plane itself is full of enough items that a few determined people could do a MacGyver and make it happen.
Sure, it can be argued that explosives, liquids, etc. would make it easier and I am not arguing to not perform those checks. What I am arguing is that technology is not the problem, the people are the problem. Do better background checks on those who make reservations. Look for patterns in lifestyles of people. Look at what Israel has in place. But don’t ban wi-fi or other technology because it “might be possible” to weaponize, since anything can be weaponized - even a fast acting bio-virus with a human carrier.