Trojan-Infected Computer Linked To 2008 Spanair Crash 324
An anonymous reader writes "Two years ago, Spanair flight JK-5022 crashed shortly after takeoff in Madrid, killing 154 of its 172 passengers and crew. El Pais online newspaper reports that the ground computer responsible for triggering an alarm after three failures are reported in a plane failed to do so. The computer was infected with trojans (Google translation of Spanish original)."
Shit. (Score:5, Funny)
Re:Shit. (Score:4, Insightful)
Anyone, though, using Windows in an environment where it could trivially be infected(ie. internet connected or contractors doing flash drive upgrades) really needs to be shown the door, yesterday. I'm also not sure why there would be "a" computer responsible for raising the alarm. Commodity x86 gear is pretty reliable for what you pay; but it isn't that reliable. If the safety of one or more 100 million+ aircraft, and everybody on board, is at stake, why are there not multiple systems, all independently capable of raising the alarm?
Re:Shit. (Score:4, Insightful)
If the safety of one or more 100 million+ aircraft, and everybody on board, is at stake, why are there not multiple systems, all independently capable of raising the alarm?
You're talking about an industry who would likely charge passengers for use of the bathroom, if they could get away with it. Why do you think there aren't multiple systems?
Re: (Score:3, Insightful)
Re: (Score:3, Informative)
Actually two, operational blowout preventers were called for in the regulatory specifications. Turns out the single blowout preventer had no battery juice available. The system is supposed to work, by the batteries closing the hole automatically when detection of the control monitoring software fails. But if the batteries to the sole preventer don't have the juice when needed, bad things can happen. Someone thought the costs vs. risks were negligible, so they settled for less.
Re: (Score:3, Insightful)
You're talking about an industry who would likely charge passengers for use of the bathroom, if they could get away with it.
And why would they blame their own, if it's easier to blame it on the OS?
Re: (Score:3, Insightful)
Work with me here. This is complicated.
Someone posted:
"That's not regulation, that's cost minimization. (A free toilet is significantly cheaper than cleaning up after the alternative...)"
Flight safety and maintenance are not cost issues per se. For an airline with a clue, they are about maximizing profit and reducing inefficiency.
If a plane crashes due to maintenance issues, you have these consequences:
- Lost revenue. Passengers will be wanting refunds. The aircraft is not available for future flights,
Re: (Score:2)
Re: (Score:2)
Do you really think Governments are going to ban Windows?
The more likely result, if we make all non-technical people aware of this particular instance: Government legislature that says *all* computers must use TPC such that they can only run programs that are created by authorized entities and signed with certs.
This is a one-way ticket to the cessation of all innovation in the field of computing.
We shouldn't even give time to this here.
Re: (Score:3, Insightful)
This is a one-way ticket to the cessation of all innovation in the field of computing.
Rubbish.
Re:Shit. (Score:5, Insightful)
i think MS also disclaims any responsability, that should tell you enough about windows' fitness for mission-critical stuff
regardless of law, putting any mission critical system (especially when lives depend on it) on a windows machine should be chargeable with criminal negligance, and in this case, manslaughter
Re: (Score:3, Insightful)
If they couldn't properly isolate a mission critical windows system, guess what? They almost certainly wouldn't be able to properly secure a Linux or OSX system either. Relying on the small amount of Linux based malware for security? That sounds an awful lot like security by obscurity to me. Relying on the rights system? There's plenty that you could do without admin rights that would potential suppress or interfere with an alarm
Re:Shit. (Score:5, Insightful)
Re:Shit. (Score:5, Insightful)
Re: (Score:2, Insightful)
Re: (Score:2, Funny)
Re:Shit. (Score:5, Funny)
Did you remove the networkcable too?
No can do, my friend. Anti-virus software is useless without a network connection to keep the virus definitions up to date.
Re: (Score:3, Interesting)
But if you don't have a network connection (and the machine is physically secured to protect the USB ports and removable media drives), then you don't NEED anti-virus software. Without a means for a virus to get onto the machine, it should be perfectly safe.
Having a live network connection only for the purpose of updating an unnecessary AV package provides a route of infection in itself. Unless the machine needs a network connection for another reason, then it shouldn't be connected to a network.
I maintain
Just need a super cable (Score:4, Funny)
Re: (Score:2)
Or you could have simply disabled USB or unpluged them from the motherboard. Now you've got heat issues to worry about.
Re: (Score:3, Interesting)
I'm not sure about Norton, but Symantec AV has gone beyond simple virus stuff for a while now.
Using Symantec we didn't block USB entirely, but it is possible. It did block the standard USB type attacks though. When USB drives where plugged in the system logged all activity including files and sent them up to the central server.
Better than a drawer would have been a nice server rack...of course physical security is important. Someone could steal the drive and modify it and then put it back in. But I would th
Re:Shit. (Score:5, Insightful)
Re: (Score:3, Interesting)
See, this is why government oversight is so expensive. Regulations have to written for morons and swindlers. Here's the US Government standard.
1) Class A Vaults.
(a) Reinforced Concrete. The wall, floor, and ceiling will be a minimum thickness of eight inches of reinforced concrete. The concrete mixture will have a comprehensive strength rating of a least 3,000 psi. Reinforcement will be accomplished with steel reinforcing rods, a minimum of 5/8 inches in diameter, positioned centrally and spaced horizontally and vertically 6 inches on center; rods will be tied or welded at the intersections. The reinforcing is to be anchored into the ceiling and floor to a minimum depth of one-half the thickness of the adjoining member.
(b) Modular. Modular panel wall, floor, and ceiling components, manufactured of intrusion-resistant material, intended for assembly at the place of use, and capable of being disassembled and relocated meeting Underwriters Laboratories, Inc. (UL) standards are approved for vault construction.
(c) Steel-lined. Vaults may be constructed of steel alloy-type, such as U.S. Steel T-1, having characteristics of high-yield tensile strength or normal structural steel with a minimum thickness of 1/4 inch. The metal plates are to be continuously welded to load-bearing steel members of a thickness equal to that of the plates. If the load-bearing steel members are being placed in a continuous floor and ceiling of reinforced concrete, they must be firmly affixed to a depth of one-half the thickness of the floor and ceiling. If the floor and/or ceiling construction are less than six inches of reinforced concrete, a steel liner is to be constructed the same as the walls to form the floor and ceiling of the vault. Seams where the steel plates meet horizontally and vertically are to be continuously welded together.
(2) Class B Vaults.
(a) Monolithic Concrete. The wall, floor, and ceiling will be a minimum thickness of four inches of monolithic concrete.
(b) Masonry Units. The wall will be brick, concrete block, or other masonry units not less than eight inches thick. The wall will extend to the underside of the roof slab above (from the true floor to the true ceiling). Hollow masonry units shall be the vertical-cell type (load bearing) filled with concrete and metal reinforcement bars. The floor and ceiling must be of a thickness determined by structural requirements, but not less than four inches of monolithic concrete construction.
(3) Class C Vaults. The floor and ceiling must be of a thickness determined by structural requirements, but not less than four inches of monolithic concrete construction. Walls must be not less than eight inches thick concrete block or hollow-clay tile or other masonry units. The wall will extend to the underside of the roof slab above (from the true floor to the true ceiling).
source [usgs.gov]
Re: (Score:3, Insightful)
Re: (Score:3, Insightful)
Re: (Score:3, Interesting)
Except that this was not really a mission critical system - it was a fault logging system in the maintenance department. So far as one can tell from a machine-translated popular article, it was meant to log if a single aircraft had a number of different faults logged close together, because faults at different stations might not otherwise get correlated. As such, it is basically an IT system with response requirements in minutes, not a real time system with fault tolerance requirements. One of the systems w
Re: (Score:2, Insightful)
Re:Shit. (Score:5, Insightful)
Considering that 154 people died because this system did not issue the warning it was supposed to, I would say it most certainly IS a mission critical system, it just isn't treated as one.
Of course, it sounds like the whole thing was a tragedy of errors. The pilot should have seen that slats and flaps were in the wrong position, the computer in question should have flagged the plane for grounding, the on board computer should have raised the alarm. There should have been maintenance records independent of the computer that should have raised the flag on pre-flight. Not one of those things happened and people died as a result.
I would call it a comedy of errors except that it's hard to call 154 deaths a comedy.
Re:Shit. (Score:4, Insightful)
It's odd to me how easily you write off a system that caused the death of ~150 people as "not really ... mission critical."
Re: (Score:3, Insightful)
The savings in hardware and software over aspects of a traditional OS was amazing... and thats how an off-the-shelf OS could get into mission critical area.
Marketing has its lists of areas to wine, dine, seduce and penetrate.
Re: (Score:2)
There are, but they don't guarantee that the person writing the code that runs on them is any smarter than the office cheese plant.
Re:Shit. (Score:5, Interesting)
Those mission-critical-designed-for OSes are, unfortunately, likely to be secure by obscurity. Something like vxWorks or QNX is not a big enough target for malware writers or blackhats, but I'm quite sure those platforms are full of holes simply because they are not very exposed. I'd say that linux, perhaps with realtime extensions, would be a somewhat better platform -- it's exposed way more, and most of the holes have been patched.
Re: (Score:2)
Does ground control really need realtime scheduling? It's basically a glorified traffick light system with cameras (radards). It doesn't really matter if it makes a decision a microsecond sooner or later, or even a whole second.
Anyway, a simple and efficient solution would be to run several parallel system on different OSes, and rise an alarm if they di
Re: (Score:3, Informative)
Let me be a bit more clear about this:
No, those OSes are not secure. Quite the opposite. Almost all of them are very primitive, and have wide-open memory models that allow anything to run, allow anything running to touch any location in memory, and don't log a thing about it. More recent versions of them may have memory partitioning and privileged-user-only modes, but don't bet on the more recent versions being used even on brand new projects.
The innate vulnerabilities to coding errors presented by this
Re:Shit. (Score:4, Insightful)
they don't have access to the Internet.
Hopefully they don't have access to USB keyrings, flash drives, thumb drives and CD/DVD ROMS that have access to the internet, either...
Re:Shit. (Score:5, Interesting)
We run critical stuff on Windows, they don't have access to the Internet. Deal with it.
Well, no. It's you who has to deal with it.
good luck
Re: (Score:2)
This gives the term "crash and burn" a whole new meaning.
What operating system was used? (Score:2, Interesting)
Re:What operating system was used? (Score:4, Funny)
I take it you've never worked with real people before?
Re:What operating system was used? (Score:5, Insightful)
Re: (Score:2, Insightful)
Re:What operating system was used? (Score:4, Insightful)
Re: (Score:3, Insightful)
Are you new to computing? How many Mac or Linux or BSD users do you know who have ever gotten a trojan infection?
Re: (Score:3, Informative)
Sure, a Linux box can get rooted, but I've never seen one, and I've installed Linux on friends' computers when I got tired of reinstalling Windows for them after the thing slows to a crawl from malware. Once Linux was on it, they never got infected again.
Of course, to be victim of a trojan you have to know how to install a program ;)
The pilots were incompetent (Score:3, Interesting)
Re: (Score:2)
Undoubtedly, however there are meant to be safety nets against pilot incompetence. If such a system was compromised (as noted in a comment below, this is slightly dubious) then that error is partly responsibility for the incident.
Re:The pilots were incompetent (Score:5, Informative)
From the Wikipedia page [wikipedia.org] (emphasis mine):
"On 17 August 2009, CIAIAC released an interim report on the incident [21]. The interim report confirmed the preliminary report's conclusion that the crash was caused by an attempt to take off with the flaps and slats retracted, which constituted an improper configuration, and noted that safeguards that should have prevented the crash failed to do so. The cockpit recordings revealed that the pilots omitted the "set and check the flap/slat lever and lights" item in the After Start checklist. In the Takeoff Imminent verification checklist the copilot just repeats the flaps and slats correct values without actually checking them, as shown by the physical evidence."
Daayum.
Re:The pilots were incompetent (Score:4, Interesting)
The thing that bugs me is that flight systems on passenger jets are multiply redundant and their are strict rules about what can and can't be done when there is a system failure. For instance there are usually at least three autopilot systems, and if only one is indicating a fault then the flight crew has to perform all flight operations manually. WTF happened with regulatory control that didn't enforce that this kind of redundancy and human oversight applied to critical systems on the ground as well?
Re: (Score:3)
The pilots kind of revoked their own licenses. Permanently. All of the crew perished in the crash.
"It's just been revoked!"
"Peter, that line doesn't work here."
"Oh. Uh...I'll have what she's having!"
Re: (Score:2)
If I understand the garbled translation, I think that the airline failed to enter into their computers in a timely manner that there had been existing problems ...
Re: (Score:2)
i Think he died with a lot of the other people on the plane
Re: (Score:3, Funny)
Being dead does that automatically anyway.
Catch-22 (Score:3, Insightful)
That pilot should have had his license revoked.
Well, I think the crash took care of that.
Unless the pilot was Captain Orr from Catch-22 . . . then he and all the other passengers would be frolicking in Sweden for the rest of the war . . .
Its an MD82 (Score:4, Informative)
wiki link [wikipedia.org]
Beyond the translated Spanish article I can't find anything else about this idea of an alerting system being infected with malware. Typically such systems are simple, embedded and not interfaced in ways which could cause them to run software they are not meant to.
This bit from wikipedia is interesting:
The MD-80 Advanced was to incorporate the advanced flight deck of the MD-88, including a choice of reference systems, with an inertial reference system as standard fitting and optional attitude-heading equipment. It was to be equipped with an electronic flight instrument system (EFIS), an optional second flight management system (FMS), light emitting diode (LED) dot matrix electronic engine and system displays. A Honeywell windshear computer and provision for an optional traffic-alert and collision avoidance system (TCAS) were also to be included. A new interior would have a 12% increase in overhead baggage space and stowage compartment lights that come on when the door opens, as well as new video system featuring drop-down LCD monitors above.[4]
link [wikipedia.org]
Apparently this upgrade got dropped in 1991, so the system still in use must be pretty low tech.
Re: (Score:2)
Nothing to do with the plane (Score:5, Informative)
Whoever modded up the above post - you've missed the point. There may have been a fault in the on-board management system - or human error failing to heed a warning - but nothing in TFA suggests that malware was in any way involved on the flight deck.
Re: (Score:2)
What? (Score:5, Insightful)
Who puts Windows on anything even remotely mission critical? If you could blame someone, it should be the person deciding that.
Re: (Score:2)
Complimentary 7 point Slashdot troll guide... (Score:4, Interesting)
Re: (Score:3, Informative)
Re: (Score:2)
Re: (Score:2)
Re: (Score:3, Insightful)
https://launchpad.net/bugs/+bugs?field.searchtext=remote+code+execution&search=Search+Bug+Reports&field.scope=all&field.scope.target= [launchpad.net]
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-1252 [redhat.com]
http://news.softpedia.com/news/Critical-Vulnerability-Silently-Patched-in-Linux-Kernel-152678.shtml [softpedia.com]
http://projects.info-pull.com/moab/MOAB-20-01-2007.html [info-pull.com]
http://projects.info-pull.com/moab/MOAB-14-01-2007.html [info-pull.com]
http://projects.info-pull.com/moab/MOAB-01-01-2007.html [info-pull.com]
http://projects.info-pull.com/moab/MOAB-01-01- [info-pull.com]
Re: (Score:2)
In response to your point 2, Windows *is* easier to infect than other operating systems. But that has little to do with the level of security/privileges in the OS these days (Win 7 is a *huge* step forward as compared to, say, Windows 95, where you could bypass a login screen by hitting ESC). More, the reason Windows is easier to infect is because of market share.
Most virus infections still rely on good old social engineering: they e-mail themselves as an attachment to a user, and the user has to unwittingl
Re: (Score:2)
That's complete BS, I'm not even going to bother to refute your points, because they are nothing more than a red herring, it's not even important why, the fact itself is important, there are half of million of pieces of malware for Windows and almost none for Linux (and no actively spreading virus as far as I know).
If you choose your neighborhood would you go for a war ridden zone or for Malibu? Sure, Malibu is just as vulnerable, actually it has less defenses than Kabul... it can *potentially* become worse
Re:Complimentary 7 point Slashdot troll guide... (Score:5, Insightful)
Windows is easier. It's a byproduct of sloppy architecture.
It doesn't mean the others can't be compromised, but it's a fallacy to assume all OS's can be infected with the same level of difficulty.
Not surprised (Score:2)
There will come a day (Score:2)
A result of employee loafing (Score:4, Insightful)
1970s:
"I'm sorry, our computers are down." (Reality: our employees are playing NET TREK and DUNGEON on a Friday afternoon.)
2000s:
"I'm sorry, our computer has a trojan." (Reality: our employees finally found an "unused" machine to surf porn, got loaded up with Russian malware, and now it's nobody's fault.)
So, when... (Score:5, Insightful)
Summary needs a bit of clarification (Score:5, Informative)
But, the problem that was supposed to be logged was reportedly an overheated pitot tube. That was not the cause of the crash: the report says that the pilots did not set the flaps correctly and a warning alarm did not go off. This was not related to the problem with the computer being used by mechanics.
The article appears to be trying to link two independent events: a separate problem with the plane and an error by the pilots. Or maybe it's just the broken English translation.
Re:Summary needs a bit of clarification (Score:5, Informative)
Spanish is my mother tongue, so maybe I can shed more light after reading the original article:
The procedures of Spanair are to log incidences right away whenever they are detected. Three accumulated incidences and the plane is grounded.
Two incidences had been found the day before the crash. One incidence was detected on the same day of the crash.
However, the technicians did not enter the incidences into the system right away, because the system was too slow (assumedly due to the malware)
The system did not trigger any alarm on the same day because the incidences had not been entered by the technicians. The plane was deemed airworthy, and then the accident happened due to the multiple causes described elsewhere.
Re: (Score:2)
Re:Summary needs a bit of clarification (Score:5, Informative)
The infected computer was one being used by mechanics to enter maintenance log entries. According to the article, an alert is supposed to be raised if three failures in the same part or subsystem occurred. If I understand the broken English correctly, they would have taken the plane out of service had the maintenance log entry been completed before the plane attempted to take off.
But, the problem that was supposed to be logged was reportedly an overheated pitot tube. That was not the cause of the crash: the report says that the pilots did not set the flaps correctly and a warning alarm did not go off. This was not related to the problem with the computer being used by mechanics.
The article appears to be trying to link two independent events: a separate problem with the plane and an error by the pilots. Or maybe it's just the broken English translation.
Very true - the accident appears to have been the result of a series of crew errors that lead to an improper takeoff condition:
From Wikipedia: On 17 August 2009, CIAIAC released an interim report on the incident [21]. The interim report confirmed the preliminary report's conclusion that the crash was caused by an attempt to take off with the flaps and slats retracted, which constituted an improper configuration, and noted that safeguards that should have prevented the crash failed to do so. The cockpit recordings revealed that the pilots omitted the "set and check the flap/slat lever and lights" item in the After Start checklist. In the Takeoff Imminent verification checklist the copilot just repeats the flaps and slats correct values without actually checking them, as shown by the physical evidence. All three safety barriers provided to avoid the takeoff in an inappropriate configuration were defeated: the configuration checklist, the confirm and verify checklist, and aircraft warning system (TOWS).
Had they not made a series of compounding errors the flight probably would have been uneventful; it appears the deactivated systems was not related to the crash. It may be that some other systems were improperly set - ground vs flight mode - which caused problems and may have contributed to the accident; but none are related to the maintenance computer. Should the plane have been grounded due to an early problem? Maybe; but that may not have prevented the errors that lead to the crash.
We'll never know what the pilots were thinking; but having aborted one takeoff they may have assumed, intentionally or not, that they systems were set for takeoff and did a cursory check as a result; I've seen that happen in other industries where checklists are used. You interrupt the expected course of actions and people simply pick up where they left off, without assuring the systems were properly set for operation.
or just an excuse? (Score:2)
Pandora's flight box (Score:2)
Re: (Score:2)
This opens a new legal can of worms - if a trojan or virus is found to be resposible (at least partially) of a plane crash, can the creator fo this virus be held legally liable for the crew and passenger deaths?
I don't see why not. It might be hard to prove murder, but negligent homicide should be fairly easy to show. Reckless endangerment should be damned near an automatic conviction if you can prove that the person released the virus even if it DIDN'T hurt anyone.
The same way you can be cited for unsafe
Swiss cheese (Score:5, Interesting)
Yup, the holes in the cheese certainly lined up that day. None of these, by itself, would have caused the crash.
Re: (Score:3, Informative)
Instead of indicting everyone under the sun, let's do something to fix it instead of tossing people in jail. Many people contributed a little, like Murder on the Orient Express. In the end, the ultimate responsibility rested on the Pilot-in-Command who paid the price for his mistakes. Let's learn from it instead.
1. Revise procedures so that the PNF (Pilot-Not-Flying) visually confirms the flap & slats indicator instead of just reading it to the PF (Pilot Flying)
2. Design future systems such that the tak
and they want to have networked auto drive cars (Score:2)
and they want to have networked auto drive cars some day as well.
I hope that the windows based car navigation and sound system is not hooked to the drive part at all or even better no windows at all.
Re: (Score:2, Funny)
and they want to have networked auto drive cars some day as well.
I hope that the windows based car navigation and sound system is not hooked to the drive part at all or even better no windows at all.
I would find it very difficult to navigate in a car lacking windows.
no windows based os not the car windows (Score:2)
and they want to have networked auto drive cars some day as well.
I hope that the windows based car navigation and sound system is not hooked to the drive part at all or even better no windows at all.
I would find it very difficult to navigate in a car lacking windows.
no windows based os not the car windows
No Cause and Effect Alleged (Score:3, Interesting)
The Spanish article cited in the summary does not allege any cause-and-effect relationship between the computer, the trojans, and the crash.
Nearly all crash investigations reveal factoids that cause suspicion and which invite people to jump to conclusions. Sometimes, the premature public debate on such issues cause emotional harm to victims, their families and other people involved.
I realize that I'm pissing into the wind to raise this topic. I's human nature to gossip. Slashdot is no different than any other public forum in this regard. It just frustrates me to see this happen again and again.
not alleged, but implied (Score:2)
War? (Score:2)
This news puts Trojans in a new light. Taking over PCs to run scams is one thing; causing the deaths of 154 people is entirely different. Every top law enforcement agency and intelligence organization should be working to track down all of those responsible - from the guys who wrote the Trojans to the managers who allowed them to contaminate their computers, and very possibly those who wrote the vulnerable software and those who sold it for such a safety-critical application.
I shall be interested to see whe
Ugh (Score:2)
Re: (Score:2)
Re: (Score:2)
the ground computer
(my emphasis) So no, not the plane. But mission control :S
Re: (Score:2)
Re: (Score:3, Funny)
Re: (Score:2)
Or possibly TSA?
In America, TSA reads you.
Re:Windows? (Score:4, Interesting)
In any case the malware author could be charged with 154 cases of second degree murder. Or will it be mass murder?
It would be interesting to see that in court.
Re:Windows? (Score:4, Interesting)
Re:Windows? (Score:4, Funny)
Re: (Score:2)
Exactly my thoughts... there wasn't anyone willing to take the blame or rather in this case they were most likely dead and the authorities weren't able to convincingly put the blame on someone that is dead without their defense. That's ok... pointing fingers is never a cool thing to do BUT to say that it was a computer glitch is more than a little arrogant against the people who are still alive and have been effected by the tragedy. It permeates an aura of a botched investigation and reeks of underhanded an
Re: (Score:3)
The computer, located at the headquarters of the airline in Palma de Mallorca, emits an alarm signal on the monitor when you register three similar technical problems in the same device
Pardon me if something got lost in translation, but why the hell was was there not a computer on board that could have registered a series of failures and alerted the crew? It seems that would have been useful information for them to have.
Re:Mission Critical (Score:5, Interesting)
It does not appear that an infection of the mainframe maintenance computer is anything more than a side note in this particular mishap. It may, however, be something for airline maintenance personnel to be aware of to prevent future incidents.
The real question is why the aircrew are allowed to override a weight-on-wheels (WOW) sensor, when that is primary used for troubleshooting by ground crews. Putting the aircraft into "flight" mode while on the ground requires special attention to actions/procedures (as in when a USAF F-4 shot up a maintenance truck when the WOW switch was in override and the weapons crew performed an ops check on the gun system--ops check good, BTW).
Re: (Score:3, Insightful)
A computer controlling in-flight operations infected with trojans translates to a computer running MS windows. Why the fuck would anyone even think of this? This is like building a suspension bridge using legos and 6 year olds doing the assembly.
So when I fly, is my life really dependent on a tinker toy OS? That's fucked up! Someone should be beaten to death for this idea.
Re: (Score:3, Informative)