Re: [amsat-bb] Re: Re: Question about AO-40 telemetry

[Phil Karn <karn@xxxxxxxxxxxxxxx>]

>But now that AO-40 is on-orbit, publishing any details of command 
>station authentication would only be of use to those trying hack the 
>bird. I completely agree with the decision of the Command team not to 
>do so. Any vulnerabilities uncovered by a public review would be as 
>easy to exploit as they would be difficult to correct. 

I point out that AO-40 has onboard computers that can be reprogrammed
from the ground. So the mere fact that AO-40 is already in orbit is no
obstacle to a new authentication scheme being implemented in software
and uplinked.

The reduces the problem to the protection of CPU hardware reset
mechanisms.  Fortunately, these mechanisms are hardly ever used.

Phil
----
Via the amsat-bb mailing list at AMSAT.ORG courtesy of AMSAT-NA.
To unsubscribe, send "unsubscribe amsat-bb" to Majordomo@amsat.org