Interesting Discovery About Boeing 747-400 from Pen Test Partners

After researching one of the abandoned planes, Pen Test Partners Boeing 747-400He explained to the information security community that floppy disks were used to load critical expedition databases in the 's.

This information emerged during the DEF CON video call of PTP's Alex Lomas. While it is normally unlikely that information security researchers will meet with airlines, the UK-based airline is scrapping its B744 fleet. Pen Test Partners It created a unique opportunity for

Penetration test of Boeing 747-400

Lomas, who started recording while inside the plane, which you can watch in the video above, said that the planes are quite expensive and that airline companies and manufacturers do not know at what stage the testers will leave the test. to penetration testing He said he didn't allow it.

Continuing his tour inside the plane, Lomas headed towards the navigation database loader. “This database had to be updated every 28 days“ "You can see what an unpleasant job it is for an engineer," Lomas said.

During the question and answer session held for the virtual participants of DEF CON, Pen Test Partners manager Ken Munro asked Lomas various questions. The question everyone is wondering is whether to use in-flight entertainment systems (IFE) as an attack vector. The question was whether the passenger plane could be hacked or not.

lomas, "Specifically where we looked, we didn't find any bidirectional communication between passenger domain systems like IFE and the control domain. Between the two is the DMZ of the information services domain. I think we're jumping between two layers of separation." it would be dangerous“ he said.