topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Thursday March 28, 2024, 3:15 pm
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: Blog Post: GPS Spoofing  (Read 3840 times)

Ehtyar

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 1,237
    • View Profile
    • Donate to Member
Blog Post: GPS Spoofing
« on: September 19, 2008, 04:15 PM »
A little paranoid, but poignant nonetheless. Hijackers can quite easily spoof GPS signals, permitting them to falsify signals sent to and from civilian GPS devices.

Screenshot - 20_09_2008 , 7_12_37 AM_thumb.png


Our global society relies on the civilian GPS for our communications networks, transportation of goods, power distribution, financial transactions and emergency response, using precise location information and time synchronization. Unfortunately, the GPS system was not designed for this purpose. The civilian GPS has dangerous security vulnerabilities which now leave our global society at risk of serious disruption at any moment.

Full Blog

Ehtyar.

Josh

  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Points: 45
  • Posts: 3,411
    • View Profile
    • Donate to Member
Re: Blog Post: GPS Spoofing
« Reply #1 on: September 19, 2008, 04:31 PM »
This is where encryption comes into play, and verification of signals. If the GPS maker has any sense about them, they have a control mechanism in place to verify what signals they are receiving. One thing is to measure power levels. If you are receiving a signal that is as strong as if it were right next to you, something is fishy there. Perhaps the GPS satellites need to be updated with a CRC or MD5 hash of sorts verifying the satellite they are coming from so they cannot be spoofed. Just a thought.

Ehtyar

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 1,237
    • View Profile
    • Donate to Member
Re: Blog Post: GPS Spoofing
« Reply #2 on: September 19, 2008, 04:47 PM »
Something more like a digital signature I think. DSA on the server and client side should ensure secure communication.

Ehtyar.