---

https://tinyurl.com/yxhv6dac

NASA hacked: 500 MB of mission data stolen through a Raspberry Pi computer
500MB的太空任務資料都被一個微形電腦Raspberry Pi偷走了

The National Aeronautics and Space Administration confirmed that its Jet
Propulsion Laboratory (JPL) was hacked last year, with the attacker able to
steal 500 MB of data related to the space agency’s missions using a cheap
Raspberry Pi computer.

NASA證實噴射實驗室去年被駭了。駭客利用便宜的小電腦偷了500MB的資料

The Raspberry Pi, priced at about $36 for the basic board, is one of the most
versatile and understated computing platforms available in the market. The
credit card-sized computer is perfect for projects such as a retro gaming
station or a smart home gadgets base station, but a hacker has apparently
found a twisted use for it.

(自己去google Raspberry Pi，信用卡大小，1000塊台幣的電腦）


NASA, in an audit report, revealed that in April 2018, JPL discovered an
account that belonged to external user was compromised, and was used to steal
about 500 MB of data from one of its major mission systems.

NASA揭露說在2018年四月，噴射實驗室發現一個外部使用者的帳號被破解了，它被拿來
從偷NASA一個主要太空任務的資料

The account was compromised by a hacker who used a Raspberry Pi to gain
unauthorized access to the JPL network. The attacker then took advantage of
the weaknesses in the laboratory’s network to remain undetected for 10
months, stealing 23 files in the process. Two of these files contained
information on International Traffic in Arms Regulations, which controls the
transfer of military and space-related technology, related to the Mars
Science Laboratory Mission

那個帳號是被駭客用Raspberry PI電腦取得權限的。接下來駭客利用內部網路的弱點
隱藏了10個月（簡單的說，其實就是沒有人在管內部網路啦..），偷了23個檔案。
其中兩個檔案跟國際交通有關，它控制了軍事和太空科技的傳授，並且跟火星科學實驗
室任務有關

The auditors discovered that users on JPL’s network were able to enter
systems and applications that they were not approved to access. The system
administrators also did not properly track the devices added to the network.
These shortcomings allowed the hacker to deeply infiltrate the network and
remain undetected for a long time.

監查人發現有使用者可以進入他們並允許進入的系統和程式。系統管理員並沒有追蹤這
些裝置。這使得駭客能夠輕鬆的侵入網路而不被偵測

The breach was so widespread that the Johnson Space Center, which is
responsible for programs such as the International Space Station,
disconnected from the gateway. The space center’s officials were concerned
that the hacker might be able to move into their mission systems, which may
give the attacker the ability to send malicious signals to human space flight
missions.



NASA and its laboratories are lucrative targets for hackers due to the agency
’s research and development, which includes patents on cutting-edge
technology, information security analyst Mike Thompson told Forbes. Ethical
hacker John Opdenakker, meanwhile, pondered why NASA published the audit
report, when it clearly stated that there were still some “critical
vulnerabilities” at JPL’s systems.



心得：

恭喜某國的太空技術在幾個月內要突飛猛進了。

我是覺得Caltech天文領域某國學生不要再收了

--
--
※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 131.215.107.226 (美國)
※ 文章代碼(AID): #1T3kYXAd (Gossiping)
※ 文章網址: https://www.ptt.cc/bbs/Gossiping/M.1561258145.A.2A7.html