Very interesting.
I wonder if it's possible to detect and protect against a spoofed GPS signal by cross-referencing with trusted/canonical online data (eg. NTP and almanac data from NASA)?
I wonder if it's possible to detect and protect against a spoofed GPS signal by cross-referencing with trusted/canonical online data (eg. NTP and almanac data from NASA)?
A GPS receiver in Los Angeles sees the same set of signals as a receiver in San Francisco - just the relative arrival times of the signals are different by, at most, a single-digit number of milliseconds.
So an attacker just needs to do a replay attack, and all the almanac stuff checks out fine because it's a perfect replica of the authentic signal.