-8 karma · joined May 9, 2023
so with ESA putting this amount of (american made) computation, you can see where it is going.
im proponent of having telemetry not encrypted, we need this for same reason we use ADS/AIS
there are multiple "channels" from / to satellite. not all have to use consumer grade encryption.
some other comments provide link to mission statement, there you can read it was developed to do tests about spacecraft security, im not sure they ment computer security, tho. you can write ESA, you can find some ESA people on twitter even.
is 20 year old tech hackable ? is not sourcable. what is done to satellites is not really possible to source, people need to work. and even bull is considered secret, proprietary etc....
for threat model: hybrid war is "new". " attacking infrastructure was considered war, full stop " this changed for some reason.
american corporation have 4 pictures of "earth" everyday, in database, starting from 1996... and still even today, you can point antenna up and capture geostationary satellite pictures, not in that resolution tho. ( NOAA / old russian meteo satellites - this was not in threat model. source is point antenna up)
im not talking about things like FLTSATCOM 7 and FLTSATCOM 8 which are known and covered by news.
im not confused about what is telemetry, control, data, transponder, etc
most nonmainstream things / themes are not "googleable". because hybrid war. hobbysite from 20 years ago - cqham.ru has some articles about "downloading" nonencrypted traffic from satellites with for todays standard, primitive equipment
msot of traffic between satellite and earth is unencrypted ( RC4 like encryption is not encryption ), there are hundreds satellite listening stations all over the world.
for example "Abhörstation Königswarte" can listen to african presidents talking over satelite phones.
snowden leaks provided some info about collections thru these kind of stations. ( NOTHING in snowden leaks, showed to public, was unknown / not already opensource )
you can define shutdown flag for hardware change: shutdown -rF XD,
some things are hot swappable and for that there has to be logic (in kernel) to know you have new hardware...
if you have total hardware failure that can be detected too, on next boot...
im saying you can have two pathways, ( decision which route to choose is almost zero cost )
first - when you boot correctly, you can save information that you booted correctly.
second - if you do not find information about safe boot, you go old route, quicksort route.
( YES. you can do that, in a way you do not have loops of boot process because you are reading boot is ok even if it is not. just dont be lazy like linux kernel developers were, when i was telling them this exact thing few years back. )
BUT
that we use solutions across multiple problems instead providing solution specifically for that problem. if you have KNOWN vm, on KNOWN hardware then why you need all kinds of hardware and other bull.. initializations, checks.... ? just provide list of things it has to have then after list is run over without problem, continue. also why would amazon/gcp/azure care ? they are making money from you running inefficient solutions....
also why cant freaking boot process be optimized after first boot? bsd is essentialy sorting SAME thing every boot, THAT is ridiculous. sort once, save order ( list, sysinit000000000000 ), boot fast next time. hardware or other change or failed boot, can trigger start sorting bull for safety.
you know what youre booting into, so sort it once then run it from saved order next time. how many times you change hardware on computer ? and if you do, you can just restart with grub flag, toggle switch in control panel before restart, etc