Hacker used $35 computer to steal restricted NASA data
by Staff Writers
Washington (AFP) June 24, 2019
A hacker used a tiny Raspberry Pi computer to infiltrate NASA's Jet Propulsion Laboratory network, stealing sensitive data and forcing the temporary disconnection of space-flight systems, the agency has revealed.
The April 2018 attack went undetected for nearly a year, according to an audit report issued on June 18, and an investigation is still underway to find the culprit.
A Raspberry Pi is a credit-card sized device sold for about $35 that plugs into home televisions and is used mainly to teach coding to children and promote computing in developing countries.
Prior to detection, the attacker was able to exfiltrate 23 files amounting to approximately 500 megabytes of data, the report from NASA's Office of inspector General said.
These included two restricted files from the Mars Science Laboratory mission, which handles the Curiosity Rover, and information relating to the International Traffic in Arms Regulations which restrict the export of US defense and military technologies.
"More importantly, the attacker successfully accessed two of the three primary JPL networks," the report said.
"Officials were concerned the cyberattackers could move laterally from the gateway into their mission systems, potentially gaining access and initiating malicious signals to human space flight missions that use those systems."
NASA came to question the integrity of its Deep Space Network data "and temporarily disconnected several space flight-related systems from the JPL network."
The breach came about as a result of a system administrator failing to update the database that determines which devices have access to the network. As a result, new devices could be added without proper vetting.
In response to the attack, the JPL "installed additional monitoring agents on its firewalls" and was reviewing network access agreements with its external partners, the report said.
Watchdog criticizes rising costs, delays of NASA's next Moon rocket
Washington (AFP) June 19, 2019
The giant rocket NASA plans to use to return to the Moon by 2024 has been beset by delays and spending has overrun by almost 30 percent, an official audit said Wednesday. The delays threaten the timetable set by President Donald Trump's administration to place astronauts on lunar soil five years from now, testing the next generation of spacecraft ahead of an eventual crewed mission to Mars. The report by the Government Accountability Office (GAO) said the cost of the first, single-use Space Laun ... read more
|The content herein, unless otherwise known to be public domain, are Copyright 1995-2024 - Space Media Network. All websites are published in Australia and are solely subject to Australian law and governed by Fair Use principals for news reporting and research purposes. AFP, UPI and IANS news wire stories are copyright Agence France-Presse, United Press International and Indo-Asia News Service. ESA news reports are copyright European Space Agency. All NASA sourced material is public domain. Additional copyrights may apply in whole or part to other bona fide parties. All articles labeled "by Staff Writers" include reports supplied to Space Media Network by industry news wires, PR agencies, corporate press officers and the like. Such articles are individually curated and edited by Space Media Network staff on the basis of the report's information value to our industry and professional readership. Advertising does not imply endorsement, agreement or approval of any opinions, statements or information provided by Space Media Network on any Web page published or hosted by Space Media Network. General Data Protection Regulation (GDPR) Statement Our advertisers use various cookies and the like to deliver the best ad banner available at one time. All network advertising suppliers have GDPR policies (Legitimate Interest) that conform with EU regulations for data collection. By using our websites you consent to cookie based advertising. If you do not agree with this then you must stop using the websites from May 25, 2018. Privacy Statement. Additional information can be found here at About Us.|