Satellites beam data down to the Earth all around us, all the time. So you might expect that those space-based radio communications would be encrypted to prevent any snoop with a satellite dish from accessing the torrent of secret information constantly raining from the sky. You would, to a surprising and troubling degree, be wrong.

Roughly half of geostationary satellite signals, many carrying sensitive consumer, corporate, and government communications, have been left entirely vulnerable to eavesdropping, a team of researchers at UC San Diego and the University of Maryland revealed today in a study that will likely resonate across the cybersecurity industry, telecom firms, and inside military and intelligence agencies worldwide.

no comments (yet)

sorted by: hot top controversial new old
there doesn't seem to be anything here
22 comments in c/technology@lemmy.world view that post
[–] 73 points 1 year ago (12 children)

I remember reading that drug cartells in South America are using disused military communications satellites.

These satellites simply takes a signal recieved on one band and rebroadcast it on another band over a wide area, so as long as the satellite can pick up your signal you can basically talk to an entire continent at once, all while remaining anonymous.

  • source
  • hideshow 12 child comments
  • [–] 30 points 1 year ago (10 children)

    There must be some additional steps. Otherwise those satellites would be overloaded by hooligans.

  • source
  • parent
  • hideshow 10 child comments
  • [–] 34 points 1 year ago (4 children)

    Nope, lol. These suckers are fucking ancient. There isn’t any processing, you can’t overload something that isn’t actually reading the data or using a protocol.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 4 points 1 year ago (3 children)

    They still use energy, no? To relay signals on another frequency. That should come from somewhere, and also the more different signals, the more noise. And without their input frequency being regulated, there must be lots of noise.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 18 points 1 year ago (2 children)

    You can do this same attack on any antenna, noise can't be protocolled away. Repeating both signal and noise is a downside to bent-pipe setups.

    Input frequencies are regulated via band-pass filters.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 1 year ago (1 child)

    I'm not talking about technical things, just that IRL on regulated frequencies one can do something because people using it for bullshit are legally prosecuted. Depends on wavelength, of course.

    But OK, now I think I get what you are talking about.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 16 points 1 year ago (3 children)

    Someone tell me how to join team "satellite hooligan".

  • source
  • parent
  • hideshow 3 child comments
  • [–] 10 points 1 year ago (2 children)

    You can get a cheap SDR for a few bucks and an antenna for about the same. The rest is software and ingenuity.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 1 year ago

    Well the biggest steps I'm going to assume are having a satellite dish, knowing where to point it, knowing what to send, then hope that someone is listening. Much easier for a hooligan to throw a rock at someone or find a can of spray paint

  • source
  • parent
  • [–] 21 points 1 year ago
    [–] 4 points 1 year ago

    A fascinating read, thanks for sharing :-)

  • source
  • [–] 14 points 1 year ago (6 children)

    “Generally, our users choose the encryption that they apply to their communications to suit their specific application or need,” says a spokesperson for SES, the parent company of Intelsat. “For SES’s inflight customers, for example, SES provides a public Wi-Fi hot spot connection similar to the public internet available at a coffee shop or hotel. On such public networks, user traffic would be encrypted when accessing a website via HTTPS/TLS or communicating using a virtual private network.”

    Can't decide the side of the fence I am on for this. Of course the vast majority of Internet traffic across the world is unencrypted. Anyone could be on the line between me and this Lemmy instance, just as they could if there was a satellite between us. However, you're also broadcasting it to like 25% of the globe and not even making any kind of physical infrastructure efforts.

    Quest can't entirely guarantee nobody will snoop a fiber line, but they do bury them.

  • source
  • hideshow 6 child comments
  • [–] 58 points 1 year ago (4 children)

    vast majority of Internet traffic across the world is unencrypted.

    In 2023 between 80% and 95% of web traffic was encryted. Unencrypted web traffic is getting pretty rare.

    https://www.eff.org/deeplinks/2023/12/year-review-last-mile-encrypting-web

  • source
  • parent
  • hideshow 4 child comments
  • [–] 7 points 1 year ago (3 children)

    I should've been more clear, I didn't mean the data, but at the protocol level it's all open.

    Same with the Internet traffic through these satellites.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 1 year ago (1 child)

    I mean, some parts of the protocols we use for the Internet need to be in the clear to work, DNS comes to mind. If you want that kept private as well you need to use something like tor.

    But regardless, what people generally actually care about keeping secret is the content, not the protocol.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 year ago

    I mean, some parts of the protocols we use for the Internet need to be in the clear to work, DNS comes to mind. If you want that kept private as well you need to use something like tor.

    Not really. We also have DNS over HTTPs, DNS over TLS, and DNSCrypt which are all becoming more popular. But that's still application level data that I'm not really talking about.

    But regardless, what people generally actually care about keeping secret is the content, not the protocol.

    A lot of information can be gleaned from protocol metadata though. Source, destination, which applications are being used, maybe more depending on protocols. Not exactly information I want to be easily available to the public, but also not exactly critical either.

  • source
  • parent
  • [–] 1 point 1 year ago

    Typically satellites have beams they turn on and off to service different areas, with one beam pointing towards the RAN that receives the data rather than just repeating a broadcast out to everywhere the satellite can theoretically reach. For mobile telecom backhaul via satellite it is standardized that the data should be encrypted for untrusted transport links so this seems to me like an issue of not following specs.

  • source
  • parent
  • 4 comments in c/privacy@lemmy.ml view that post
    [–] 22 points 1 year ago (2 children)

    Everything old is new again.

    Reminds me of the documentary called Spin from 1995. It was built from behind-the-scenes footage captured from live satellite feeds from the 1992 Presidential election and the 1992 Rodney King LA riots.

  • source
  • hideshow 2 child comments
  • [–] 3 points 1 year ago

    I just watched that for the first time a couple weeks ago. Very enlightening. The bits with Larry King were also completely insane. I would love to see the debate he moderated between Clinton and 'Poppy' Bush in an alternate timeline. That could have been pure chaos.

  • source
  • parent
  • [–] 1 point 6 months ago

    Crazy idea, maybe things should be E2EE? I know, crazy!

  • source
  • 2 comments in c/technology@lemmy.ml view that post
    [–] 4 points 1 year ago

    Oh hello the 1980s called and they want their breaking news back.

  • source
  • [–] 3 points 1 year ago

    Still waiting to see the inevitable hack of a communications constellation (starlink and the likes) resulting in worldwide outages and / or a worldwide firework show.

  • source
  • 1 comment in c/privacy@programming.dev view that post
    [–] 4 points 1 year ago

    This is why VPNs.

  • source