News for hackers. Stuff that matters.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by bertil on Saturday November 11, 2023 @02:56PM (#38233914)
Who would be interested in that data?

I’m seriously asking because a while ago, I had an interview that was explicitly about finding a business model for that type of data (flights, on-time, maintenance, etc.) for a reseller. I think I did a good job, but the company closed before they made an offer. I reached out to a friend who was working for a big airline to ask for his help on that, he was helpful but cagey: that’s because that was his job. A bit later, he mentioned that those were notoriously hard to buy because there wasn’t really any client — not a legitimate one.

The only potentially interested parties he could mention were people looking at tourist trends (they get overall hotel and restaurant stats: flights aren't the right breakdown) and possibly taxi companies to get on-time stats (that’s actually another project I worked on; small world). But landing data is public, or at least scrapable.

Chinese manufacturers (if you believe the rumors that they like to copy technology) care about R&D. Airbus, maybe, to price them out when competing on bids? But it would seem obvious and not that helpful. I’m not a sales guy.

This is “parts and distribution business” so, essentially, the business branch recently transformed by a lot of machine learning to predict failures. If another maintenance company could train a similar model, they would benefit, but is there such a company? Does anyone do that in both partnership and competition with Boeing?

I’m genuinely curious: Who would want that data?

Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by notjoemama on Saturday November 11, 2023 @03:25PM (#38234161)
> rumors that they like to copy technology

It's not a rumor that China copies tech, they've been caught stealing corporate and military IP.

Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by hef19898 on Saturday November 11, 2023 @03:41PM (#38234290)
Including the complete dataset for the F-35.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by genewitch on Saturday November 11, 2023 @04:10PM (#38234559)
At this point we all have a copy of that, I would think.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by gmerc on Saturday November 11, 2023 @09:41PM (#38236735)
right at warthunder.com
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by 2OEH8eoCRo0 on Saturday November 11, 2023 @04:12PM (#38234585)
Source? I assume everyone has the unclass info but I can't find anything about China getting the classified deets.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by lazide on Saturday November 11, 2023 @04:24PM (#38234691)
Because no one on either side would want to admit it?
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by hef19898 on Saturday November 11, 2023 @04:55PM (#38234964)
For example, this story was in the news back the day for a while.

https://www.securitynewspaper.com/2021/08/23/how-chinese-apt...

Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by 2OEH8eoCRo0 on Saturday November 11, 2023 @09:54PM (#38236798)
I see no mention of classification levels so I will assume unclass.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by echelon on Saturday November 11, 2023 @04:36PM (#38234794)
Why aren't these things developed completely air gapped?
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by hef19898 on Saturday November 11, 2023 @04:54PM (#38234946)
Because you cannot coordinate activities across multiple sites and suppliers if they were.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by Wowfunhappy on Saturday November 11, 2023 @05:50PM (#38235393)
How did we do that before the internet?
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by orf on Saturday November 11, 2023 @06:03PM (#38235497)
We didn’t need an internet air gap before the internet.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by Wowfunhappy on Saturday November 11, 2023 @06:17PM (#38235588)
How did we coordinate activities across multiple sites and suppliers before the internet?

Basically, I don't think enough people are seriously questioning the costs vs benefits of using the internet while dealing with sensitive data. You should assume that basically anything which touches an internet-connected device will eventually be stolen, and plan accordingly.

Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by nradov on Saturday November 11, 2023 @09:26PM (#38236648)
Before the Internet, aircraft designs were far simpler and thus it was feasible to do the work at only a few sites. The JSF / F-35 program then went even further by intentionally spreading work across many US Congressional districts plus several allied countries in order to make it politically impossible to cancel.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by wkat4242 on Saturday November 11, 2023 @08:36PM (#38236422)
On paper and spies were just as effective back then.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by kalleboo on Saturday November 11, 2023 @08:51PM (#38236490)
Slowly and inefficiently. Projects like the F-35 are insanely complex and could not have been done on pen and paper.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by hulitu on Sunday November 12, 2023 @08:49AM (#38240040)
Because Microsoft Windows cannot be airgapped.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by hulitu on Sunday November 12, 2023 @08:48AM (#38240034)
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by ASalazarMX on Sunday November 12, 2023 @04:40PM (#38244349)
I don't understand the downvotes. Industrial espionage is a fact of how governments operate, all governments that have a spying apparatus at least.

For some it's a bitter pill to swallow when everyone is the bad guy, but we should just accept governments don't like being bound by international laws when breaking them can give them an advantage.

Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by bozhark on Saturday November 11, 2023 @04:36PM (#38234792)
Cute. It ain’t no rumor
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by bertil on Saturday November 11, 2023 @04:50PM (#38234918)
I was being snarky—and covering my butt, in case the PRC and the PLA suddenly gets very trial-friendly.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by grepfru_it on Saturday November 11, 2023 @06:34PM (#38235684)
None of that matters if you get swept away at the boarding gate of your layover flight in Hong Kong.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by bertil on Saturday November 11, 2023 @06:55PM (#38235813)
I might have to edit that comment then…
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by dr_kiszonka on Saturday November 11, 2023 @04:48PM (#38234899)
I am curious if it is legal in the US:

1) to view these data (nothing nefarious, just to see what they look like)?

2) to use these data for business?

Edit: I have no interest in using such data. I am asking to educate myself about legal ramifications that pertain to such leaks in general.

Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by bertil on Saturday November 11, 2023 @04:57PM (#38234981)
Presumably no privacy issues.

That data is copyrighted, so Boeing could go after you for that, using anti-movie-piracy laws that are quite draconian in the US: copying itself is bad but hard to prove; making it available is definitely worse.

Trade secret tends to extend more broadly, including soliciting, and corporate espionage carries real penalty including conspiracy, so I would avoid it.

Where I’m less clear is if that data would be protected under anti-terrorism laws: now that I’ve been thinking about it, such documents could help someone plan a terrorist attack by, say, planning a watering hole or supply-chain attack. In that case, the law gets far more open-minded for the prosecution, letting them try anything to prove their case, and the consequences go as far as extra-territorial non-US-jurisdiction legal nightmares. I’d stay away from it, but IANAL.

Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by notahacker on Saturday November 11, 2023 @08:09PM (#38236264)
The market for actual systematic non real-time data on flights etc is pretty diverse (airlines/airports, finance & leasing, maintenance companies and aftermarket parts suppliers, insurance, consultancies), but companies are paying the likes of Corium or OAG for systematic structured data in formats that make creating forecasts or spotting opportunities easy, not because darknet data dumps are the only way to find stuff out about a company.

I'm not seeing much value in loads of Boeing-specific tech data for current generation civil aircraft though. Most of it isn't that secret, there's no viable market for copying Boeing parts without Boeing approvals stamped all over them, maintenance on Boeing aircraft is done at manufacturer-specified intervals regardless of whether it's a Boeing facility or a third party with Boeing approvals, competing aircraft have completely different needs, and if they really wanted to know how Boeing solved a problem that's bugging them they could just poach engineers...

Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by John7149 on Saturday November 11, 2023 @10:15PM (#38236914)
China. They able to mass produce Boeing spare parts and also built their own planes cheaper at same or at least better quality to eat into Boeing market worldwide. Those ransom would be way cheaper to pay than losing 20Bil usd over then next 8 years (I have done analysis how bad this will affect Boeing revenue). I forsee Boeing going downhill in the next 20 years ala Nokia-Blackberry style. I already dump their stock just before those crashes. Extreme poor decision.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by ChainOfFools on Monday November 13, 2023 @02:50AM (#38247960)
Brand new account and you're using it to criticize a victim not paying an extortionist ransom? I hope you don't think you're going to change anyone's mind, least of all boeing. and if you are expecting any direct gains from that ransom - or any cryptolocker-style parasitism - I hope you understand that there are a great many people out there, with numbers increasing geometrically every time this sort of thing happens, who will gladly vote for anyone with a plan to throw people like you into a sewer. Or sign up to do it themselves. retroactively, with no statute of limitations, if need be.
Re:LockBit says it's leaked 50GB of stolen Boeing files afte... by MilStdJunkie on Monday November 13, 2023 @03:51PM (#38255209)
Considering it's Boeing, there's a 50-50 chance that the leaked parts data is a shambling pile of DFARS violations.

They can get up to some stuff when it comes to classifying things as "new". Check out the financials. BGS is always swimming in money compared to the other divisions - that cash flow almost certainly helped along by pushing returned assemblies back out as "more new than they probably actually are, and should be according to the contract docs".

And there's just a joyous brown fountain of horse puckey when it comes to "equivalence", a whole other pile of dead fish. The stuff that the PLs claim is "electromechanically equivalent" makes my brain hurt. Like, does it have wires sticking out? "Oh, that's an ARINC 600 connector for sure!". It's harder to nail someone for false equivalence, though, since it's a pretty nebulous thing to define. Unlike "yo, this new part is actually old and busted".

I should add that Boeing isn't really alone here. Lot of suppliers do this stuff too, and Boeing, the damn fools, probably get caught covering for suppliers and subsidiaries.