News for hackers. Stuff that matters.
Re:After Boeing declines to pay up, ransomware group leaks 4... by npalli on Monday November 20, 2023 @06:11PM (#38356296)
For an external party, having access to the 45 GB is the easy part. Now, you will need to create a company and supplier base the size of Boeing to make any use of this :-)
Re:After Boeing declines to pay up, ransomware group leaks 4... by qwertox on Monday November 20, 2023 @08:11PM (#38357426)
It could be a real security issue, depending on the kind of data.
Re:After Boeing declines to pay up, ransomware group leaks 4... by photochemsyn on Monday November 20, 2023 @10:33PM (#38358763)
"Security by obscurity alone is discouraged and not recommended by standards bodies."
Re:After Boeing declines to pay up, ransomware group leaks 4... by justinclift on Tuesday November 21, 2023 @12:18AM (#38359642)
This is Boeing we're talking about. They stopped being any kind of competent a few decades ago. :(
Re:After Boeing declines to pay up, ransomware group leaks 4... by clnq on Monday November 20, 2023 @10:45PM (#38358864)
Ah, well so long as it's discouraged... I'm sure no one's critical systems would depend on it, right?
Re:After Boeing declines to pay up, ransomware group leaks 4... by qwertox on Tuesday November 21, 2023 @05:34AM (#38361862)
I'm not sure you could really add some kind of protection to somewhat unprotected cables, hoses or pipes which must run behind the passenger compartment walls.
Re:After Boeing declines to pay up, ransomware group leaks 4... by lallysingh on Monday November 20, 2023 @07:23PM (#38357037)
I can imagine this complicating any supplier contract negotiations. "you pay X $50/unit more for the same device, etc."
Re:After Boeing declines to pay up, ransomware group leaks 4... by alexpotato on Monday November 20, 2023 @08:50PM (#38357810)
I remember taking a procurement class in graduate school(MBA).

One of the more interesting points of discussion was that when big companies negotiate purchase agreements for parts, the actual cost of the parts can be very transparent. The negotiation is generally about the actual markup e.g. "I think we should pay X% over cost.

Someone, logically, brought up: "What if the company is not willing to share the cost upfront?".

The professor responded: "Well, if it's a public company you can generally deduce a rough cost/part and use that as your starting point in the negotiation"

Student: "Well what if the company says we're wrong?"

Professor: "No problem: ask them what the correct number is. If they don't want to give it to you, ask them how you expect to have a long term partnership if you are not willing to talk openly and honestly about things like parts costs."

Re:After Boeing declines to pay up, ransomware group leaks 4... by wordpad25 on Monday November 20, 2023 @08:57PM (#38357876)
That's kind of a softball, can easily be counted with "part costs vary a lot based on the market" or something like, regardless of cost we guarantee you this price point

No business wants to share it's internal costs, it's their prime competitive advantage

Re:After Boeing declines to pay up, ransomware group leaks 4... by nullindividual on Monday November 20, 2023 @10:30PM (#38358741)
When your only business is the Lazy B, you’re going to cooperate.
Re:After Boeing declines to pay up, ransomware group leaks 4... by aksss on Monday November 20, 2023 @10:43PM (#38358837)
If the deal is big enough, it’s absolutely on the table. These are “cost plus” contracts. See Walmart and the federal government for examples of consumers that require these terms.

Now, the federal government, particularly with drugs pricing, turns a blind eye towards the suppliers just jacking up the purported cost. E.g. Pharma:“we want to make $100 per pill, it costs us $5 to produce”. Fed: “we demand cost + 10%, because the people”. Pharma:”Fine, let’s say it costs $90 to produce.” Fed:”Where do I sign?”

Whereas Walmart would say to somebody like Nabisco, “GFY; if you want your product on our shelves, you’ll open your books and give us audited cost + 10%”.

Re:After Boeing declines to pay up, ransomware group leaks 4... by deaddodo on Tuesday November 21, 2023 @01:11AM (#38360012)
Their prime competitive advantage is their product and quality:cost ratio. For a product company, at least.

If your business' primary competitive advantage is that it gets ICs for 1c less/per thousand, your business is built on shaky foundations. One that you would still want to disclose during negotiations ("yeah, our product is the exact same quality as Widget Co; but we've found a supply for some internal parts at slightly below market value").

Re:After Boeing declines to pay up, ransomware group leaks 4... by deaddodo on Tuesday November 21, 2023 @01:05AM (#38359968)
The idea that someone could hide parts/manufacturing costs is ridiculous on its face. You, as a consumer, can get a general BOM for most any device. It's how we know that the original Beats headphones were "worth" 7-8usd.

Just as we as consumers know we pay extra to the company (even if the numbers aren't oblique), businesses know the same. It's about how much you're willing to spend, not how much they spent to build it.

Re:After Boeing declines to pay up, ransomware group leaks 4... by traceroute66 on Tuesday November 21, 2023 @03:41AM (#38361032)
> You, as a consumer, can get a general BOM for most any device.

I wish this dumb naïve argument would just die quietly in a corner.

A the value of a device is not its BOM. It has never been and it will never be.

There are so many other additional costs to factor in. Costs related to the manufacturing plant, its people, its tooling and its processes. Logistics costs related to bringing in parts. QA costs. R&D costs. Software maintenance costs. Marketing costs. Certain parts and software may have royalty fees associated with them. The list goes on, and on, and on.

So please, enough of the dumb "$device is only $2USD because its only a bunch of 2c resistors and capacitors on a PCB".

Re:After Boeing declines to pay up, ransomware group leaks 4... by deaddodo on Tuesday November 21, 2023 @05:09AM (#38361696)
> So please, enough of the dumb "$device is only $2USD because its only a bunch of 2c resistors and capacitors on a PCB".

The thread was about literal parts costs and how knowing those means nothing to the value of a produced item. In which case, a BOM is directly and literally applicable.

No one is saying what you're so annoyed and frustrated about. Literally the entire thread is about how the value of a product is far greater than it's actual parts cost and why knowing that is useless for negotiation.

Learn to listen/read before you get yourself into a tissy about a made up sleight.

Re:After Boeing declines to pay up, ransomware group leaks 4... by ChrisRR on Tuesday November 21, 2023 @05:16AM (#38361733)
R&D definitely forms a huge part of many product costs, and not for many products where you just churn them out by the millions

For a plane, it's going to be the former

That and the reason it's easy to get a BOM of cheap products is because you can buy them and tear them down. I can't see Airbus managing to buy a boeing and tear the entire thing down without Boeing noticing

Re:After Boeing declines to pay up, ransomware group leaks 4... by quench on Tuesday November 21, 2023 @06:47AM (#38362385)
In aviation it does not work like that usually. Supplier provides a full BOM including all labour and invoices for materials. Company pays x% over the top of the costs
Re:After Boeing declines to pay up, ransomware group leaks 4... by baz00 on Monday November 20, 2023 @06:37PM (#38356590)
That wouldn't even help. It'd have to be part of the original supply chain and certification chain for anything to be allowed out of the country that cloned any parts.
Re:After Boeing declines to pay up, ransomware group leaks 4... by panarky on Monday November 20, 2023 @07:35PM (#38357129)
If it doesn't matter that it's public, then why did Boeing try to keep it secret?
Re:After Boeing declines to pay up, ransomware group leaks 4... by worthless-trash on Monday November 20, 2023 @09:01PM (#38357925)
Because they can't tell the future, its better to have the cards than not.
Re:After Boeing declines to pay up, ransomware group leaks 4... by toasted-subs on Monday November 20, 2023 @07:47PM (#38357214)
Yeah the margins in that enterprise are pretty small not something you can franchise.
Re:After Boeing declines to pay up, ransomware group leaks 4... by hrdwdmrbl on Monday November 20, 2023 @06:16PM (#38356368)
China
Re:After Boeing declines to pay up, ransomware group leaks 4... by npalli on Monday November 20, 2023 @06:35PM (#38356577)
1. They probably already have it :-)

2. Imagine the sheer pain of duplicating every single process and spec to the minutest detail, nobody is flying an airplane that only 'works' 99.99% of the time. Probably easier to start from scratch and learn it. BTW, this was tried by Russia in the all through the '80s, they tried to steal all advanced tech. but by the time they duplicated the stolen technology, the next generation appeared. A losing battle.

Re:After Boeing declines to pay up, ransomware group leaks 4... by ethbr1 on Monday November 20, 2023 @07:34PM (#38357119)
> nobody is flying an airplane that only 'works' 99.99% of the time

Might I introduce you to the Tupolev Tu-134?

https://en.m.wikipedia.org/wiki/List_of_accidents_and_incide...

Re:After Boeing declines to pay up, ransomware group leaks 4... by throw0101b on Monday November 20, 2023 @07:50PM (#38357245)
> Might I introduce you to the Tupolev Tu-134?

Also perhaps the 737-MAX. :)

* https://en.wikipedia.org/wiki/Maneuvering_Characteristics_Au...

Re:After Boeing declines to pay up, ransomware group leaks 4... by verdverm on Monday November 20, 2023 @10:08PM (#38358542)
Given how much the max family and 8 are flown, I don't think this holds up.

Some searching says...

1. >1000 flights per day for the family

2. 2 US carriers accounting for more than 200 Max 8 per day

So one would have to get to 20,000 flights after two crashes to get 2 nines. We're well past that threshold

Re:After Boeing declines to pay up, ransomware group leaks 4... by Xixi on Monday November 20, 2023 @11:18PM (#38359164)
From inception to the second crash, numbers were abysmal. The 737 Max was crashing at a rate of about one per hundred thousand flights, two order of magnitude worse that the 737 NG (one fatal crash per 10 million flights).

Said differently, the Max 8 was working safely 99.999% of the time, while the 737 NG was working safely 99.99999% of the time. An order of magnitude better than 99.99%, but two orders of magnitude worse than expected...

It is certainly a lot safer now. Hopefully even better than the 737 NG.

Re:After Boeing declines to pay up, ransomware group leaks 4... by throwaway318 on Tuesday November 21, 2023 @12:22AM (#38359692)
The probability of not having a crash after 20,000 flights, with 99.99% chance per flight, assuming no serial correlation, is 13%.
Re:After Boeing declines to pay up, ransomware group leaks 4... by verdverm on Tuesday November 21, 2023 @04:54AM (#38361589)
Yes, there is a better, more accurate method than my napkin math, which was only to provide a baseline most could understand to see we are well beyond the two nines
Re:After Boeing declines to pay up, ransomware group leaks 4... by NL807 on Monday November 20, 2023 @08:07PM (#38357393)
Kinda scary how many times I flew with those in 80s.
Re:After Boeing declines to pay up, ransomware group leaks 4... by ethbr1 on Tuesday November 21, 2023 @11:05AM (#38365493)
I was thinking about that... but even with a relatively abysmal safety record... on average it's still an incredibly safe way to travel.

Air safety seems the quintessential "discounting the horror of extremely rare accidents from the actual total safety rate" mental trap.

When it's years between incidents, and that widely used? Yeah, I'd still fly on one if I needed to.

But I swim in the pool during thunderstorms too, so not really a zero risk type person.

Re:After Boeing declines to pay up, ransomware group leaks 4... by sterlind on Tuesday November 21, 2023 @02:14AM (#38360414)
not to mention the Tu-144, aka the "Concordski":

https://en.wikipedia.org/wiki/Tupolev_Tu-144

though that one was so defective that even the Soviets didn't want to risk flying it. it could barely get into the air, and that'd be with several major faults and alarms blaring.

Re:After Boeing declines to pay up, ransomware group leaks 4... by xcdzvyn on Tuesday November 21, 2023 @02:20AM (#38360444)
I disagree that it's possible to estimate how dangerous an aircraft is based on its incidents/flight ratio. There's lots of other factors: Russian weather, inadequate training, inadequate maintenance, and far more landings on poorly maintained and even totally unpaved runways:

> Capable of operating from unpaved and gravel airfields with only basic facilities, it was widely used in the extreme Arctic conditions of Russia's northern/eastern regions, where other airliners were unable to operate.

Re:After Boeing declines to pay up, ransomware group leaks 4... by KHRZ on Tuesday November 21, 2023 @03:29AM (#38360957)
Russian weather? Is this an euphemism for Russian air defense?
Re:After Boeing declines to pay up, ransomware group leaks 4... by johann8384 on Monday November 20, 2023 @07:53PM (#38357265)
> nobody is flying an airplane that only 'works' 99.99% of the time

The 737 Max 8.

Re:After Boeing declines to pay up, ransomware group leaks 4... by deaddodo on Tuesday November 21, 2023 @01:15AM (#38360033)
Already addressed in another thread:

https://news.ycombinator.com/item?id=38358542

Re:After Boeing declines to pay up, ransomware group leaks 4... by thret on Monday November 20, 2023 @07:58PM (#38357301)
Boeing are a major defence contractor, I'm sure at least some of the information is secret.
Re:After Boeing declines to pay up, ransomware group leaks 4... by newuser94303 on Monday November 20, 2023 @08:42PM (#38357718)
A defense contractor should have better security
Re:After Boeing declines to pay up, ransomware group leaks 4... by martinsnow on Tuesday November 21, 2023 @02:17AM (#38360430)
Really
Re:After Boeing declines to pay up, ransomware group leaks 4... by reactordev on Monday November 20, 2023 @06:45PM (#38356675)
Sounds a lot like software forks… cough

Not the ones that were forked due to abandonment, but the forks due to “irreconcilable differences”.

Re:After Boeing declines to pay up, ransomware group leaks 4... by denimnerd42 on Monday November 20, 2023 @07:54PM (#38357274)
or hadoop
Re:After Boeing declines to pay up, ransomware group leaks 4... by SomeRndName11 on Tuesday November 21, 2023 @05:55AM (#38362006)
1. It was USSR, not Russia. For many who were USSR citizen till 1991, but neither ethnically or geographically Russians, this rubs very wrong way.

2. Aviation in the USSR was developing completely independent, and you can accuse USSR in stealing technology in many areas but certainly not in aviation.

Re:After Boeing declines to pay up, ransomware group leaks 4... by bozhark on Monday November 20, 2023 @06:21PM (#38356433)
Already had it
Re:After Boeing declines to pay up, ransomware group leaks 4... by est on Monday November 20, 2023 @10:19PM (#38358645)
> Now, you will need to create a company and supplier base the size of Boeing to make any use of this

China: hold my baijiu

Re:After Boeing declines to pay up, ransomware group leaks 4... by paledot on Monday November 20, 2023 @11:05PM (#38359031)
Guaranteed they already have the data they want.
Re:After Boeing declines to pay up, ransomware group leaks 4... by SR2Z on Monday November 20, 2023 @11:24PM (#38359212)
Then why hasn't COMAC produced a viable jetliner?
Re:After Boeing declines to pay up, ransomware group leaks 4... by dghlsakjg on Tuesday November 21, 2023 @12:17AM (#38359632)
Because having the plans for something and having capability, materials and funding to do it are two different things.
Re:After Boeing declines to pay up, ransomware group leaks 4... by testrun on Tuesday November 21, 2023 @01:10AM (#38360007)
According to Wikipedia Comac has orders in the range of $26 billion for the C919.
Re:After Boeing declines to pay up, ransomware group leaks 4... by elsonrodriguez on Tuesday November 21, 2023 @02:03AM (#38360343)
The same article notes that they are using an engine by GE/Safran, and that there was espionage involved in the development of the C919.
Re:After Boeing declines to pay up, ransomware group leaks 4... by vidarh on Tuesday November 21, 2023 @03:19AM (#38360872)
And? Neither of these things change what was being claimed and disputed above.
Re:After Boeing declines to pay up, ransomware group leaks 4... by lozenge on Tuesday November 21, 2023 @04:39AM (#38361481)
Apparently, the engines might be 20% of the cost of the plane. https://aviation.stackexchange.com/a/16018
Re:After Boeing declines to pay up, ransomware group leaks 4... by coldtea on Tuesday November 21, 2023 @05:19AM (#38361752)
Happens to the best of them:

Economic and industrial espionage has a long history. Father Francois Xavier d'Entrecolles, who visited Jingdezhen, China in 1712 and later used this visit to reveal the manufacturing methods of Chinese porcelain to Europe, is sometimes considered to have conducted an early case of industrial espionage.[16]

Historical accounts have been written of industrial espionage between Britain and France.[17] Attributed to Britain's emergence as an "industrial creditor", the second decade of the 18th century saw the emergence of a large-scale state-sponsored effort to surreptitiously take British industrial technology to France.[17] Witnesses confirmed both the inveigling of tradespersons abroad and the placing of apprentices in England.[18] Protests by those such as ironworkers in Sheffield and steelworkers in Newcastle,[clarification needed] about skilled industrial workers being enticed abroad, led to the first English legislation aimed at preventing this method of economic and industrial espionage.[19][18] This did not prevent Samuel Slater from bringing British textile technology to the United States in 1789. In order to catch up with technological advances of European powers, the US government in the eighteenth and nineteenth centuries actively encouraged intellectual piracy.

Re:After Boeing declines to pay up, ransomware group leaks 4... by fennecbutt on Wednesday November 22, 2023 @10:47AM (#38380783)
It's a very fair point but it's a then and now thing lmao.

I can't justify slavery in x country because "well the west did it before and so now it's their turn" (to use an extreme example and yes I know that slavery has already occurred in almost every country/is still occurring in some).

Re:After Boeing declines to pay up, ransomware group leaks 4... by SR2Z on Tuesday November 21, 2023 @10:45AM (#38365190)
From Chinese airlines that are being told in no uncertain terms that they need to place some orders. Most of that order book is protectionism.
Re:After Boeing declines to pay up, ransomware group leaks 4... by M3L0NM4N on Tuesday November 21, 2023 @01:56AM (#38360286)
If they had the money to, they could.
Re:After Boeing declines to pay up, ransomware group leaks 4... by protomolecule on Tuesday November 21, 2023 @03:15AM (#38360842)
Re:After Boeing declines to pay up, ransomware group leaks 4... by Hissigh on Tuesday November 21, 2023 @05:01AM (#38361648)
I flew with this 2 years ago. Looks like a standard boing/airbus from the inside but the sound isolation is so bad, it's very loud inside
Re:After Boeing declines to pay up, ransomware group leaks 4... by coldtea on Tuesday November 21, 2023 @05:17AM (#38361739)
Well, if you've managed to create an airliner, starting from not having made one at all before, then the sound isolation would be the most trivial thing to improve in an update.
Re:After Boeing declines to pay up, ransomware group leaks 4... by est on Tuesday November 21, 2023 @08:21AM (#38363271)
> I flew with this 2 years ago

You sure? C919 didn't start commercial flights until this year (2023)

Re:After Boeing declines to pay up, ransomware group leaks 4... by SR2Z on Tuesday November 21, 2023 @10:48AM (#38365244)
That was my understanding, too.
Re:After Boeing declines to pay up, ransomware group leaks 4... by coldtea on Tuesday November 21, 2023 @05:15AM (#38361730)
Because it takes time, not just data. To set up infrastrcuture, to do tests, to train, etc. Hell, it takes Boeing itself several decades to design a new aircraft model, even though they have done it several times before.

The US for example trying to get back some of its domestic manufacturing prowess, after decades which has outsourced it to China which has gotten really good at it, has a 10-20 year barrier to overcome before it can even start to get to the same level, and that's if all goes well and no stupid decisions are made. Which is not very likely.

Re:After Boeing declines to pay up, ransomware group leaks 4... by SiempreViernes on Tuesday November 21, 2023 @09:42AM (#38364251)
They have just gotten recent Boeing data /s
Re:After Boeing declines to pay up, ransomware group leaks 4... by pyuser583 on Tuesday November 21, 2023 @12:13AM (#38359606)
If only .001% of the population of China bought a 747.
Re:After Boeing declines to pay up, ransomware group leaks 4... by lolive on Tuesday November 21, 2023 @03:31AM (#38360975)
Airbus needed a corpus to train its LLM. Now they have.
Re:After Boeing declines to pay up, ransomware group leaks 4... by Thervicarl on Tuesday November 21, 2023 @03:51AM (#38361104)
This should guide them if they want to modify existing airliners so they are better equipped to crash into the ground, 737 MAX style. No thanks.
Re:After Boeing declines to pay up, ransomware group leaks 4... by KRAKRISMOTT on Tuesday November 21, 2023 @04:07AM (#38361212)
They just need to ask the British Prime Minister. His father in law's company is where those jobs get outsourced to for cheap.