News for hackers. Stuff that matters.

A comment on Bypassing airport security via SQL injection. Parent comment

Re:Bypassing airport security via SQL injection by partiallypro on Thursday August 29, 2024 @06:30PM (#41396001)
Pilots are also now told to not open the cockpit door, no matter what's happening in the cabin and to land the plane. There is a near 0 change you could take control of the plane. I would be more concerned about someone bringing a bomb on board.
[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by tiagod on Thursday August 29, 2024 @10:37PM (#41397300)
What if you hack a system that allows you into the cockpit with no additional checks? That would be crazy...
[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by lovecg on Thursday August 29, 2024 @11:30PM (#41397503)
A random person pretending to be an airline pilot in a room full of airline pilots? I don’t see it happening, they’ll get kicked out in a second.
[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by sjamaan on Friday August 30, 2024 @04:36AM (#41398802)
You don't have to pretend to be a pilot. Any cabin crew is allowed in the cockpit, AFAIK
[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by mpeg on Friday August 30, 2024 @06:06AM (#41399280)
Not just cabin crew, a lot of the time anyone flying standby is offered the jumpseat if there are no other seats available out of courtesy. Especially if they are an airline employee, but often non-employees too.
[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by mjlee on Friday August 30, 2024 @07:19AM (#41399641)
I don't think just anyone is allowed to sit in the jumpseat in the cockpit.
[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by sojournerc on Friday August 30, 2024 @08:08AM (#41399889)
My dad was an airline pilot. Policy was you had to be in uniform to sit in the jump seat, and, yeah, it's not open to just anybody. If he was flying standby to get home, he would take it if no other option was open.
[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by Reubachi on Friday August 30, 2024 @09:07AM (#41400322)
In US, and I imagine elsewhere....this is completely untrue for any commercial flights or honestly anything carrying legitimate insurance.

I have never heard of a plain clothes non-employee in cockpict jumpseat.

[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by grumple on Friday August 30, 2024 @07:22AM (#41399654)
The 9/11 hijackers were trained as pilots though.
[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by lovecg on Friday August 30, 2024 @11:02AM (#41401382)
This is like a person who took a few python courses pretending to be a software engineer with a full time job, the lie becomes very clear after a few sentences.
[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by Cthulhu_ on Friday August 30, 2024 @04:22AM (#41398749)
The thing with this hack though is that it seems to be able to greenlight someone pretending to be staff to enter the cockpit as a passenger.
[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by kayodelycaon on Friday August 30, 2024 @11:16AM (#41401535)
How did they get the keycode? It’s basically two factor. You need both the code and the pilot allowing you in.

I’m pretty sure there is a second code on some planes that alerts the pilots someone is attempting to force the crew to open the door.

[ Parent | on HN ]