US Navy collisions stoke cyber threat concerns
mcclatchydc.com
mcclatchydc.com
I await the scapegoating of the crew to protect the higher-ups.
Considering the leadership of the Fitzgerald have been removed, why would you expect scapegoating of the crew to occur in this case?
> The commanding officer, executive officer and senior non-commissioned officer of the USS Fitzgerald have been removed from their duties for cause amid the fallout surrounding the deadly collision between the USS Fitzgerald and a cargo ship off the coast of Japan on June 17.
"We've lost trust and confidence in their ability to lead in those positions and they will not return to the ship," Vice Chief of Naval Operations Adm. William Moran told reporters at the Pentagon late Thursday. The 7th Fleet also said several junior officers were relieved of duty.
http://www.cnn.com/2017/08/17/politics/uss-fitzgerald-leader...
And do they determine "deadlines" like when they must arrive at a destination? How much flexibility do they have in adjusting arrival time, particularly if [unforeseen] circumstances delay transit?
http://gcaptain.com/editorial-red-red-us-naval-leadership-no...
At this point, the American people deserve nothing less than an extraordinary response and complete accountability throughout the ranks. When destroyers are getting rammed by cargo ships, and guided missile cruisers are colliding with fishing bots, and running aground, we have a systemic problem with training, discipline, or protocol, likely all three.
You simply cannot blame broken GPS on getting your destroyer rammed by a 20,000 ton cargo ship. Our enlisted deserve better, and Admirals should be getting shit-canned for this.
They were accused of cheating, the officers upbraided, and the whole scenario rewound to erase the embarrassing incident.
It occurs to me that you could probably climb the outside of a ship with sci-fi electromagnetic gloves/boots, but I've never heard of anyone actually making anything like that.
The freeboard of a modern destroyer is usually below 10M and much lower around the flight or water operations decks.
https://en.m.wikipedia.org/wiki/USS_Fitzgerald#/media/File%3...
Edit: better picture with sailors for scale https://defencyclopedia.files.wordpress.com/2015/05/burke-in...
The NYT reported many years later: "In the simulation, General Van Riper sent wave after wave of relatively inexpensive speedboats to charge at the costlier, more advanced fleet approaching the Persian Gulf. His force of small boats attacked with machine guns and rockets, reinforced with missiles launched from land and air. Some of the small boats were loaded with explosives to detonate alongside American warships in suicide attacks. That core tactic of swarming ..."
Thus, to answer your question, they did not go up the ship. The attack is generally reminiscent of the USS Cole bombing, which preceded the simulation by a couple years.
Sleep deprivation has continued to be pointed to as a major issue on ships, and yet from the CNO down, this has been ignored and nothing done: https://www.usni.org/magazines/proceedings/2017-07/let-our-s...
With two deadly collisions in the same fleet, I bet there is some silly regulation/task that is keeping watch standers from getting enough sleep. It could be as simple as letting sleeping personnel get pulled into working parties as everyone else is on watch or doing repairs/maintenance.
I wouldn't be surprised if things got worse as they pile even more training requirements on trying to fix the issue.
The US Navy has released surprisingly little info on the Fitzgerald collision. The new "report" is all about damage control after the collision, not the events leading up to it.
--EDIT--
I believe this incident occurred early in the morning around 5:24 a.m and I don't think it was in total darkness. Also, what about the transport ship? Shouldn't they also have the ability to detect (and also human for lookup) since this is one of the busiest lane?
That's not accurate.
> the ship was still in good condition
This is just a crazy thing to say.
A collision between a 10,000 ton destroyer and a 20,000 (?) ton cargo ship dissipates a lot of energy into the water and churns up a lot of turbulent water, if someone fell into the water in the dark, it's not at all surprising that they'd be unable to surface. A human loses buoyancy around 30 feet deep in the water so if you're pulled 30 feet down in the dark, it can be disorienting and hard to figure out which way is up.
Monday's collision east of Singapore was the second involving a ship from the U.S. Navy's 7th Fleet in the Pacific in two months. The Navy said "significant damage" to the McCain's hull caused flooding in adjacent compartments, including crew berths, machinery and communications rooms.
- Crew berths were at the primary impact point, so are almost certainly sealed at the bulkheads by damage control.
- Incident occurred at 5am local, when you'd expect berths to be popular.
- Sunrise is 7am local, so it was dark - so you wouldn't expect to have any unnecessary crew topsides (precisely because finding MOBs in the dark is near impossible) - and you'd hope any that are, have protective or flotation equipment.
- You'd also expect that 10 people running around on deck would have had a much better chance of spotting another ship.
- The proof is in the pudding - for not one of them to have been spotted in one of the world's busiest corridors, doesn't bode well.Learned something new today, thanks for that. Didn't even realize this was possible.
However, these collisions could be caused by spoofing the general maritime traffic so the US ships are on the 'correct' course and everyone else is offset.
These collisions could not be caused by anything but massive human failure, because while the military may exploit networked electronic conveniences to track expected civilian traffic positions, that's not supposed to be the only system they have.
And they'd be useless as warships if that was their only way of detecting larger ships than their own size short of bumping into them.
There are also military specific parts of GPS that civilian receivers can't access. I don't know if military receivers are ignoring civilian signals, though.
For all intents it's a different system, the packets are encrypted, the right receiver hardware gives you vastly superior accuracy. There's civilian hardware which can use the packets without decrypting them for better accuracy, there's some patents on doing this amusingly.
Don't forget that several wars have started based on misattributed events. In just the U.S.: The Maine and the Spanish-American War, the Gulf of Tonkin and the Vietnam War, Iraq's WMD program and al-Qaeda alliance and the Iraq War ...
And attribution is especially difficult in attacks on computer systems. An enterprising, well-resourced actor could provoke war between enemies or division between allies with a well-crafted attack.
"Misattributed" is soft-pedaling it. The war pigs tell these lies so they can make money by killing hundreds of thousands of innocent people.
The U.S. and allies helped drive Qaddafi from power. They didn't physically destroy Libya, though maybe politically.
> because some exile in Switzerland claimed Qaddafi was being extra super mean, only he wasn't.
Qaddafi's human rights record was very well known for a long time, and he also made enemies in the West by supporting terrorists and destroying a commercial airliner in flight, killing its passengers. The immediate cause of the West's intervention was that Qaddafi was openly about to destroy rebels (including civilians, IIRC). I'm not sure how much of a role this exile played.
https://www.foreignaffairs.com/articles/libya/obamas-libya-d...
http://foreignpolicy.com/2016/03/22/libya-and-the-myth-of-hu...
Holy shit those lies were so transparent that even staid mainstream media brands felt compelled to debunk them! Even if those lies had been true, why did we care so much about Libya and not about nineteen other brutal corrupt dictators in Africa and around the world? Qaddafi had already given up his nuclear program, and DPRK rightly points out that that mistake cost him everything. How convenient for those who benefit from both the current European refugee crisis and from escalated conflict in Korea!
I would assume a navy ship would have multiple people with eyes 'outside the boat' especially in a busy shipping (and piracy ridden) lane such as the Malacca Straits?
This is a hard attack, but not not impossible. The Iranians are rumored to have used this technique to down a stealth drone the US was using for spy purposes.
You would mainly have to know alot about the orbits of the GPS satellites to be able to convincingly simulate their signals from a given point on the globe.
Do GPS receivers validate satellite orbits? Do they even know what all the satellite orbits are supposed to be?
http://spectrum.ieee.org/telecom/security/protecting-gps-fro...
They did a record, replay with a USRP B210 and GPS antenna.
And here is a project that generates GPS baseband signal data streams for bladeRF, HackRF, and USRP.
It seems like a massive oversight to keep encrypted GPS signals for use exclusively for US military. As mentioned in another comment, the collision could have been caused by spoofing the commercial ships GPS rather than a cyber attack on the Navy vessel.
The ability to selectively enable GPS in a region for only US military (as mentioned, once again, in another comment) doesn't even seem like that big of a strategic advantage - surely a sophisticated enemy wouldn't rely on GPS, would they?
Any strategic advantage doesn't really seem worth the potentially massive damage that could be caused by a large scale spoofing of GPS signals.
https://en.wikipedia.org/wiki/GLONASS https://en.wikipedia.org/wiki/Galileo_(satellite_navigation) https://en.wikipedia.org/wiki/BeiDou_Navigation_Satellite_Sy...
That will probably never happen, though.
Assuming, of course that they aren't fighting a common enemy which would let them convince all of those satellite owners to shut them down or degrade the voluntarily.
https://en.wikipedia.org/wiki/Anti-satellite_weapon#Limits_o...
That leaves the unsophisticated enemies.
Using spectrum filters, was able to track stars day and night (and I imagine potentially in bad weather).
https://timeandnavigation.si.edu/multimedia-asset/nortronics...
http://www.globalsecurity.org/military/systems/ship/ddg-51-u...
Everything integrated, and as long as at least one component talks wireless ... and there are actually a bunch of them, and as i mentioned, being an actual smartphone is only one of the features of those cheap smartphones bought at the local port :).
One can easily imagine that the ships which rammed (and/or some other ships close by) the destroyers could have carried cell towers and/or GPS spoof-er which were promptly, say, dumped overboard.
And leaving all that hi-tech aside - plain old $2K/bottle cognac, drink of choice of the 7th fleet :) https://federalnewsradio.com/tom-temin-commentary/2017/03/fa... , http://www.washingtonpost.com/sf/investigative/2016/05/27/th...
The closest thing I saw was "Shipwide interior wireless communications system", but that doesn't imply Wifi, and is likely just a digital trunking radio system -- not something a consumer Wifi device will be able to connect to.
Even if someone had developed the capability to spoof military grade GPS why would they use it on a random ship for no reason? That would accomplish nothing while tipping off the military that someone had cracked GPS.
Even if this is a GPS problem at all it is more likely to be a bug in the implementation than a targeted attack.
By Occam's Razor this is likely just a plain old human error and not some sophisticated conspiracy - someone was negligent and shit hit the fan.
Isn't is also possible to just hack into the computers of the civilian ship as they are likely incredibly insecure and basically do what you want with it? I understand most industry computer control systems incredibly dated and insecure.
Just speculation of course.
Just to play devil's advocate, here are a few hypothesis that could make malice have more sense in that case:
- The enemy has the capacity to spoof this but knows that it will soon be removed. May as well use it.
- The enemy knows that this vulnerability will not work on ships that are in conflict mode and is interested in removing two ships from the existing fleet in preparation of a conflict.
Pretty weak hypothesis if you ask me. Anyway, I can't say I am sad at seeing media and the general public talk a bit more seriously about cyber security.
I know nothing about the military or naval practices but this sounds hard and very costly... you want someone on shift 24/7 with his head constantly rotating watching out in all directions? Or maybe 3-4 people simultaneously looking out each in a single direction? That would mean you have a bunch of people doing literally nothing productive (besides watching) at any given point in time, some of them even being asleep since you want 24/7 shifts... and they have to not get bored or look away for any nontrivial period of time. It seems very difficult.
They are not doing "nothing productive", they are keeping watch to prevent exactly this type of accident from happening.
Do you really think that the entire ship goes to to sleep at night on a 2 billion dollar naval destroyer while it cruises in a crowded shipping lane? Even the $250M office/residential building where I work has 2 night watchmen and a building engineer or two on duty at all times... and the building is unlikely to have a collision when another building moves into its path.
I didn't say they all go to sleep, they probably have lots of things to do at various times. And I wasn't talking about more-sensitive points like crowded shipping lanes. I was just talking about having people on duty to literally keep a watch out over the sea the entire time. Not sure why you twist my words like that.
Or you're saying they do have watchmen 24/7 but their watchmen are just blind? How did they manage to collide 4 times this year if they had people watching the sea the whole time?
Oh, and don't forget others are suggesting sleep deprivation as the cause. Which is not exactly inconsistent with my point that keeping watch is probably difficult and costly...
Every vessel must at all times keep a proper look-out
by sight (day shape or lights by eyes or visual aids),
hearing (sound signal or Marine VHF radio)
and all available means (e.g. Radar, ARPA, AIS, GMDSS...)
in order to judge if risk of collision exists
So WTF was that destroyer doing for 10-20 minutes minimum that had it in a collision with another ship?