Posted By Thomas E. Ricks Share

Joint Chiefs Chairman Adm. Mullen says no harm was done by letting the enemy view video feeds from U.S. surveillance drones.

But a contractor I know explains some of the dangers of this situation might not immediately be apparent. In the note below, TTP, btw, is "tactics, techniques and procedures" -- that is, how the military does what it does. SIPR is "secure internet protocol router," if I recall correctly. And if you don't know what UAV is, you're probably in the wrong blog, looking for Megan Fox.  

When I was working on a multi-platform video dissemination technology, we raised the possibility of anyone being able to get feeds back in 2007. My argument was that because the downlink is not encrypted anyhow, why are we wasting valuable SIPR bandwidth to disseminate video feeds for tactical level UAVs? Truthfully though, this is bad. The TTPs for using UAVs can lead to early warning for the enemy, and also provide target information to the enemy ... often the UAV will circle where the staging area for an op is at, and then move to recon the site and then back to a staging area. The videos also maintain oversight on troops in contact, downed helos, etc. UAVs also fly at certain times to search for IED activities ... but yeah, it isn't the local insurgents that make me wary ... it is the Iranian and other intel agencies that are getting the info. Commanders have come to rely a great deal on the UAV capabilities. I am truly surprised this is just now coming out in the news.

Meanwhile, someone has hacked into South Korea's war plans. My guess is the Chinese, who I think are far more active in this area than people suspect. Why are they doing it? Because they can. Kind of like taking satellite photos of other peoples' military bases. 

Deb Smith/U.S. Air Force/Getty Images 

 

GREGSANDERS

7:10 PM ET

December 18, 2009

Isn't the conventional wisdom that China is really into hacking?

I was rather puzzled by your statement that you think the PRC is more into hacking than most people expect. I thought that expectations regarding China, as well as Russia, are already pretty high. So do you think those already high expectations are low balling it or do you think the conventional wisdom doesn't think China invests a lot in cyber asymmetric warfare capability?

I don't think the conventional wisdom even particularly breaks down based on support of engagement with China. Although there is some disagreement about the extent to which nationalistic hacker attacks are independent of the state.

 

STARBUCK

8:50 PM ET

December 18, 2009

I object!

Right aviation blog, wrong tag ;)

 

STEVEN THOMAS SMITH

9:26 PM ET

December 18, 2009

Amazingly, Insurgents Not Thought to be Capable of Pirating TV

On the one hand, says the CBS report,

senior commanders largely dismissed the concerns as they were too preoccupied with the more material threats of the day; IEDs and insurgent attacks in Iraq and Afghanistan. The enemies in those countries were not considered technically advanced enough to downlink the unencrypted video themselves

On the other,

In 2002, a British engineer who scans satellite signals for recreation at his home stumbled across a NATO video feed from the Kosovo war.

Anyone pirating satellite channels in Iraq—no doubt a popular way to watch tv—could have discovered a very interesting extra "channel", or the insurgents or their allies could have just watched media reports documenting this weakness.

Tom, you must have watched widely available Iraqi insurgent propaganda. This Predator episode brings to mind Jaish al-Rashideen's video "Code of Silence". Start watching this clip at 0:32 and listen to the boastful insurgent, narrating a purported precision missile attack,

According to the Lie Department, we are just a bunch of primitive barbarians with absolutely no brain in our heads. [Camera pans over masked insurgents in boardroom planning attack while typing on laptops.]

So your original take about underestimating the enemy—even to the point of doubting their ability to watch free tv!—is unfortunately correct.

 

PETE

11:11 PM ET

December 18, 2009

Research and Development Projects

One of the dilemmas of how to organize research and development projects is that although small teams can develop products more rapidly than large bureaucracies, the small agile team is also more likely to overlook something important, such as the vulnerability of transmissions to interception. Unfortunately the DoD R&D life cycle model often drags things out for as long as 12 years before a product is in the hands of troops.

 

RUBBER DUCKY

11:38 PM ET

December 18, 2009

A new approach to military strategy...

"Always underestimate the enemy!"

Am starting to think that tech-savvy should be a prerequisite to flag rank. Today's WSJ piece on the drone flap strongly suggests that the senior military officials who were so cavalier in dismissing the need for down-pipe encryption just didn't understand 'the internets' and all that stuff.

 

OCEOLA

7:56 AM ET

December 19, 2009

I noted you mentioned flag

I noted you mentioned flag rank needing to become more tech savvy.

It probably had more to do with expediency and possibly CYA, providing product and real time information moving (note: information not necessarily intelligence) to the actionable user, least someone ask why these available platforms weren't being tasked immediately.

Since everything was rocking along in a steady manner, with much hubris in the general headlines, why listen to the propeller head techs who've been saying, "I told you so?"

Stupid is as stupid does. Sorry Rubber Ducky, I dislike seeing compromise of our tactical and national assets, whether by mouthy people or lapses in encryption.

 

RUBBER DUCKY

11:40 AM ET

December 19, 2009

Hey, we're in violent agreement

I don't see much daylight between my thoughts and yours. Where's the beef?

 

OCEOLA

2:15 PM ET

December 19, 2009

Excuse my awkward wording

Excuse my awkward wording that lead you to believe I had a beef. I don't. I have been following you on this blog for awhile, and find you quite erudite.

I only meant to convey that expediency outweighed security not so much in regard to understanding the technical issues as it did with what value the raw product held for anyone intercepting it. That is where the lapse in understanding and underestimating plays in.

Though the Air Force supports the program, this struck me odd since the CIA has operational control of it, and is generally unwilling to share trig lists, past and future, yet allowed real time video feed of recce missions to be compromised, which is specifically odd for the mindset culture at the Agency.

 

BILL KELLER

12:14 AM ET

December 19, 2009

Quick Reaction frontend is working...

it is the follow-on gap - that place between the nimble who are needed and the phalanx program of record REMF.

How does the adjustment occur or middle ground transition....commercial product managers are good at this.

DoD is more in-transit military and non accountable SES and civil service. They are like product line managers in the order of Chrysler or the old GM before 1980. Good medical and retirement programs, private country clubs, trade schools and suppliers that are eager to hire family members, sponsor sporting events and meet what is desired. Cost no object or higher the cost the higher the rank.

 

MATCHEYDJ

2:48 AM ET

December 19, 2009

Patrol Routes

What I wonder is if the enemy is able to access stored video and not simply a live feed -- if so, I would hope that a single UAV is not used for surveillance of both Enemy and Friendlies. If a unit captures video of US troop movement and that video is carried with it to a place where the feed can be intercepted there is the danger of giving away serious intel.

 

WALKING WOUNDED

3:48 AM ET

December 19, 2009

2-3 years ago

it was news that the troops patrolling from platinum- wired armored vehicles could finally view the sky-eye video feed on their problem, instead of talking about what it showed, maybe over a sat-delayed link.

It's worth considering that our technical security (in many cases) may cost us more in delays and confusion, inability to access our own stuff, than it protects us from the enemy.

Consider the USS Liberty, pleading for fighter cover, while the 6th Fleet puzzled over the lack of com protocol, let alone passwords, and waited for guidance from 5 time zones away. Two years later it was sister ship Pueblo's turn. And those were premiere USN communications platforms, tasked to operate on the edge of a conflict zone.

To err is human. Bleeding too. But not necessarily by the same folks.

 

JSINAIKO

6:09 PM ET

December 19, 2009

Wifi Encryption...

does not slow anything down AFAIK. A simple WPA2 protocol would probably do the trick. If the insurgents or whoever can hack into secure data streams, well OK, but we are talking about stuff that is in the clear with zero hacking involved.

Why is it that all other military and important diplomatic communications are scrambled, encrypted, or secured in some way and these aren't? it ain't rocket science - in fact it's hardly computer science. Every $75 consumer wireless router sold has WPA2 capabilities. And these platforms don't?

There is something wrong with that picture.

 

RUBBER DUCKY

11:20 AM ET

December 20, 2009

 

KDVINER70

2:47 PM ET

December 21, 2009

Beadwidnow

Ducky - that it absolutely true. I used that phase hundreds of times in a three year stint in a Phantom squadron mid 70's. We couldn't stop it then and apparently not now. 20 years experience in naval intel proved one thing to me - nothing is truly secure, not comms, not documents nothing. We are too lazy to do security right. Oh the stories that could be told!

One other comment on the post that wondered if past video could be accessed - I'll bet they also have DVRs!

 

BILL KELLER

12:42 PM ET

December 20, 2009

New digs here...

Dear Tom;

Like the new format. Your site architects have done you well here.

Aside, with healthcare, high plains surge, planet above water, this President understands fundamentals and audacity is most fundamental when it survives against darker forces and its very good to get off the beach as soon as possible.

Now back to the drones either in the air or elsewhere.

 

BOBFAN

2:27 PM ET

January 25, 2010

This doesn’t seem to be much

This doesn’t seem to be much of an issue.
What does it matter if the goat knows the tiger is watching from the nearby tree? Unless the goat can outrun or outfight the tiger, the result will still be the same.
When fighters or drones can launch bombs and missiles from miles away, hacked visual feeds become next to useless for intelligence purposes.
And when drones become fully automated, there will be no visual feeds for the enemy to hack at all.
Oh. And the idea of ‘innocent goatherds’ being the ones hacking into military drone aircraft? That made me laugh. Thanks HBC.
Regards - Car Leasing

 

ID.RICKY

4:02 AM ET

February 2, 2010

Hacking the data to keep

Hacking the data to keep update about the Security Systems developments of other countries or might be we can say about the enemy countries is a common strategy of every country. So according to me its wrong to take any
particular name as every one is doing the same. Its very important to
know how they used the hacked data for their further preparations for
any war or attack. Even after having latest technology ie. telephone
tapping etc. at the time of attack or say war its really necessary to
see how much and in what way it can be utilized to stop it early. Which
I think is very rarely happening.

 

Thomas E. Ricks covered the U.S. military for the Washington Post from 2000 through 2008.

Read More