Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Insecurity Plagues Emergency Alert System
Kevin Poulsen, SecurityFocus 2002-09-10

The FCC-mandated network that lets officials interrupt radio and television broadcasts in an emergency is wide open to electronic tampering, and the government has no plans to fix it.

Comments Mode:
Insecurity Plagues Amber Alert System 2002-09-10
guest user (1 replies)
Insecurity Plagues Emergency Alert System 2002-09-11
Am I Anonymous?
Insecurity Plagues Emergency Alert System 2002-09-12
Zapperlink (1 replies)
Insecurity Plagues Emergency Alert System 2002-09-13
AM I Anonymous
Using the INTERNET as the primary and only transmission medium is a BAD idea. Even the protocols don't work in a broadcast (one-way) environment.

The primary premise of the EAS network is that every broadcaster must have two upstream sources and rebroadcast any valid messages received. (as specified in the FCC Part-11 rules)

The problems are: 1. Really dumb technology 520.83 bits per second?. 2. No way to validate the accuracy, e.g. no error detection included. 3. No authentication of message originator. 4. No recovery mechanism if something goes wrong. No way to cancel most kinds of messages, except verbaly. If someone inserts a few header bursts but no trailer everyone in the chain gets knocked off the air 'till the chief engineer shows up to reset it. This sort of problem has already happened a number of times. The FCC has 'prevented' this by making it illegal.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/613/16474#16474







 

Privacy Statement
Copyright 2009, SecurityFocus