Hacker Read top | best | new | newcomments | leaders | about | bookmarklet login

Tag the coded signs on a GPS map. If the detected "sign" is not on the GPS map the system can label it as "probably malicious".


sort by: page size:

They would have to be signed including GPS coordinates, otherwise they would be vulnerable to a replay attack. And since GPS is not that precise, you would still be able to, say, take two nearby signs and switch them.

Why aren't GPS signals signed?

Why aren’t GPS signals digitally signed? It would be simple to prevent this kind of attack.

is there any reason not to sign all gps signals?

No, those markers work by listening to the GPS signals for an extended period of time and maybe PPK or perhaps an alternative network that's not satellite based.

... or there's a hostile attack on your location that somehow manages to disturb GPS signals.

they'd be able to tell by the GPS coordinates, whether they bother, who know?

There are legitimate reasons to read GPS signal but we still show a notice when it happens.

GPS by itself could be easily spoofed. It's a well-known protocol that is broadcast in the clear.

We might have computers, but GPS signals can be spoofed:

https://en.wikipedia.org/wiki/Spoofing_attack#GPS_Spoofing


GPS signals are very weak. Simply broadcast your own fake signals at the target.

I think the thrust of GPs argument is "Before they take away the UA string (the one clumsy tool that I can use to half-accomplish my goals) I wish they'd add official APIs to detect these kinds of things".

That's completely unrelated. "GPS" on that sign is shorthand for "navigation map data". Even in populated areas like bay area, there are instances of this all around.

> if the car's local sensors deviate from the gps data significantly, that should throw up a red flag to the car and driver.

This happens too often for benign reasons (and GPS hacking too rare) for it to be useful. The GPS system in my Ford Focus jumps around wildly if I start the car in an enclosed space before it gets a good lock, and it can be thrown-off under bridges and around tall buildings as it doesn't have A-GPS (does any car have A-GPS?). The worst is when a poor signal is combined with road-snapping - I've had a lot of trouble with off-ramps on partially submerged urban highways, the I-5 in downtown Seattle, for example.


We are using a lot of signals too. GPS is the only one we talk about :)

You're right, it is a very delicate line between catching as many cheaters as possible while avoiding false-positives. We like to err on the side of false-negatives as much as possible.


I changed the start-up image on my GPS. It's now got a background of a satellite, with text saying "Your position has been relayed to the GPS system".

Obviously that's preposterous, but my theory is that it might make some thief wary of stealing it.


Spoofed gps?

considering that GPS has civilian and military parts of the signal, are the messages not signed by, i don't know, U.S. military or something? how come it is easy to spoof?

Do GPS signals not correlate themselves with a compass reading? I would think that comparing the change in coordinates to the external fact would prevent spoofing.
next

Legal | privacy