Busting the BARR
Dustin Hoffman and Semon Rezchikov details busting the BARR: Tracking "Untrackable" Private Aircraft for Fun &Profit Dustin Hoffman President & Senior Engineer, Exigent Systems Inc.
Summary
Architecture and Background
Busting the BARR: Tracking "Untrackable" Private Aircraft for Fun &Profit Dustin Hoffman President & Senior Engineer, Exigent Systems Inc. Semon Rezchikov Independent Researcher Private aircraft provide transportation to interesting people: corporate officers, business owners, celebrities, high net-worth individuals, etc. In recent years, sites like FlightAware have made it trivial to access all public flight plans.
Vulnerability Analysis
However, aircraft owners can opt into a block list (the BARR) that prevents their flight information from being made public. All the interesting people are on the BARR. We'll explain the basics of how the the ATC system and sites like FlightAware work, demonstrate a serious, unpatchable method for tracking otherwise "untrackable", BARRed aircraft, and demo our site that lets you do the same.
Exploitation and Demonstrations
Dustin Hoffman is the president and senior engineer of Exigent Systems Inc., an IT services firm based in Southern California. He's interested in how all kinds of complex systems work and interact, whether technical, organizational, legal, or economic. He's held a Private Pilot's certificate (PPSEL) since 2008.
Remediation and Defensive Strategies
Semon Rezchikov is an independent security researcher and synthetic biologist. He masterminded last year's presentation on the FAST Airport Security System and is a 20 Under 20 Fellow. Over the summer, he's building flexible bioautomation robots and simulating synthetic morphogenetic multicellular patterning for MIT's Weiss Lab for Synthetic Biology. In his free time, he can be found playing around with mathematics, reading too many papers, and thinking of ways to mess with the systems around him.
Related talks
Main Stage·13 min
Alexander Minozhenko
Alexander Minozhenko explores how to hack vmware vcenter server in 60 seconds at DEF CON 20, examining penetration-testing and practical defenses.
Main Stage·1 hr 5 min
Dan Kaminsky
Dan Kaminsky details black Ops Dan Kaminsky Chief Scientist, DKH If there's one thing we know, it's that we're doing it wrong.
Main Stage·33 min
FX · Greg
FX and Greg details hacking [Redacted] Routers FX Leader, Phenoelit Group, Recurity Labs Greg Recurity Labs [Redacted] routers are no longer devices only seen in [Redacted].


