Whispers Among the Stars
James Pavur demonstrates intercepting sensitive satellite internet traffic across maritime, aviation, and terrestrial infrastructure using $300 of TV equipment.
Summary
Architecture and Background
Global satellite communications (SatCom) provide mission-critical internet access to aircraft, ocean vessels, energy grids, and remote military installations. Geostationary telecommunications satellites broadcast high-throughput Ku-band and Ka-band downlinks covering vast geographic footprints across continents and oceans.
Vulnerability Analysis
Due to historical assumptions regarding equipment cost and atmospheric attenuation, substantial volumes of commercial satellite traffic are transmitted without link-layer encryption. Any listener positioned within thousands of square miles of the satellite footprint can capture unencrypted downlinks without transmitting radio signals.
Exploitation and Demonstrations
Pavur demonstrates eavesdropping attacks utilizing approximately $300 of commercial home satellite television equipment and an open-source software-defined radio pipeline. Case studies across air, land, and sea domains show intercepted corporate emails, aircraft passenger internet sessions, navigational telemetry from maritime oil tankers, and administrative traffic.
Remediation and Defensive Strategies
Pavur introduces open-source defensive tooling, including an encrypted satellite proxy testbed designed to safeguard broadcast feeds. Telecommunications operators and enterprise users must mandate end-to-end transport layer encryption (TLS/VPN) and link-layer cryptographic encapsulation across all satellite downlinks.
Related talks
Creator Stage·38 min
Federico Lucifredi
Tutorial on keyboard attack vectors, ranging from hardware keyloggers and Van Eck phreaking electromagnetic emanations to acoustic typing eavesdropping.
Main Stage·43 min
Erwin Karincic · Woody
Discloses cryptographic and firmware vulnerabilities in goTenna Pro mesh networking devices, allowing off-grid key extraction and message decryption.
Main Stage·23 min
Andrew Logan
Demonstrates how real-time AI voice cloning and software-defined radios can inject fraudulent air traffic control clearances on unencrypted VHF frequencies.


