We have previously discussed the delicate legal situation of drones, their commercial potential, and some of the options available on the market, but there is another critical aspect we cannot ignore: security. "Hacking" drones — or rather, affecting their proper functioning remotely — is generally possible thanks to manufacturer oversights when encrypting connections and implementing adequate locks. The folks at MAKE decided to put these flaws to the test with a Raspberry Pi, a Wi-Fi module, and the popular Parrot AR.Drone 2.0.
Flying a drone is a very entertaining activity as long as it is carried out safely and responsibly. There are dozens of reasons why a classic 'neighbor war' can start, and the last thing we want is a drone adding fuel to the fire. Of course, the web has already recorded multiple disputes, and across the pond, the US FAA keeps shouting that shooting down a drone is a federal crime, although more than one judge seems to have decided to overlook that detail. Meanwhile, we must not forget that a drone is essentially a flying computer, and as such, it can be hacked. In the name of flexibility, compatibility, and ease of use, many manufacturers choose Wi-Fi as the main communication method between drone and pilot; however, their security efforts often leave much to be desired.
The MAKE Experiment
The MAKE portal explored this weakness using relatively common hardware: a Raspberry Pi with a small LCD screen to access a Linux terminal, a compatible USB Wi-Fi module, and the Parrot AR.Drone 2.0, one of the most popular and recommended drones. This drone is packed with sensors and other advanced elements that can be manipulated with the right tools… but disabling the drone is a relatively direct operation, to the point that I don't know if we can call it 'hacking.' Why? Because there is no encryption, no protocols to breach. The tutorial explains that the AR.Drone 2.0 works as an access point, so we connect to it without much difficulty. A couple of scripts, a brief telnet session (yes, telnet appears to be open on the AR.Drone 2.0), making the scripts executable, and that's it. A drone on the floor.
Going Further
Another possibility mentioned in the tutorial is modifying the Wi-Fi module with a 'cantenna', or in our terms, a homemade directional antenna to increase range. Needless to say, this tutorial won't apply 100 percent to other drones, since manufacturers can increase security with simple updates, but if the Internet of Things is a festival of holes, what would make us think differently about the legion of Chinese drones invading the Western market?
MAKE
