AR "Zombie" Drones

[DaveyLC]

This guy has a really interesting project called "SkyJack", in essence its a way to sniff AR Drone wifi-packets and then take over control of the craft :)

The video is pretty interesting, check it out:

http://samy.pl/skyjack/

[rickydale]

It's a basic MITM attack, on the AR drone. It's a nice security flaw that AR should have patched. Really insecure wifi? Did some one not tell them this is 2013 and flaws in security wifi have been exploited for years. General rule if it's on wifi it's vulnerable. 4 yeas ago it took a hour on a laptop to break WEP now it take 2min on a android phone. WPA & WPA2 is better but capture the hand shake after sending a deauth packet and combine with a 1tb rainbow table and your in in 30min. WPS (the little button on your router for easy access) can take 10min or 10hours but so easy to break just takes time and you never have to see the router. This is a huge problem discussed every day in the Infosec community. Designers and coders don't always have security in the front of there mind let alone test for it.