Article Lead Image

Photo by Robert Couse-Baker/Flickr (CC BY 2.0)

United Airlines blacklists security researcher for a joke about plane hacking

United boots the hacker, but says its flight computers are secure.

 

Dell Cameron

Tech

Posted on Apr 20, 2015   Updated on May 29, 2021, 1:02 am CDT

United Airlines stopped a security researcher from boarding a flight from Colorado to San Francisco on Saturday, three days after he was removed from a flight by federal agents in New York. The reason why? He knows too much.

The researcher, Chris Roberts, was questioned for four hours on Wednesday by the Federal Bureau of Investigation (FBI) after implying on Twitter during a United flight to Syracuse, N.Y., that he could hack into the airplane’s systems and make the oxygen masks deploy. Authorities reportedly seized his laptop, iPad, hard drives, and other computer gear.

https://twitter.com/Sidragon1/status/588433855184375808

Roberts, founder of the security intelligence firm One World Labs, was stopped at the gate by security personnel while attempting to board another United flight Saturday in Colorado. According to his attorney, United didn’t provide a detailed explanation for why he wasn’t allowed on the plane, and he was told to expect a letter from the airline within two weeks. He later arrived in San Francisco after boarding a flight with another airline.

https://twitter.com/Sidragon1/status/588572906063409152

https://twitter.com/Sidragon1/status/588561635591196672

United spokesman Rahsaan Johnson told the Associated Press that while they are “confident our flight control systems could not be accessed” in the ways described by Roberts, “it’s in the best interest of our customers that he not be allowed to fly United.”

Roberts is represented by attorneys the Electronic Frontier Foundation (EFF), a San Francisco-based digital rights organization. 

“EFF has long been concerned that knee-jerk responses to legitimate researchers pointing out security flaws can create a chilling effect in the infosec community,” the group said in a statement, adding: “As a member of the security research community, [Robert’s] job is to identify vulnerabilities in networks so that they can be fixed.” [Emphasis theirs.]

H/T U.S. News | Photo by Robert Couse-Baker/Flickr (CC BY 2.0)

Share this article
*First Published: Apr 20, 2015, 12:11 pm CDT