Security News > 2020 > August > Pen Test Partners: Boeing 747s receive critical software updates over 3.5" floppy disks
DEF CON Boeing 747-400s still use floppy disks for loading critical navigation databases, Pen Test Partners has revealed to the infosec community after poking about one of the recently abandoned aircraft.
Although airliners are not normally available to curious infosec researchers, a certain UK-based Big Airline's decision to scrap its B747 fleet gave Pen Test Partners a unique opportunity to get aboard one and have a poke about before the scrap merchants set about their grim task.
In a subsequent Q&A for DEF CON's virtual attendees, Pen Test Partners chief Ken Munro asked Lomas about points of interest to aviation infosec researchers.
"Of potential interest to researchers who don't have access to a spare 747 for a spot of pentesting is the new Microsoft Flight Simulator. Due for release in just over a week, the latest version of the classic sim franchise will include and support the use of ARINC 429-compatible navigation datasets, of the exact same type loaded into the 747 on a 3.5" floppy.
While the fidelity of the simulator software reading and executing that data may not be comparable with the real thing, inexpensive access to a real dataset can offer insights into further research areas - though the tale of the Boeing 787 and Warsaw's BIMPA 4U arrival is unlikely to be repeatable.