Mars helicopter (yes, the one with the Log4j bug) overcomes separate network glitch to confirm new flight record
- Reference: 1639634231
- News link: https://www.theregister.co.uk/2021/12/16/ingenuity_mars_helicopter_log4j_network/
- Source link:
The 'copter passed the thirty-minute mark during its 17th flight, on December 5, which sets a new record for the space agency.
But NASA was unsure of the craft's status because of what the US agency has [1]described as "an unexpected cutoff to the in-flight data stream as the helicopter descended toward the surface at the conclusion of its flight."
[2]
At this point of the story we need to share this old tweet from the Apache Software Foundation.
Did you know that Ingenuity, the Mars 2020 Helicopter mission, is powered by Apache Log4j? [3]https://t.co/gV0uyE1ylk [4]#Apache [5]#OpenSource [6]#innovation [7]#community [8]#logging [9]#services [10]pic.twitter.com/aFX9JdquP1 — Apache - The ASF (@TheASF) [11]June 4, 2021
Yes, that tweet refers to that Log4j – the Java logger that was last week found to include a [12]critical flaw that allows an attacker to execute arbitrary code on untold millions of systems with very little effort. Log4J has since [13]been widely exploited – perhaps by [14]China and Iran – and sparked a global patching frenzy because the first fix [15]wasn't quite complete , requiring a second version that provided defense-in-depth.
The Log4j bug was revealed on December 9 and the flight with delayed data took place on the fifth … and the two events are totally not connected.
[16]
[17]
The issue looks like one of those "space is hard" things.
"Perseverance serves as the helicopter's communications base station with controllers on Earth," NASA explained. "A handful of data radio packets the rover received later suggested a healthy helicopter on the surface but did not provide enough information for the team to declare a flight success."
[18]
Once data was downloaded to Earth, analysis here allowed an assessment of the flight and the new tally of Ingenuity's total flight time.
[19]ExoMars parachutes just about good enough to land rover safely on the Red Planet
[20]ESA's Mars Express picks up plaintive bleeps of China's Zhurong rover, adding much-needed comms redundancy
[21]It's fake ooze, don't fall for fake ooze: Alien fossils found on Mars might just be simple chemistry, uni pair warn
The 'copter was due to fly again today, on a 230-metre trip. This time NASA's Jet Propulsion Laboratory boffins have decided to use a lower data rate that allows use of a stronger signal, in the hope of maintaining constant contact with the craft. The two vehicles need line of sight to talk, and the space agency has therefore prepared for the chance that Ingenuity's next landing spot won't be visible from the rover.
To be honest, NASA is chuffed that Ingenuity is still flying, because the original mission plan was for just five flights.
Perseverance is busy, too, executing humanity's next attack on Mars – this time with a drill.
Here on Mars, I’m checking out a new rock and getting ready for my next sample. Back on Earth, engineers are testing the systems that could bring back this literal piece of history. [22]https://t.co/J4mhD8XZLa [23]#SamplingMars [24]pic.twitter.com/6c7XWnrjw2 — NASA's Perseverance Mars Rover (@NASAPersevere) [25]December 14, 2021
And finally, it should be said that exploitation of the Log4j bug on Mars is a million to one: to attack the machine, specially crafted text has to be sent over to the hardware and logged by the vulnerable library, and we can't see that happening unless someone on the inside goes rogue. ®
Get our [26]Tech Resources
[1] https://www.nasa.gov/feature/jpl/nasa-s-ingenuity-mars-helicopter-reaches-a-total-of-30-minutes-aloft
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/science&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YbscWhUOu7EjP3XDWJRLlQAAAAU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://t.co/gV0uyE1ylk
[4] https://twitter.com/hashtag/Apache?src=hash&ref_src=twsrc%5Etfw
[5] https://twitter.com/hashtag/OpenSource?src=hash&ref_src=twsrc%5Etfw
[6] https://twitter.com/hashtag/innovation?src=hash&ref_src=twsrc%5Etfw
[7] https://twitter.com/hashtag/community?src=hash&ref_src=twsrc%5Etfw
[8] https://twitter.com/hashtag/logging?src=hash&ref_src=twsrc%5Etfw
[9] https://twitter.com/hashtag/services?src=hash&ref_src=twsrc%5Etfw
[10] https://t.co/aFX9JdquP1
[11] https://twitter.com/TheASF/status/1400875147163279374?ref_src=twsrc%5Etfw
[12] https://www.theregister.com/2021/12/10/log4j_remote_code_execution_vuln_patch_issued/
[13] https://www.theregister.com/2021/12/13/log4j_rce_latest/
[14] https://www.theregister.com/2021/12/15/log4j_latest_cisa/
[15] https://www.theregister.com/2021/12/14/apache_log4j_2_16_jndi_disabled/
[16] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/science&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YbscWhUOu7EjP3XDWJRLlQAAAAU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[17] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/science&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YbscWhUOu7EjP3XDWJRLlQAAAAU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[18] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/science&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YbscWhUOu7EjP3XDWJRLlQAAAAU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[19] https://www.theregister.com/2021/12/14/esa_parachutes_worked/
[20] https://www.theregister.com/2021/12/02/esa_zhurong/
[21] https://www.theregister.com/2021/11/18/martian_fossil_mistakes/
[22] https://t.co/J4mhD8XZLa
[23] https://twitter.com/hashtag/SamplingMars?src=hash&ref_src=twsrc%5Etfw
[24] https://t.co/6c7XWnrjw2
[25] https://twitter.com/NASAPersevere/status/1470903919807111174?ref_src=twsrc%5Etfw
[26] https://whitepapers.theregister.com/
Re: Safe as long as the trolls don't have space internet access
Well it appears that it managed to log into twitter using space internet and tell us what it's doing............ let's hope it doesn't get bored with looking at rocks and decides to start trolling celebrities instead.
IoT always the weakest link in the network....
The 50 million mile air gap means nothing, earthling. All your networks are ours!
Re: IoT always the weakest link in the network....
Air gap?
Re: IoT always the weakest link in the network....
Airless gap :-)
Re: IoT always the weakest link in the network....
Technically space isn't a vacuum, so there will be air its just there might be several mega meters between the atoms which would compose it.
Re: IoT always the weakest link in the network....
Was reading an article last week about how the Voyagers 1 and 2 had discovered after leaving the solar system, that the density of space was increasing the further out they got. This was unexpected, and reasons were given why this might be the case, but it's unknown if this is simply the bow wave of the solar system as it were, as it travels round the galaxy or if the atmosphere will keep getting thicker all the way into another discovery.
If it keeps up, we may end up swimming to Alpha Centauri! :p
Re: IoT always the weakest link in the network....
Well, that would make for a very, very remote code execution
Nothing there....
So what has the Mars helicopter produced?
Re: Nothing here....
Yet another empty and pointless statement from you...
Re: Nothing there....
Has shown that we can use a production version of such a machine to scout ahead of rovers thus radically improving visibility for them and enabling them to go further, faster and in more useful directions.
Sadly in your dismal grey universe none of that has purpose since no exploration of Mars has any purpose because you are dismal grey human and all is dismal grey wasteland for you. Sad.
Meanwhile, in 2255, the Federation regrets being locked into a long-term Oracle contract...
[1]"The probe used multiple SQL injections but I've yet to find any compromised files"
[1] https://www.youtube.com/watch?v=A7B_ZWQFsYI
Diligence?
So NASA is using 3rd party open source Java libraries on space missions without verifying the code?
Sorry, silly me. Nobody actually looks at the source any more.
Re: Diligence?
One of the reasons Ingenuity was so cheap was that it used lots of standard software and hardware (is pretty much a phone inside I think). Making it cheap (and light, but needs to be light anyway) is what enabled them to get it to Mars. They can do that because if it failed it did not matter: it was and is a demonstrator: simply working was the goal, any science was not intended and would be a bonus. They knew the risks: going through all the millions of lines of code (log4j is tiny fraction: entire Linux kernel in there, many video processing libraries, many many things) would have made it so expensive they could not have gone.
Perseverance is ... different. It's not using log4j.
Re: Diligence?
Yes, small snake, 'phone processor and Linux in the 'coptor.
VxWorks is the OS on Perseverance, as it was on all the predecessor missions.
Safe as long as the trolls don't have space internet access
They do have a space internet running, with TCP/IP optimized for the crazy long round trip times, but it's safe as long as the Chinese, Iranian, Russians, Norks, 4channers, or other purely malicious trolls can't get at it. China might not bother since there's not much IP they could gain from hacking Ingenuity, but Russia would do it from pure spite since destroying nice things (like the ISS) is all they can do now.
Of course someone's computer at JWP is probably on both Worst Internet (our normal internet) and Space Internet, so I sure hope they have things firewalled well and there's nowhere for the jndi query to go.
At least the rover is running VxWorks, so that's pretty solid.