On: Reboot Your Dreamliner Every 248 Days to Avoid Int...

[Dylan16807]

The problem is having virtual 'data diodes', or doing things like vlans on shared complex switches.

A real data diode is easy. You hook up half a serial port.

[monocasa → Dylan16807]

Sure, but the infotainment system isn't connected via a serial port.

[Dylan16807 → monocasa]

It absolutely could be, though. Or you could use half an ethernet port. The idea of a data diode is fine, it's the [lack of] implementation that's at fault.

[monocasa → Dylan16807]

I mean, those movies being played on the back of seats aren't being run through a serial port. Given the move to an "on demand" scheme, they're not one way. The data diode is clearly meaningless when there's obviously two way traffic.

[Dylan16807 → monocasa]

I don't understand. You wouldn't store the movies on the avionics systems in the first place. That's all inside the infotainment system, on one side of the diode. The things going over the diode would be stuff like current location and tire pressure.

[monocasa → Dylan16807]

Ultimately the whole point of having these systems connected on both cars and planes is to save weight on wiring. Their data diodes are just vlans.

[Dylan16807 → monocasa]

Which are often insecure, making them not actually data diodes.

Which is where we started.

And still the problem is not the idea of a data diode, it's implementation.