On Sat, 23 Nov 2024, Patrick Bryant wrote:
>
APRS.FI requires a password in order to accept AIS data - which AIS
> Dispatcher doesn't support. I've spoken with the maintainer, and he
> contends this is to prevent bogus position reports -- although there is
> no authentication in APRS data, so I fail to get the point.
While there is no authentication in APRS data, it's an improvement in the
state of things to have authentication for incoming AIS data. Sometimes
it'd be really good to have authentication in APRS data, as there is quite
a lot of weird stuff and abuse happening most of the time.
For an AIS example, in 2009, the Arctic Sea vessel was hijacked close to
Sweden. It had Russian owners but it was carrying cargo for a Finnish
company. AIS transmitters were turned off in the English Channel and for
some time its position was not known.
It was eventually found near Kap Verde, but in the mean time there was
some AIS data showing it was in Bay of Biscay. The AIS data turned out to
be fake but it was initially reported as a fact in the media.
When the AIS data comes in from an authenticated receiver, it can be
proven which receiver heard the AIS data from RF, or which client injected
the data to
aprs.fi. It's then possible to figure out if that client is a
valid AIS receiver in that area - could it heard the AIS transmitter on
RF, or was it just registered to push in a few invalid positions.
With an unauthenticated UDP feed, without a registration procedure, it'd
be too easy to spam
aprs.fi with invalid positions directly, and more
difficult to filter and delete them from the database later.
Every now and then someone does something like this:
https://www.dropbox.com/scl/fi/7oa45lo1ioucf1u7uy4zc/aprs-dos-attack-20220226.png?rlkey=110zgoz5rvacq9tj7navmcqph&dl=0
https://www.dropbox.com/scl/fi/55jckaloenpvxo4az1t1d/aprs-spam-2022-03-01-PY.png?rlkey=f2odn5om6k76b2rujcf56webx&dl=0
Authentication helps in dealing with it. On the APRS-IS we don't
unfortunately have any of it.
Here's a currently ongoing puzzle for someone who needs one:
https://aprs.fi/?c=raw&call=ZU9WQ-2&limit=100&view=normal
(The first layer is easy, and there are some hints in the data, but the
ST, S, P fields are unknown.)
- Hessu