Collins Aerospace: Sending text messages to the cockpit with test:test (ccc.de)

Well, this is just standard Aerospace grade software. I would be surprised if you could find a single controller in an airplane without some trivial login credentials.

Exposing software like that to the internet is of course a completely insane step.

Interesting choice of tail number and date... https://www.faa.gov/lessons_learned/transport_airplane/accid...

> RTX did not respond to our vulnerability report

I guess they mean you should sell the vulnerability to highest bidder instead of reporting? Weird choice.

Collins Aerospace, the same company responsible days of outages at airport check-in kiosks https://www.bbc.co.uk/news/articles/c3drpgv33pxo

(2009)

Security vulerability text or a report is the basis for a CV.

Yes, Collins Aerospace is subsidiary of RTX, which is the distributor for a relational database for plane ticket credentials.