auturgy

Can you provide details of your PoC? In ArduPilot signing is available, so for this vulnerability to be real you'd need to be able to inject a valid message into...

Thanks for the quick response. I hope you review your plans re ArduPilot. I'd be interested to understand your reasoning: you're abstracted from the code, so licensing isn't an issue.

These are just the USB ID's. Some listed here - https://ardupilot.org/dev/docs/USB-IDs.html

Pid/vid should be vendor specific. ArduPilot includes them in the bootloader as per vendor advice, or uses its own generic one. They are generally assigned by the USB-IF. https://www.usb.org/getting-vendor-id I’m...

What you’ve described is very similar to how board id is done for fw flashing etc: https://github.com/ArduPilot/ardupilot/blob/master/Tools/AP_Bootloader/board_types.txt and the px4 equivalent, which get periodically sync’d. Not part of mavlink though....

Is anything happening re the Events interface/microservice? (https://github.com/mavlink/rfcs/pull/14). If so, imho better to roll this into it rather than a new standalone message. Either way, I really need @lthall to...

An option not addressed is creating extensions to an existing message. That might permit the adaption of SET_ATTITUDE_TARGET with the extra fields you need

I've made a couple of suggestions. Biggest comment is that this should go into development.xml until implemented.

Looks sensible. I’d love to de-WIP opendroneID, but no public flight stack implementation that I’m aware of. I’ll look into AIS: we recently added lighthouses/fixed obstacles in the nmea library...

It's great to have that discussion but I'd just like to clarify that there are no guarantees that any messages will have the tags removed, or that they won't be...