q3k :blobcatcoffee: (@q3k@hackerspace.pl)
social.hackerspace.pl
Attached: 1 image I can finally reveal some research I've been involved with over the past year or so. We (@redford@infosec.exchange, @mrtick@infosec.exchange and I) have reverse engineered the PLC code of NEWAG Impuls EMUs. These trains were locking up for arbitrary reasons after being serviced at third-party workshops. The manufacturer argued that this was because of malpractice by these workshops, and that they should be serviced by them instead of third parties. 1/4

A polish hacker found out why trains did stop working. The manufacterer implemented a hidden electronic switch, which automatically activated after trains were serviced by a different company.

  • albert180@feddit.deEnglish
    17·
    1 year ago

    Well I guess in the next tender they will add a paragraph for “No Killswitches allowed”

    I also hope someone goes to jail for this bullshit. Making the life of many citizens for many months miserable as your shitty backdoor prevents perfectly fine trains from running should be a criminal offence. Also updating the backdoors after the first one was discovered and disabled shows clearly intent and not just some “Security measures”