q3k :blobcatcoffee: (@q3k@hackerspace.pl)
social.hackerspace.pl
Attached: 1 image I can finally reveal some research I've been involved with over the past year or so. We (@redford@infosec.exchange, @mrtick@infosec.exchange and I) have reverse engineered the PLC code of NEWAG Impuls EMUs. These trains were locking up for arbitrary reasons after being serviced at third-party workshops. The manufacturer argued that this was because of malpractice by these workshops, and that they should be serviced by them instead of third parties. 1/4

from the “i’ll drm your arse” and “industrial sabotage r us” department, a true scandal: a polish train manufacturer used firmware to lock out trains at 3rd party service depots in order to disrupt the operations of the trains for the railways who did not choose to service the trains at the manufacturer’s; at the same time they blamed the 3rd parties for their inability to properly service the trains.

further reading in polish (but translates via google well): more technical and less technical, but with more political/economical details.

  • skillissuerEnglish
    8·
    1 year ago

    holy shit brother, i sure hope that UOKIK unleashes all legal hell on them (or maybe other agencies as well, considering strategic importance of railways and possibility of basically bricking trains via GSM by the most probable adversary)