q3k :blobcatcoffee: (@q3k@hackerspace.pl)
social.hackerspace.pl
Attached: 1 image I can finally reveal some research I've been involved with over the past year or so. We (@redford@infosec.exchange, @mrtick@infosec.exchange and I) have reverse engineered the PLC code of NEWAG Impuls EMUs. These trains were locking up for arbitrary reasons after being serviced at third-party workshops. The manufacturer argued that this was because of malpractice by these workshops, and that they should be serviced by them instead of third parties. 1/4

A polish hacker found out why trains did stop working. The manufacterer implemented a hidden electronic switch, which automatically activated after trains were serviced by a different company.

  • BombOmOm@lemmy.worldEnglish
    198·
    1 year ago

    the PLC code actually contained logic that would lock up the train with bogus error codes after some date

    I hope they sue the manufacturer.

    • maynarkh@feddit.nlEnglish
      146·
      1 year ago

      I hope messing with critical public infrastructure carries criminal not civil penalties, with people going to jail.

    • GBU_28@lemm.eeEnglish
      21·
      1 year ago

      Manufacture should be charged with public engagement or similar.

      An unexpected dead train on a track, emitting bogus codes that possibly confuse rail systems (thus resulting in other trains not being properly warned) could result in a lot of harm. Managers and executives found to be responsible for the team that implemented it should be hit hardest