q3k :blobcatcoffee: (@q3k@hackerspace.pl)
social.hackerspace.pl
Attached: 1 image I can finally reveal some research I've been involved with over the past year or so. We (@redford@infosec.exchange, @mrtick@infosec.exchange and I) have reverse engineered the PLC code of NEWAG Impuls EMUs. These trains were locking up for arbitrary reasons after being serviced at third-party workshops. The manufacturer argued that this was because of malpractice by these workshops, and that they should be serviced by them instead of third parties. 1/4

Polish train manufacturer added into controller software condition if train spends some time in ISP facilities it will brick itself untill undocumented button combination is pressed.

Also train is able to be bricked remotely over GSM.

    • sv1sjp@lemmy.worldEnglish
      2·
      10 months ago

      Seems like we are a circus with awesome international laws, but nothing realistic in practice…

  • Moonrise2473@feddit.itEnglish
    1·
    10 months ago

    I don’t understand this. This only hurts the reputation of the manufacturer “this fucking train broke again with a weird error that’s not documented anywhere, next purchase better be any other brand”

    like at my work, we banned any purchase of HP printers