q3k :blobcatcoffee: (@q3k@hackerspace.pl)
social.hackerspace.pl
Attached: 1 image I can finally reveal some research I've been involved with over the past year or so. We (@redford@infosec.exchange, @mrtick@infosec.exchange and I) have reverse engineered the PLC code of NEWAG Impuls EMUs. These trains were locking up for arbitrary reasons after being serviced at third-party workshops. The manufacturer argued that this was because of malpractice by these workshops, and that they should be serviced by them instead of third parties. 1/4

A polish hacker found out why trains did stop working. The manufacterer implemented a hidden electronic switch, which automatically activated after trains were serviced by a different company.

  • BombOmOm@lemmy.worldEnglish
    191·
    1 year ago

    the PLC code actually contained logic that would lock up the train with bogus error codes after some date

    I hope they sue the manufacturer.

    • maynarkh@feddit.nlEnglish
      142·
      1 year ago

      I hope messing with critical public infrastructure carries criminal not civil penalties, with people going to jail.

      • Steve@startrek.websiteEnglish
        295·
        1 year ago

        Idk about Poland but in america a corporation is a person yet it cant be put in jail so only civil penalties are possible and the employees are mostly immune

        • jmcs@discuss.tchncs.deEnglish
          13·
          1 year ago

          Corporations are people in the legal sense everywhere (i.e. they are subjects of the law with rights and duties). The novelty in the US is that the archaic constitution allowed the US Supreme Court to be creative in assigning rights that every other country assigns only to natural persons to legal persons. In the case of Poland, for example, the constitution explicitly mentions legal persons when rights are supposed to apply to corporations too.

    • GBU_28@lemm.eeEnglish
      22·
      1 year ago

      Manufacture should be charged with public engagement or similar.

      An unexpected dead train on a track, emitting bogus codes that possibly confuse rail systems (thus resulting in other trains not being properly warned) could result in a lot of harm. Managers and executives found to be responsible for the team that implemented it should be hit hardest