We (@redford, @mrtick and I) have reverse engineered the PLC code of NEWAG Impuls EMUs. These trains were locking up for arbitrary reasons after being serviced at third-party workshops. The manufacturer argued that this was because of malpractice by these workshops, and that they should be serviced by them instead of third parties.
holy shit, they went full removed. logic locks to give bogus codes, insane warning messages that could be ignored. gsm fencing so the trains that went to third party repairs would auto throw a code…that’s john deere/nestle levels of toxicity.