q3k :blobcatcoffee: (@q3k@hackerspace.pl)
social.hackerspace.pl
Attached: 1 image I can finally reveal some research I've been involved with over the past year or so. We (@redford@infosec.exchange, @mrtick@infosec.exchange and I) have reverse engineered the PLC code of NEWAG Impuls EMUs. These trains were locking up for arbitrary reasons after being serviced at third-party workshops. The manufacturer argued that this was because of malpractice by these workshops, and that they should be serviced by them instead of third parties. 1/4

A polish hacker found out why trains did stop working. The manufacterer implemented a hidden electronic switch, which automatically activated after trains were serviced by a different company.

  • BombOmOmEnglish
    164•2 years ago

    the PLC code actually contained logic that would lock up the train with bogus error codes after some date

    I hope they sue the manufacturer.

    • @GBU_28@lemm.eeEnglish
      16•2 years ago

      Manufacture should be charged with public engagement or similar.

      An unexpected dead train on a track, emitting bogus codes that possibly confuse rail systems (thus resulting in other trains not being properly warned) could result in a lot of harm. Managers and executives found to be responsible for the team that implemented it should be hit hardest