Hacked train software reveals suprises

[mihau_pe]

Hello!

 

An intresting thing has happened in my business. I know that this community is primarily focused on consumer electronics, but this topic is quite similar to those which are being talked about here — anti-consumer behavior of a producers by the means of unfair software. I know that it happenes everywhere now, the only reason I decided to post it here is the scale of insolence, to the point of laugh.

 

Long story: https://zaufanatrzeciastrona.pl/post/o-trzech-takich-co-zhakowali-prawdziwy-pociag-a-nawet-30-pociagow/ (machine translation required, checked it and it seems to be quite good, and the article itself is well written).

 

Short story: Trains are being grounded in strange circumstances after being serviced in the diffrent companies than original manufacturer. The hackers have a take on it, they find that the trains have the coordinates of competitors's workshops hardcoded and they lock after spending 10 days in them.

 

These are the first rumors, I'll update if something important will change.

[Kilrah]

English summary/discussion:

https://social.hackerspace.pl/@q3k/111528169261508544

 

The'll have a talk at 37C3 where they'll release all the details, that'll be fun

[Mark Kaine]

apparently im dumb, can someone eli5 how the "hack" works and what it does?

[mihau_pe]

To be extra precise, EMU is not the computer nor the software, EMU means "electric merged unit" - this is type of the vehicle.

[BrandonLatzig]

So a train company is pulling a john deere?

[Monkey Dust]

Could be interesting depending on the contract between manufacturer and operator. Sounds like someone is in breach of contract, and the covert nature makes me think it's the manufacturer.

 

Seems like a short-sighted move. It's not like the car market, you only have a limited pool of potential clients.

[Milesqqw2]

Just to make sure, we are talking about trains the vehicle and not a tech term I have never heard of.

[mihau_pe]

Small updates for today:

 

1. Newag lost 10% of stock value today, it started with -17% in the morning.

 

2. There is an official statement of the company, basicly they deny everything. Thay make a point that it was the external interruption of software that was dangerous and illegal and they took approperiate action demanding from the authorities to ground all trains that have been treated this way (that actually is a valid point by itself). Interesting thing: they suggest that the programs were modified by someone else or that it's all a lie. How it could be verified?

 

https://www.rynek-kolejowy.pl/wiadomosci/newag-odpowiada-hakerom-i-sps-chce-wycofania-pojazdow-z-ruchu-116422.html

 

The "Onet" portal quoted in above article is a news site which popularised the topic, the original and primary sources are in two first posts of this thread.

 

3 hours ago, Monkey Dust said:

Could be interesting depending on the contract between manufacturer and operator. Sounds like someone is in breach of contract, and the covert nature makes me think it's the manufacturer.

 

Seems like a short-sighted move. It's not like the car market, you only have a limited pool of potential clients.

Everything here turns around tenders. If they will not be proven gulty it would be impossible to exclude them from the market.

 

33 minutes ago, Milesqqw2 said:

Just to make sure, we are talking about trains the vehicle and not a tech term I have never heard of.

Yes, train the vehicle

[mihau_pe]

A conference talk about it:

https://youtu.be/XrlrbfGZo2k?si=zUGwGZoNiRrVt5nY