q3k :blobcatcoffee: (@q3k@hackerspace.pl)
social.hackerspace.pl
Attached: 1 image I can finally reveal some research I've been involved with over the past year or so. We (@redford@infosec.exchange, @mrtick@infosec.exchange and I) have reverse engineered the PLC code of NEWAG Impuls EMUs. These trains were locking up for arbitrary reasons after being serviced at third-party workshops. The manufacturer argued that this was because of malpractice by these workshops, and that they should be serviced by them instead of third parties. 1/4

A polish hacker found out why trains did stop working. The manufacterer implemented a hidden electronic switch, which automatically activated after trains were serviced by a different company.

  • sanpo@sopuli.xyzEnglish
    41·
    1 year ago

    It wasn’t a back door, it was a safety feature working as designed. IIRC it didn’t have any modern security implemented, because it’s very old.

    Also, the link from the OP doesn’t mention that, but the trains in this story had locations of competitors’ repair centers coded in, and were apparently set to auto-lock if they detected sitting in one for more than 10 days…