q3k :blobcatcoffee: (@q3k@hackerspace.pl)
social.hackerspace.pl
Attached: 1 image I can finally reveal some research I've been involved with over the past year or so. We (@redford@infosec.exchange, @mrtick@infosec.exchange and I) have reverse engineered the PLC code of NEWAG Impuls EMUs. These trains were locking up for arbitrary reasons after being serviced at third-party workshops. The manufacturer argued that this was because of malpractice by these workshops, and that they should be serviced by them instead of third parties. 1/4

A polish hacker found out why trains did stop working. The manufacterer implemented a hidden electronic switch, which automatically activated after trains were serviced by a different company.

  • maynarkh@feddit.nlEnglish
    145·
    1 year ago

    I hope messing with critical public infrastructure carries criminal not civil penalties, with people going to jail.

    • Steve@startrek.websiteEnglish
      285·
      1 year ago

      Idk about Poland but in america a corporation is a person yet it cant be put in jail so only civil penalties are possible and the employees are mostly immune

      • jmcs@discuss.tchncs.deEnglish
        12·
        1 year ago

        Corporations are people in the legal sense everywhere (i.e. they are subjects of the law with rights and duties). The novelty in the US is that the archaic constitution allowed the US Supreme Court to be creative in assigning rights that every other country assigns only to natural persons to legal persons. In the case of Poland, for example, the constitution explicitly mentions legal persons when rights are supposed to apply to corporations too.

      • CJOtheReal@ani.socialEnglish
        61·
        1 year ago

        You can’t put a company in jail but definitely the asshole that gave the order to do that…