Open Menu
AllLocalCommunitiesAbout
lotide
AllLocalCommunitiesAbout
Login

Polish Train Maker Is Suing the Hackers Who Exposed Its Anti-Repair Tricks

⁨691⁩ ⁨likes⁩

Submitted ⁨⁨2⁩ ⁨days⁩ ago⁩ by ⁨Pro@programming.dev⁩ to ⁨technology@lemmy.world⁩

https://www.ifixit.com/News/112008/polish-train-maker-is-suing-the-hackers-who-exposed-its-anti-repair-tricks

source

Comments

Sort:hotnewtop
  • Terevos@lemmy.world ⁨2⁩ ⁨days⁩ ago

    Every potential buyer of trains should ban this company from new sales.

    source
    • voodooattack@lemmy.world ⁨1⁩ ⁨day⁩ ago

      Yeah. I’m not buying another train from them ever again

      source
      • Asfalttikyntaja@sopuli.xyz ⁨1⁩ ⁨day⁩ ago

        Same here. Fucking train makers.

        source
      • Terevos@lemmy.world ⁨1⁩ ⁨day⁩ ago

        Good for you! I’m going to boycott them, too.

        source
      • iglou@programming.dev ⁨19⁩ ⁨hours⁩ ago

        Same. My personal Home <-> Work line will jever see a Newag train.

        source
    • elucubra@sopuli.xyz ⁨1⁩ ⁨day⁩ ago

      I was just thinking this. I imagine that there is only a few hundred train operators in the world, so they can all be reached easily, and would pay attention to the Polish rail operator.

      Simply explain the whole ordeal and bullshittery, and let them know what will happen to them.

      It’s unlikely that Mowag would get another sale. They are fucking with mainly state operator, who have a LOT of time and resources.

      If I were the Polish operator, I would have found a new hobby.

      source
      • boonhet@sopuli.xyz ⁨1⁩ ⁨day⁩ ago

        Operator in my country luckily ordered a bunch of Škodas to complement and replace the old Stadlers, so I don’t think we’re gonna be using Newag any time soon.

        source
  • richardwallass@sh.itjust.works ⁨1⁩ ⁨day⁩ ago

    I will sue you because you broke my ransomware.

    source
    • rottingleaf@lemmy.world ⁨1⁩ ⁨day⁩ ago

      It’s the general modus of today, exposing corruption is illegal and extremism, fixing intentional sabotage is illegal and against IP law, catching pedophiles is illegal and a stalking attack on respected people like Sourgay Brin and Mark Suckerberg. Bypassing censorship is illegal and making tools for criminals. Bypassing propaganda is illegal and inciting to violence. Laughing at unsubstantiated demands is illegal and a challenge to elected or other authority.

      It’s slowly drifting to the point where “illegal” is trying to make sense in what’s allowed and what’s not, and “legal” is having approval from power.

      A mafia world.

      source
      • CheeseNoodle@lemmy.world ⁨18⁩ ⁨hours⁩ ago

        Don’t forget that saying rich people should obey the law is also illegal.

        source
        • -> View More Comments
      • Takios@discuss.tchncs.de ⁨23⁩ ⁨hours⁩ ago

        Keep in mind that legal/illegal can (and often is) be different from ethical/unethical. In a perfect world, laws protect everyone equally from unethical behavior. But nowadays, law is more and more misused to protect the upper class and oppress the lower class. Not saying it wasn’t so before already, but it’s leaning that way a lot stronger in recent times again.

        source
        • -> View More Comments
  • Capricorn_Geriatric@lemmy.world ⁨21⁩ ⁨hours⁩ ago

    For what? Being decent human beings?

    source
    • Trihilis@ani.social ⁨18⁩ ⁨hours⁩ ago

      Yeah apparently that’s a crime nowadays.

      source
  • AnarchistArtificer@lemmy.world ⁨2⁩ ⁨days⁩ ago

    I keep a small list titled “illegal heroes”, and these hackers are on that list. It’s bullshit that they’re being hounded like this.

    source
    • 0xD@infosec.pub ⁨1⁩ ⁨day⁩ ago

      They are not illegal heroes, they are pentesters who were paid by a train company.

      source
  • socialsecurity@piefed.social ⁨1⁩ ⁨day⁩ ago

    When corporation does crime and has the balls to sue the victims

    EU companies are learning well from the US!

    source
  • jjagaimo@sh.itjust.works ⁨2⁩ ⁨days⁩ ago

    Newag executives should be in jail for fraud

    source
  • HertzDentalBar@lemmy.blahaj.zone ⁨1⁩ ⁨day⁩ ago

    Capitalism is a scourge.

    source
    • mitrosus@discuss.tchncs.de ⁨1⁩ ⁨day⁩ ago

      Quote of this century.

      source
    • rottingleaf@lemmy.world ⁨1⁩ ⁨day⁩ ago

      You are literally looking at a company trying to prevent competition by doing crime, being caught and trying to use law against those who caught it.

      Capitalism is that thing where competition is considered a virtue in the first place.

      source
  • TauZero@mander.xyz ⁨2⁩ ⁨days⁩ ago

    Newag [train maker] claims that the Dragon Sector [whitehat hacker] team endangered passengers’ safety by modifying the software without proper experience. But Newag then turns right around and claims that Dragon Sector did not modify the software at all. They point out that EU law only allows reverse engineering of software in order to fix bugs. And if Dragon Sector did not actually modify the software, it cannot have fixed any bugs, in which case their reverse-engineering must be illegal.

    source
    • Venus_Ziegenfalle@feddit.org ⁨1⁩ ⁨day⁩ ago

      So if they just say they were gonna get to the bug fixing part but haven’t yet they’re in the clear. Boom, another decisive victory for the Dragon Sector.

      source
      • Cort@lemmy.world ⁨1⁩ ⁨day⁩ ago

        Train company response: it’s a feature, not a bug, so you’re still guilty

        source
    • defaultusername@lemmy.dbzer0.com ⁨1⁩ ⁨day⁩ ago

      Do they… not know whag reverse engineering means?

      source
      • TauZero@mander.xyz ⁨1⁩ ⁨day⁩ ago

        It’s worse. They are saying that the EU copyright law, as written, only allows decompiling/reverse engineering to “fix bugs”. A bug fix would involve a software patch of some sorts. But the security researchers did not have time to write a patch yet, what they did is tell the customer “Yep, it’s fucked. Your vendor put in a killswitch to make the trains brick themselves.” So that does tell them where the problem is, but it is not a bona fide bug fix from the Bugfix region of France, and therefore illegal.

        source
        • -> View More Comments
  • jabjoe@feddit.uk ⁨17⁩ ⁨hours⁩ ago

    They should be being sued for doing anti repair tricks.

    source
  • einkorn@feddit.org ⁨2⁩ ⁨days⁩ ago

    I am looking forward to their next update:

    • …ccc.de/…/37c3-12142-breaking_drm_in_polish_train…
    • …ccc.de/…/38c3-we-ve-not-been-trained-for-this-li…
    source
  • hsr@lemmy.dbzer0.com ⁨1⁩ ⁨day⁩ ago

    After a bit of digging it looks like Newag has had a steady supply of government contracts:

    25.01.2023 - 10,7 billion PLN (2,5bn EUR) for EMUs

    24.07.2024 - Newag CEO mentions current contracts with PKP Intercity total 9bn PLN (2bn EUR)

    21.11.2024 - 7,7bn PLN (1,8bn EUR) for hybrid MUs

    23.06.2025 - most recent one I could find, 270 million PLN, EMUs for a local railway

    Stock is up 260% since June 2022

    In Poland we don’t negotiate with corporate terrorists, we throw money at them. 🙃

    source
  • arararagi@ani.social ⁨22⁩ ⁨hours⁩ ago

    Don’t you love the anti-circumvention clause?

    source
  • richardwallass@sh.itjust.works ⁨1⁩ ⁨day⁩ ago

    I couldn’t tell better. “The sheep are made to be sheared”. Each day, critical thinking fades a little more, leading people into a spiral of submission that has never been as swift and humiliating.

    source
  • wordmark@mas.to ⁨2⁩ ⁨days⁩ ago

    @Pro #capitalism at its #worst (AGAIN)

    2022, members of #DragonSector were called by a train repair shop Serwis Pojazdów Szynowych (#SPS) work out why #trains refusing to run. Digging into the code revealed a #software trap that would disable trains if they were anywhere near a #repair facility that wasn’t run by the manufacturer, Newag. But Newag used a pretty inaccurate way to determine when the trains were in a rival repair shop, which led to some unexpected consequences. #right2repair

    source
  • slampisko@lemmy.world ⁨1⁩ ⁨day⁩ ago

    Where legal fund

    source
    • porous_grey_matter@lemmy.ml ⁨1⁩ ⁨day⁩ ago

      CCC was collecting some money for them last year, not sure if this is still active www.ccc.de/en/updates/…/das-ist-vollig-entgleist

      source