Post AddrgSxhF5uLndJRNA by mawhrin@circumstances.run
 (DIR) More posts by mawhrin@circumstances.run
 (DIR) Post #AddrgSopm2opM9AMYi by mawhrin@circumstances.run
       0 likes, 0 repeats
       
       RE: https://social.hackerspace.pl/@q3k/111528162462505087it seems i'm getting terribly boring these days, but fucking hell, this is pretty much a case of sabotage-by-the-manufacturer
       
 (DIR) Post #AddrgSxhF5uLndJRNA by mawhrin@circumstances.run
       0 likes, 0 repeats
       
       so this is getting some traction since tuesday; let me gather the coverage here:original @zaufanatrzeciastrona's article; in polishAwarie pociągów Newagu: hakerzy ujawniają, kto stoi za celowymi usterkami – from onet.pl; in polishSpółka Newag zagrożona wieloma konsekwencjami prawnymi – first attempt at legal analysis from gazeta prawna; in polishDieselgate, but for trains – english translation of the @zaufanatrzeciastrona's article; in englishHacker finden versteckten Killswitch im Zug from golem.de; in germanmore previously unknown details plus statement from the legal team representing the analysts, article written by indomitable @rysiek; in polishone of the most important pieces of the article is countering the narrative of the pr agency hired by the train manufacturer (who are suggesting that the on-board computers were re-programmed “by the hackers”) – there's a statement from the group that no plc code on board of the trains was actually changed by the analysts, and that they have code dumps from before and after visits to the newag service depots)another nicely written debunk of the claims made by the train manufacturer and their pet pr agency; from @zaufanatrzeciastrona in polishthe story hits the us via the 404 media and @jasonkoebler; in englishsame, but through ars technica – by @arstechnica; in english (h/t @rysiek)updates & new take from onet, with slightly sensationalized title; in polishgizmodo keeps up with latest onet revelations too; in english (h/t @adrienne)onet reports that despite newag denials of ever implementing stoppage conditions in their firmware, another newag-manufactured train stopped today – on 21st of december – due to ekhm, unexpected secondary compressor failure condition; in polish (h/t @q3k)links to @polamatysiak's announcement of the podcast episode with the dragon sector folks – zaplanowana awaria (non-spotify sources downthread from the linked toot); in polish (h/t @rysiek),the 37c3 presentation on breaking drm in polish trains up now for rewatch, very technical; by the three people directly involved, in english. try to catch the polish tongue twister names!the train that died on 21st o december arose from dead on 1st of january – new article from onet; in polishreport from the tumultuous hearing before parliamentary committee (incl. probably the first direct confrontation between newag minions and the dragon sector folks); from onet, in polish.and the hearing itself, kindly provided by @polamatysiak ; video in polish (2h18m), no subtitles or transcript (yet), links to newag and dragon sector presentations within.something i completely missed: the polish press agency published an article that misquotes the communique from the prosecutor and tries to move the onus to the security specialists (strangely just like the newag's narrative); see the fedi thread with links to the debunks, dementi from the prosecutor and comments from the dragon sector folks (in polish). corrections have been requested.newag sues the security researchers for, wait for it, copyright infringement; this is civil lawsuit initiated by newag and not related to the criminal proceedings; via q3k's fedi account (in english).a comedic moment: during newag civil lawsuit's proceedings newag informed the court that they requested the internal security agency (polish: ABW, agencja bezpieczeństwa wewnętrznego) take down all articles regarding the case, the “materials instructing on how to hack trains” and that they start special supervision over all attendants of the original OhMyHack conference (from @zaufanatrzeciastrona), in polish; via leszek ciesielski's toot, in english) first day of the civil lawsuit (newag vs the researchers), report in polish.#NEWAG #IndustrialSabotageInPoland #RightToRepair #Trainsomware #SecondaryCompressorFailureDay