We've not been trained for this: life after the Newag DRM disclosure
38C3: Illegal Instructions Streaming
This is a copy only. Original https://streaming.media.ccc.de/38c3/relive/336
https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure
You’ve probably already heard the story: we got contracted to analyze a bunch of trains breaking down after being serviced by independent workshops. We reverse engineered them and found code which simulated failures when they detected servicing attempts. We presented our findings at 37C3… and then shit hit the fan.
This talk will be an update about what happened since our 37C3 presentation. We’ll talk about:
Three parliamentary workgroup sessions with dirty bathroom photos on Newag’s offtopic slides, train operators revealing that they paid Newag more than 20k EUR for unlocking a single train, which Newag was able to unlock in 10 minutes, and at the same time saying that they don’t know anything about the locks.
140-page lawsuits, accusing us of copyright violation and unfair competition (sic!) with a lot of logical gymnastics.
How it’s like to repeatedly explain reverse engineering concepts to journalists.
6 official investigations, two of them criminal.
New cases revealed since then (from different train operators).
Sorry, for bad cross posts, but it seems that I can’t replace the original URL with new link to yewtu.be video and this is why I got 3 crosspots while trying to fix it.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]
This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.
Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.
Rules:
1: All Lemmy rules apply
2: Do not post low effort posts
3: NEVER post naziped*gore stuff
4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.
5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)
6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist
7: crypto related posts, unless essential, are disallowed
Sorry, for bad cross posts, but it seems that I can’t replace the original URL with new link to yewtu.be video and this is why I got 3 crosspots while trying to fix it.