@q3k So they say they have a security issue? Did they...

@q3k So they say they have a security issue?

Did they report it? Was private data exfiltrated?

What impact does it have for the security and maybe more important safety of their trains when there's a vulnerability on the trains?

Did they include a professional security firm over the topic?

What changes does Newag do to fix issues like this?

Like 11 June at 16:24 | Wall-to-wall | Open on milliways.social

4 comments

q3k :blobcatcoffee:

@mcfly If only the (polish) news cycle cared about 'trivial details' like these :)

11 June at 16:26 | Open on social.hackerspace.pl

mc.fly

@q3k maybe worth to make a press release on the topic?

So, you have a security vulnerability? Do you know what that actually means?

Are you sure you want to go with this excuse?

11 June at 16:30 | Open on milliways.social

q3k :blobcatcoffee:

@mcfly I've been cooking up a nice little post about all of this for a while now, and that's one of the issues I wanted to bring up, yes :). Guess I should get on with it.

11 June at 16:31 | Open on social.hackerspace.pl

Martin Schobert

@mcfly @q3k I remember your congress talk and software updates, which were likely not verified by train authorities. Wouldn't these better qualify for unauthorized changes? So one could call them malicious hackers, who implemented the geofencing. (But of course, the PAP is not referring to them and the PAP statement is misleading.)

11 June at 16:53 | Open on chaos.social

Go Up