Email or username:

Password:

Forgot your password?
404 Media

The Polish hackers who heroically fixed a series of NEWAG passenger trains that the manufacturer had artificially bricked with DRM are now being threatened with lawsuits from NEWAG. NEWAG has also filed a complaint with Polish authorities and has demanded the trains be removed from service.

Hackers fixed the trains *with permission from the trains' owner*

Repair expert told us this is "classic OEM bullshit," just on a train this time

404media.co/polish-hackers-rep

47 comments
Captain of the SS El Faro

@404mediaco except EU copyright law is very clear, they don't own the trains, they have merely paid for a limited license to use the trains under certain conditions the manufacturer can retroactively change at will.

Rich Felker

@bangskij @404mediaco That sounds false and like the made-up legal theory the vendor believes will be true if they repeat it enough. You repeating it is simping for them. Even if you believe it has some force now, FFS stop repeating it.

Captain of the SS El Faro

@dalias @404mediaco it's really not my fault EU copyright law is a terminally broken shitshow, I literally campaigned against it and quit my union and royalty collection agency for supporting it because unlike them I saw this all too predictable outcome

Johan | PD1JMB

@bangskij @dalias @404mediaco

So that is your message here, just quit? šŸ¤¦

q3k :blobcatcoffee:

@dalias @bangskij @404mediaco

It's amazing how many bonkers legal takes we've heard about this over the past few weeks. :)

We've been accused of everything from fraud, causing a danger to national security, insider trading, up to of course all possible violations of IP law. We've seen copyright law being applied to trains and intellectual property rights being interpreted as 'the author can do anything they want'. We've seen contract law translated to 'if it wasn't prohibited then it's okay'.

Rich Felker

@q3k @bangskij @404mediaco The fraud was by the train manufacturer not you.

Peter

@q3k @dalias @bangskij @404mediaco I think everything about this story is fantastic. Well done q3k with your teams efforts and Iā€™m still quite impressed that the story has gone public.

Glitch
@q3k @dalias @bangskij @404mediaco Just read about what you guys did, really impressive work! This is definitely one of the scummier anti-rtr practices I've seen, misusing GPS data like that.

At risk of throwing another opinion out there that's possibly uninformed (the I'm not a lawyer, nor giving legal advice disclaimer applies); I don't see this affecting any of the major forms of IP law (copyright/trademark/patent). It could possibly affect some form of contract law between the trains operator and the manufacturer but I don't know enough there.
@q3k @dalias @bangskij @404mediaco Just read about what you guys did, really impressive work! This is definitely one of the scummier anti-rtr practices I've seen, misusing GPS data like that.

At risk of throwing another opinion out there that's possibly uninformed (the I'm not a lawyer, nor giving legal advice disclaimer applies); I don't see this affecting any of the major forms of IP law (copyright/trademark/patent)...
Scot Close

@bangskij @404mediaco
Even if the manufacturer is committing what appears to be fraud?

Captain of the SS El Faro

@scotclose @404mediaco this stuff already has names, it's called "felony contempt of business model", "enshittification", us consumers have been living with it for years in everything from printers to garage door openers, John Deere tractors. This is what "right to repair" bills are all about. Undoing this crap. It was only ever a matter of time before they put it in critical infrastructure.

flere-imsaho

@bangskij would you kindly refrain from talking about something you have no idea? thanks in advance. @404mediaco

Quincy

@404mediaco

Looking forward to the #37c3 talk, saw it on the #halfnarp.

Graham Sutherland / Polynomial

@404mediaco it'll be very interesting if this gets escalated to the EC, as a challenge under EU Right to Repair. clause 18 of the directive makes it clear that third party repair is a matter of consumer choice and is encouraged, but I suspect that NEWAG will challenge the notion that the modifications made constitute a repair, for which there is less supporting precedent. not that I expect they'll have much luck.

Rich Felker

@gsuberland @404mediaco The original code was malware/fraud and should be treated as a criminal act by the manufacturer. Defusing that is absolutely "repair".

Graham Sutherland / Polynomial

@dalias @404mediaco while I agree that perpetual-renting style purchase agreements and related mechanisms for obfuscating ownership and impeding right-to-modify ought to be banned, I strongly doubt that the legal apparatus would agree with a severe enough interpretation to classify it as a criminal act of fraud.

but that's still fine, because even a far more moderate (and, let's be honest, realistic) legal interpretation would clear LSR, SPS, and Dragon Sector of any wrongdoing.

Graham Sutherland / Polynomial

@dalias @404mediaco the real gem in all of this is the precedent it is likely to create. NEWAG may well have done everyone a favour here, given the EC's propensity toward take-no-bullshit stances on matters of consumer rights as of late.

Le Chep

@gsuberland @dalias @404mediaco small asterisk though:

The customer is not a consumer, but a professional entity. May be afforded fewer rights...

I still hope NEWAG gets seriously told to eff off by the courts in a way that future attempts can be pointed at

Leszek

@gsuberland @dalias @404mediaco Not exactly consumer law this time :(
However without going into legal minutae most (if not all?) Polish customers of Newag bought Impulse 2 trains with money from taxes in public tenders. There's an additional book of regulations to hit them with for defrauding the taxpayer which might have EU-wide consequences.

Rich Felker

@gsuberland @404mediaco If the software is pretending to be broken because it inferred from GPS that it was taken to a repair shop, that's fraudulent. It's attempting to obtain something of commercial value based on deception.

Graham Sutherland / Polynomial

@dalias @404mediaco on that point I agree, but I suspect that the EC will stop short of taking that legal stance if the case is brought to them. I've got no frame of reference for Poland's judiciary, though, so who knows what they'll do.

DELETED

@gsuberland @dalias @404mediaco fraud would have to be litigated in a railroad Vs NEWAG lawsuit, not this one, I think

Graham Sutherland / Polynomial

@erincandescent @dalias @404mediaco fraud would be litigated in a criminal justice case, not a civil suit, but yes.

Emelia/Emi

@dalias @gsuberland The "fraud" part also comes from newag trying to blame the 3rd party repair shop's work for "why the train doesn't want to work". In other words, they're misrepresenting who broke the train in order to pressure the owner to have them repair it instead (and likely with inflated prices because "urgent" and "don't have to compete")

Graham Sutherland / Polynomial

@becomethewaifu @dalias all of this is true, but is still a separate matter from whether or not the EC would make an executive ruling that this is a case of criminal fraud. the onus is largely on Poland's judiciary, on that front.

Graham Sutherland / Polynomial

@becomethewaifu @dalias to be absolutely clear: my argument is that the question of whether or not it is criminal fraud is largely orthogonal to the EC's regulatory function in this matter and, as I understand it, also somewhat beyond their remit.

nothing NEWAG did was excusable or right or justified, and that entire brand of anti-consumer fuckery needs to get right in the bin.

rigrig

@gsuberland @dalias I guess it depends on the contract/documentation. You can probably get away with parts pairing, but deliberately adding hidden code that disables a device solely based on GPS coordinates seems a lot like intentionally selling defective merchandise.

Graham Sutherland / Polynomial

@rigrig @dalias it's *wrong*, for sure, and I certainly expect an ass-whoopin' in on their way, but that still doesn't mean that the EC will label it criminal fraud, even if there's a case to be made that it is.

Poland, on the other hand, may go above and beyond the line that the EC sets.

LisPi
@gsuberland @404mediaco @dalias It artificially disabled trains for the sake of extracting maintenance money.

So if it is not fraud, it is instead infrastructure sabotage and extortion (with a side of racketeering).

Sabotaging rail infrastructure for *any reason* in Poland is a crime.
elly
@gsuberland @404mediaco NEWAG on it's way to destroy their entire business, thinking they won't suffer repercussions if they take it to court::

Shouldn't have written shitty, sketchy DRM in the first place. Now they're going to suffer.
Mark Kahl šŸš²šŸ»šŸ¦šŸ‡ŗšŸ‡¦šŸ‡®šŸ‡±

@404mediaco Who would have guessed!
l bet in the filed lawsuit the terms "terrorism" and "child abuse" can be found too! Typical SLAPP suit!

Kye Fox

@404mediaco Does Poland have anything like eminent domain? It seems like taking the IP from them is clearly in the public's interest.

Ilie

@404mediaco Shouldnt newag be sued? This was all legal?

Alveus Nosville

@404mediaco literally what in the goddamned fuck
if I was the owner I'd bail them out and end relationship with the manufacturer, assuming possibility, since I know there's not a lot of heavy industry localy anymore

Ben Bradley

@404mediaco Looks like a soon-to-be-classic "Copyright Law says we can do this" vs. "Right To Repair" case. It seems this NEWAG threatening "hackers" while asking The Government to protect its "right" to screw with train service (all "service" puns intended) is a bit risky, though it may be an opportunity for Government Officials to receive some Clarence Thomas-like off-the-record funding.

I hope that sentence isn't too long.

binchicken

@404mediaco ah the old mcdonalds ice cream machine caper

lyrokain :verified_breze:

@404mediaco In late state capitalism you can buy a train, but you can never own it. #technofeudalism

Gratian

@404mediaco ā˜ļø This should be a great delight to @pluralistic . Ucrainian tractors now come in the Form of polish Trains. Choo-Choo
šŸšœ šŸš‚

wuffel

@404mediaco
What kind of f$%/&ing morons are ... well ok, i shut up.
In germany that would happen just the same way, as a goody with a razzia by the police maybe.

Go Up