We are very grateful and honoured to now also be supported by the Chaos Computer Club.

Incidentally, our talk about the legal repercussions of disclosing the Impuls train DRM system is in less than 4 hours. There might not be many new technical things to talk about, but I'm sure at least some of you will find our story interesting. Especially as we haven't done much of an update in English since last year.

Watch the talk on https://media.ccc.de/ at 23:00 CET.

We didn't receive the paperwork yet - we just learned about this through a post on Twitter by someone who happened to look at their executive board report for 2024H1. We'll only know what this is about once we actually receive the lawsuit. Hopefully this time they managed to use our real postal addresses.

https://www.newag.pl/wp-content/uploads/2018/09/SZ-5.pdf (page 26).

@q3k :oof:

@q3k Is there any way Newag could have engineered such a rail incident ?

Hopefully the delay doesn’t get them any advantage in court ?

Any updates about the case itself?

The hearing will take place in the 22nd Department of Intellectual Property at Czerniakowska 100 in Warsaw. To those interested are invited to observe on site as audience members, you can refer to the hearing number XXII GW 493/24. Of course, the hearing will be in Polish.

@q3k Have fun!
I hope you'll have the throughput to decide what can be published live, and what has to be held back until the trial.

@q3k Competition? Didn’t know you were building trains too. You seem to have a lot of time for side projects :D

@q3k Ugh. Good luck. People suck.

@q3k ahh ta nasza polska dezinformacja

@q3k władza się zmienia, niezmienne pozostają praktyki niezależnie kto jest u władzy.

@q3k Eee... A może PAP znowu zhakowali

@q3k Since you were named as the hackers in multiple articles related to Newag trains is this grounds for a libel lawsuit? *sips tea*

@q3k@social.hackerspace.pl "Software installed by hackers" as in ... the people who were hired by the owners of the trains to fix them and consider themselves "hackers" by trade, not by crime?

The right to repair the things we own is so fucking important. If you can't repair it, you don't own it. You're leasing it at best.

@q3k well, if they have judged that Newag are hackers now, it might be true...

@q3k Ok, but where's the flag?

@q3k@social.hackerspace.pl I thought it was the best pentest of the past decade.

@q3k pease come on down to Quantico, VA to collect your prize

@q3k Hmm what's the magic string 2nd from the last one?

@q3k I got too curious about what that weird string was so I did a test, seems to just "defuse" the backdoor as running sshd with it makes it exit much faster than without.

@q3k

Re the supposed killswitch: I don't get the point of a killswitch. Where would malware authors use it?

@q3k I could have sent you the abomination of a 30 pin uart cable I made when I was like 10 held together by cold solder joints and hot glue

@q3k just one palet more bro they'll skyrocket in value please bro just one truckload more

@q3k "lol, what kind of idiot buys all of this left-over and obsolete shit? Let's not complain, but rather be glad that it's finally gone."

@q3k @redford @mrtick

@q3k pre-installed ransomware. Any clue on the legality of incorporating such a system, either with or without disclosing it to the customer?

@q3k I see it's on Arch now, very fun.

@q3k @vincent

Xeyes does this?! 🤯

#ꙮ

@q3k LGTM merge it

@q3k poggers

@q3k Never thought I'd see an iPod nano again, let alone Alpine running on it. 👏

@q3k oh cool, i really want one of those for some reason, they look tasty

Writing blog posts: the final boss of ADHD.

Warning: might contain trace amounts of ARM machine code / USB polyglots.