4 ms·
Janusz Cieszynski Former Minister of Digital Affairs https://twitter.com/jciesz/status/1732411016221524070?s=20 https://twitter.com/jciesz/status/1732411016221
by 6510 3y ago
Janusz Cieszynski
Former Minister of Digital Affairs
https://twitter.com/jciesz/status/1732411016221524070?s=20 https://twitter.com/jciesz/status/1732411016221524070?s=20
translation:
> The president of Newag contacted me. He claims that Newag fell victim to cybercriminals and it was not an intentional action by the company. The analysis I saw indicated something else, but for the sake of clarity, I will write about everything.
- rjmunro 3y agoIf their train software contains patches by cybercriminals that they were unable to detect but a third party hacking group without documentation were, how can we possibly believe that the train's software is safe? Surely the hackers could have put some other bugs in there.
- jakub_g 3y agoExactly. If they "fell victim to cybercriminals" who entered backdoors in the code (that they didn't know about for over 2 years!) then Newag should instantly recall all trains for inspection. Contrarily, if they _knew_ about it, and didn't tell anyone, then it's even worse.
- AnimalMuppet 3y agoBut if that's true, then what ground does the train company have for threatening the hackers? If you got hacked, then we weren't breaking your stuff. We were just undoing damage that someone else did to you as well as to your customer.
- nabakin 3y agoWhat interest would cybercriminals have in bricking trains at only independent repair centers? This is a ridiculous claim.
- matkoniecz 3y agoBlack flag operation, by competition pretending to be Newagg? But that is plot-of-cartoon-villain level of nonsense.
- justsomehnguy 3y agoAh, thanks for the laughs.
- postexitus 3y agoTo bring Newag down if they don't pay the ransom, of course. Cue brainpower meme.
- deleted 3y ago[deleted]
- Verdex 3y agoExecutive 101: Blame the techies. The moment I heard about this event, I knew that it was only a matter of time before the offending company executives would be blaming the developers. Interesting that their particular path forward is blaming malicious third party developers because the next thing that happens is someone interviews their devs and finds out that they in fact are the people who put this in. At the behest of middle management who behested at the behest of upper management. My prediction is that we'll soon be hearing about how upper management would never have told a developer or middle manager to program this in and it's the lower level guys who have gone rogue which is why they blamed cybercriminals. A lot of philosophy and poetics go into software engineering ethics that I find uncompelling at best. However, the pair of "why would you want to injure someone you don't even know" and "you will be the one blamed" feels to me to cover 95% of what software ethics claims to.
- jakub_g 3y agoOf course they won't straight admit they've been screwing their customers, so they need a bullshit excuse. It doesn't make any sense either: "falling victim to cybercriminals" who entered GPS coordinates of all competitors in the code, to make competitors-repaired only trains down - sounds legit! That's exactly what cybercriminals do!
- tester756 3y agoHey, but what about that *physical* undocumented module that allowed to control the train? Aint it at least the proof of something shady?