3 ms·

> I highly encourage everyone to watch the previous presentation: https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains https://media.ccc.de/v/37c3-12

by boricj 2y ago

> I highly encourage everyone to watch the previous presentation: https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_tra... According to the schedule [1], there's a presentation from that team titled "We've not been trained for this: life after the Newag DRM disclosure" that will start at 23:00 local time (in about 30 minutes at the time of this writing) on this livestream [2]. Edit: presentation's over and it was outstanding. [1] https://events.ccc.de/congress/2024/hub/en/event/we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure/ https://events.ccc.de/congress/2024/hub/en/event/we-ve-not-b... [2] https://streaming.media.ccc.de/38c3/eins/hls https://streaming.media.ccc.de/38c3/eins/hls

kaszanka 2y ago
Here's the live recording link for those who missed it and are too impatient to wait for the cleaned-up one: https://streaming.media.ccc.de/38c3/relive/233cb1d4-4833-5384-aeee-d99344433e0b https://streaming.media.ccc.de/38c3/relive/233cb1d4-4833-538...
- asciii 2y ago
  Thank you! I have to say that my favorite in their latest update is the 60 day counter can be reset after closing the cabin door and hitting the SOS in the toilet. Now I want interview with the engineers sharing these product requirements...
- canucker2016 2y ago
  The Luigi-related reference of the talk at 37:03 of the livestream, "Delay, Deflect, Derail" (referring to the response by the Newag train manufacturer representatives, including the president and vice-president of the company, at the parliamentary committee meetings) got a round of applause from the audience. The "...Derail" portion of the slogan references Newag's handout shown a few seconds earlier in the presentation.
  - canucker2016 2y ago
    One of the last slides: Lessons learned? Lawsuits are temporary, glory is forever. Go public.
- lrasinen 2y ago
  ... so a version of the train unlock logic looks at door status and WC emergency button? You do NOT fuck with the safety system. Sure, it's not the mission critical safety system and you're only reading it, so what's the harm? Well, one of these days someone doing that is going to typo == into a =, or whatever the PLC version of one-character oopsie is.

by boricj 2y ago

kaszanka 2y ago

Here's the live recording link for those who missed it and are too impatient to wait for the cleaned-up one: https://streaming.media.ccc.de/38c3/relive/233cb1d4-4833-5384-aeee-d99344433e0b https://streaming.media.ccc.de/38c3/relive/233cb1d4-4833-538...

asciii 2y ago
Thank you! I have to say that my favorite in their latest update is the 60 day counter can be reset after closing the cabin door and hitting the SOS in the toilet. Now I want interview with the engineers sharing these product requirements...
canucker2016 2y ago
The Luigi-related reference of the talk at 37:03 of the livestream, "Delay, Deflect, Derail" (referring to the response by the Newag train manufacturer representatives, including the president and vice-president of the company, at the parliamentary committee meetings) got a round of applause from the audience. The "...Derail" portion of the slogan references Newag's handout shown a few seconds earlier in the presentation.
- canucker2016 2y ago
  One of the last slides: Lessons learned? Lawsuits are temporary, glory is forever. Go public.
lrasinen 2y ago
... so a version of the train unlock logic looks at door status and WC emergency button? You do NOT fuck with the safety system. Sure, it's not the mission critical safety system and you're only reading it, so what's the harm? Well, one of these days someone doing that is going to typo == into a =, or whatever the PLC version of one-character oopsie is.