news.volyx.in

Trains were designed to break down after third-party repairs, hackers find (arstechnica.com)

655 points by Stratoscope · 981 days ago · 233 comments on HN

Article summary

A train manufacturer, Newag, allegedly implemented code in their trains' control systems to disable them if they were taken to independent repair shops. This was discovered by hackers from Dragon Sector. The code relied on GPS tracking to determine the train's location and disable it if it was parked at a repair shop for several days. The manufacturer's motivations and the extent of their involvement are unclear.

Main themes

  • anti-competitive practices
  • ethics in software development
  • transparency and accountability
  • industrial control systems
  • digital forensics
  • regulatory oversight

What commenters say

  • The code's existence suggests a deliberate attempt by the manufacturer to stifle competition from independent repair shops.
  • It is unlikely that a lone developer would implement such a feature without direction from management.
  • The lack of version control and transparency in the development process makes it difficult to determine the extent of the manufacturer's involvement.
  • The incident highlights the need for engineers to prioritize ethics and refuse to develop unethical software.
  • The manufacturer may try to shift the blame to individual developers or hackers, rather than taking responsibility for their actions.
  • A thorough digital forensics analysis could reveal more information about the manufacturer's actions and motivations.
  • The incident may lead to increased scrutiny of manufacturers and their practices, potentially driving positive change in the industry.