this post was submitted on 08 Aug 2025
327 points (99.7% liked)

Europe

7021 readers
238 users here now

News and information from Europe 🇪🇺

(Current banner: La Mancha, Spain. Feel free to post submissions for banner images.)

Rules (2024-08-30)

  1. This is an English-language community. Comments should be in English. Posts can link to non-English news sources when providing a full-text translation in the post description. Automated translations are fine, as long as they don't overly distort the content.
  2. No links to misinformation or commercial advertising. When you post outdated/historic articles, add the year of publication to the post title. Infographics must include a source and a year of creation; if possible, also provide a link to the source.
  3. Be kind to each other, and argue in good faith. Don't post direct insults nor disrespectful and condescending comments. Don't troll nor incite hatred. Don't look for novel argumentation strategies at Wikipedia's List of fallacies.
  4. No bigotry, sexism, racism, antisemitism, islamophobia, dehumanization of minorities, or glorification of National Socialism. We follow German law; don't question the statehood of Israel.
  5. Be the signal, not the noise: Strive to post insightful comments. Add "/s" when you're being sarcastic (and don't use it to break rule no. 3).
  6. If you link to paywalled information, please provide also a link to a freely available archived version. Alternatively, try to find a different source.
  7. Light-hearted content, memes, and posts about your European everyday belong in other communities.
  8. Don't evade bans. If we notice ban evasion, that will result in a permanent ban for all the accounts we can associate with you.
  9. No posts linking to speculative reporting about ongoing events with unclear backgrounds. Please wait at least 12 hours. (E.g., do not post breathless reporting on an ongoing terror attack.)
  10. Always provide context with posts: Don't post uncontextualized images or videos, and don't start discussions without giving some context first.

(This list may get expanded as necessary.)

Posts that link to the following sources will be removed

Unless they're the only sources, please also avoid The Sun, Daily Mail, any "thinktank" type organization, and non-Lemmy social media. Don't link to Twitter directly, instead use xcancel.com. For Reddit, use old:reddit:com

(Lists may get expanded as necessary.)

Ban lengths, etc.

We will use some leeway to decide whether to remove a comment.

If need be, there are also bans: 3 days for lighter offenses, 7 or 14 days for bigger offenses, and permanent bans for people who don't show any willingness to participate productively. If we think the ban reason is obvious, we may not specifically write to you.

If you want to protest a removal or ban, feel free to write privately to the primary mod account @EuroMod@feddit.org

founded 1 year ago
MODERATORS
 

Statement and more informations from the German CCC alias Chaos Computer Club, a civil rights organization of software tweakers and computer experts:

https://www.ccc.de/en/updates/2024/das-ist-vollig-entgleist

By the way: The train manufacturer company is suing the people who exposed this, and CCC is collecting donations for their legal support - details on the page linked above.

you are viewing a single comment's thread
view the rest of the comments
[–] A_norny_mousse@feddit.org 47 points 1 week ago* (last edited 6 days ago) (1 children)

It's a bit of a read, but Jesus in a jar, what a dumpster fire. Trumpian levels of stupidity & deceit, piled to the ceiling.

Imagine, they sued SPS for $ 3 million - for fixing Newag's fuckups.

Back in 2022, members of Dragon Sector were called in by a train repair shop Serwis Pojazdów Szynowych (SPS) to work out why its trains were refusing to run. Digging into the code revealed a software trap that would disable trains if they were anywhere near a repair facility that wasn’t run by the manufacturer, Newag. But Newag used a pretty inaccurate way to determine when the trains were in a rival repair shop, which led to some unexpected consequences.

The original version of the locking mechanism seems to have counted how many days a train sat out of use. If it exceeded a time limit (originally ten days), it locked up the train.

This lock got triggered in the first few trains serviced by SPS (which had no idea what was really happening), and Newag claimed that the trains had locked up because the repair techs had broken something.

A few weeks later, two more trains were waiting to be sent to SPS (because the SPS storage facilities were full of locked-up trains). After SPS freed up some space, train owner Koleje Dolnośląskie found that they didn’t start anymore either, showing exactly the same symptoms as those that locked up at SPS. At this point, Michał Kowalczyk of Dragon Sector tells us, Newag’s version of events started to look suspicious. They said that the trains at SPS broke down because of faulty servicing. But these newly locked trains never even got near SPS, and they’d locked up in exactly the same way.

These two trains were subsequently repaired by Newag, but without revealing what they had actually fixed. When the Dragon Sector team analyzed them afterwards, they discovered that the locking system had been updated to wait for 21 days instead of ten.

And it gets better. Newag also added a new GPS component. This would check whether trains were near known workshop locations before disabling the trains. And of course, this trick also backfired. Newag ships slightly different software for each manufactured “batch”, so effectively each owner gets slightly different trains. And one batch of the 45WE EMU (electric multiple unit, the kind of train that doesn’t have a separate engine up front to pull the passenger cars), would switch off automatically when passing through the Mińsk Mazowiecki railway station. Trains full of passengers were left stranded.

You can probably guess what happened next. Newag not only denied that it had added such software, but claimed that it had been added by hackers, hinting that those hackers had done it on behalf of a rival company.

[–] cows_are_underrated@feddit.org 10 points 1 week ago

What the fuck?