“All of the knowledge to generate the exploit already exists on the internet. AI could even build it for you,” the researcher told 404 Media.
  • Riskable@programming.devEnglish
    51·
    2 months ago

    Everyone’s joking but this is a serious problem. Imagine you’re a billionaire and someone wants to assassinate you. The would-be assassin could figure out when you have a doctor’s appointment (or similar) and force a train to get stuck, blocking their route.

    It would leave the billionaire stuck in traffic with no escape until the train(s) started moving again. An entire cavalcade of security personnel would also be stuck (if they had one).

    Aside: It could also work for robbing something like a Brinks truck but let’s be honest: In this dystopian world it’s more likely that this vulnerability would be used to rob a food shipment 🙄

  • ExLisperA
    20·
    2 months ago

    As long as it’s also ignored by hacker you should be fine.

  • MyTurtleSwimsUpsideDown@fedia.io
    16·
    2 months ago

    I may be misremembering, but wasn’t there a thing 10 3 years ago or so where trains were randomly stopping somewhere in Europe. And I think it turned out to be a remote shutdown from the manufacturer (according to independent investigators. The manufacturer maintains that hackers added that code to their software) due to 3rd party replacement parts or an unrenewed service contract or some other anticompetitive behavior.

    Edit: Jiminy Cricket! It feels like it’s been 10 years. https://arstechnica.com/tech-policy/2023/12/manufacturer-deliberately-bricked-trains-repaired-by-competitors-hackers-find/

    • ExLisperA
      12·
      2 months ago

      It was in Poland but in Poland you can still stop trains with radio signal of a specific frequency. No encryption, no validation. Anyone with a hobbyist level radio equipment can stop freight trains. And they do. Train operators usually just call the station, confirm that it’s a prank and 5 minutes later start again.

      https://www.wired.com/story/poland-train-radio-stop-attack/

      Poland’s national transportation agency has stated its intention to upgrade Poland’s railway systems by 2025 to use almost exclusively GSM cellular radios, which do have encryption and authentication. But until then, it will continue to use the relatively unprotected VHF 150 MHz system that allows the radio-stop commands to be spoofed.

  • squaresinger@lemmy.world
    6·
    2 months ago

    I guess this vulnerability has been ignored for years, because hackers also ignored it for years.

    There’s not a lot you can gain from this kind of vulnerability.

  • sp3ctr4l@lemmy.dbzer0.comEnglish
    5·
    2 months ago

    Cyberpunk train robberies.

    Why not?

    The economy is crashing, we’ll just return to our Wild West roots, with a modern twist.

    Not robberies of people, of course, the vast majority of American rail transit is logistics, moving stuff.

    Why rip the copper wires out of an abandoned house or office when you could just get some guys with pickup trucks and get it from the source?

    • Ann Archy@lemmy.world
      2·
      2 months ago

      I’m all for it. The social contract was ripped in half a century and half ago. I’m ready AF, I saw this shit coming and prepared, I can live off the land like a motherfucker, and I already don’t own shit.

      You got a house, a car, a dog, a family to provide for? Yeah, you drank the koolaid and when the shit hits the fan you’re all gonna die. I can’t fucking wait to see this shit come crashing down- you all pumped money into it, now eat the consequences.

  • someguy3@lemmy.world
    4·
    2 months ago

    I heard about metro trains getting bricked after 3rd party repairs. This makes it sound like freight trains but it paywalls quickly.