mjr

cross-posted from: https://lemmy.sdf.org/post/44846811

Archived

Norway: Chinese-made electric buses have major security flaw, can be remotely stopped and disabled by their manufacturer in China, Oslo operator says

The public transport operator in Norway's capital said Tuesday that some electric buses from China have a serious flaw -- software that could allow the manufacturer, or nefarious actors, to take control of the vehicle.

Oslo's transport operator Ruter said they had tested two electric buses this summer -- one built by China's Yutong and the other by Dutch firm VDL.

The Chinese model featured a SIM card that allowed the manufacturer to remotely install software updates that made it vulnerable, whereas the Dutch model did not.

"We've found that everything that is connected poses a risk -- and that includes buses," Ruter director Bernt Reitan Jenssen told public broadcaster NRK.

"There is a risk that for example suppliers could take control, but also that other players could break into this value chain and influence the buses."

Ruter said it was now developing a digital firewall to guard against the issue.

According to other reports, the Chinese manufacturer has access to each bus’s software updates, diagnostics, and battery control systems. “In theory, the bus could therefore be stopped or rendered unusable by the manufacturer,” the company said.

Ruter has reported its findings to Norway’s Ministry of Transport and Communications.

Arild Tjomsland, a special advisor at the University of South-Eastern Norway who helped conduct the tests, said: “The Chinese bus can be stopped, turned off, or receive updates that can destroy the technology that the bus needs to operate normally.”

[...]

cross-posted from: https://infosec.pub/post/36851857

Geoff Marshall gives us a tour. I like his positivity, but I feel that surrounding a new rail station with so much surface car parking instead of transit-orientated development should get a little criticism. I guess at least a surface car park is easier to build on later than a multistorey obstruction.

He also gets a tiny thing wrong: the Alstom Aventras that serve the station don't have level boarding. The Stadler Flirts that also on that line do, but don't usually stop there at present.

What do you think of this? Better than the modular stations opened recently? Still not good enough?

Geoff Marshall gives us a tour. I like his positivity, but I feel that surrounding a new rail station with so much surface car parking instead of transit-orientated development should get a little criticism. I guess at least a surface car park is easier to build on later than a multistorey obstruction.

He also gets a tiny thing wrong: the Alstom Aventras that serve the station don't have level boarding. The Stadler Flirts that also on that line do, but don't usually stop there at present.

What do you think of this? Better than the modular stations opened recently? Still not good enough?