I can finally reveal some research I've been involved with over the past year or so.

We (@redford, @mrtick and I) have reverse engineered the PLC code of NEWAG Impuls EMUs. These trains were locking up for arbitrary reasons after being serviced at third-party workshops. The manufacturer argued that this was because of malpractice by these workshops, and that they should be serviced by them instead of third parties.

1/4

We found that the PLC code actually contained logic that would lock up the train with bogus error codes after some date, or if the train wasn't running for a given time. One version of the controller actually contained GPS coordinates to contain the behaviour to third party workshops.

It was also possible to unlock the trains by pressing a key combination in the cabin controls. None of this was documented.

2/4

The key unlock was deleted in newer PLC software versions, but the lock logic remained.

After a certain update by NEWAG, the cabin controls would also display scary messages about copyright violations if the HMI detected a subset of conditions that should've engaged the lock but the train was still operational.

The trains also had a GSM telemetry unit that was broadcasting lock conditions, and in some cases appeared to be able to lock the train remotely.

3/4

@redford and @mrtick held an unrecorded talk a bout this at OhMyHack in Warsaw - I unfortunately couldn't make it because of Munich snow.

For now this is making the rounds in Polish-speaking sources, but we do have a talk scheduled about this at 37C3, in which we plan to do a deep dive into this and actually publish our findings.

@zaufanatrzeciastrona 's article about this: https://zaufanatrzeciastrona.pl/post/o-trzech-takich-co-zhakowali-prawdziwy-pociag-a-nawet-30-pociagow/

@lamw
Good news today
#explore3word

Registration to #vmwareexplore 2023 open and busy.
#vExpert

@lamw
But you will make it?
We're counting on you.

Wonderful view on the western Alpes on our way to Barcelona heading for #vmwareexplore2023
#vmug #vExpert

@pterlisten
I still see 2008 R2 in production. 😂

While I was bummed I didn't get #MTE for VMware Explore this year, always enjoy talking with our users ... VMTN Community folks just reached out to host an AMA session #VMTN2644BCN as part of the VMTN TechTalk at Explore 🥳

Limited spots, sign up now!

https://event.vmware.com/flow/vmware/explore2023bcn/content/page/catalog?search=VMTN2644BCN%20&tab.contentcatalogtabs=1627421929827001vRXW

Lots of buzz for new Raspberry Pi 5 - https://www.raspberrypi.com/news/introducing-raspberry-pi-5/

Some nice perf updates & interesting, it also uses disaggregated chiplet architecture like upcoming Intel Meteor Lake

4/8GB is great but where's 16GB+ models ... need moar memory for #ESXionARM 😁

Day 2 of #vmug #TechX300 in Copenhagen is about to start.
Full load of more technical deep dives by #VMware and community speakers to come.
A big shout-out to the Danish VMUG team. Good job.
#vExpert
@vmware_emea

See what's new with #vSAN 8 update 2.
https://www.elasticsky.de/en/2023/08/vsan-8-update-2-whats-new-on-technical-level/

#vmwareexplore #vexpert

Only 1 day to go:
Join us on #vmug Germany UserCon. June 29th 2023 in Frankfurt. Registration is free.
https://my.vmug.com/s/community-event?id=a1Y4x000002D9ppEAC
@vmware_emea

Only 1 day to go.
See you there.

Join us in Frankfurt at the German #VMUG #UserCon on Thursday June 29th 2023.
Registration is free.
https://my.vmug.com/s/community-event?id=a1Y4x000002D9ppEAC&sfdcIFrameOrigin=null

I'm honored to be accepted in 3 #VMware #vExpert subprograms: #vExpertPro, Application-Modernization and Multi-Cloud.
Thanks to Corey Romero, @KeithLee and the Multi-Cloud BU.

If you're interested in joining the vExpert community, please don't hesitate to reach out.

@lamw
I haven't used the script for more than a decade. But good to know it still works. 👍
Didn't expect that.
#vExpert

@lamw
More than deserved. 🥇
Thanks for your long time dedication to the community.
Sidenote: I recently found an abandoned share with vcb backups taken with your script. Feeling old now. 😩

@jasonmashak
Fun fact: he himself called them x-rays because that kind of radiation was unknown to him.

In German language we also call then "Röntgen-Strahlen" instead of x-rays.