HackerTube
HomeLongsLikedHistoryWatch laterCategoriesPlaylistsSettings

37C3 - Breaking "DRM" in Polish trains

media.ccc.deCited 3× on HN, 2024-2025
YouTube
524K views · 2 years ago · talk · evergreen

A 37C3 talk on how a series of Polish electric trains stopped working after servicing by an independent company. The speakers explain how train control systems work and how they reverse-engineered the software lockouts.

HN cites it as the key account of train DRM being broken, in threads on right to repair, reverse engineering and vendor lockouts.

Security & hackingRepair, teardowns & right to repair#reverseengineering#righttorepair#newag#dragonsector#37c3

3 comments from Hacker News

@lesuorac2025 · in “Norway reviews cybersecurity after remote-access feature found in Chinese buses”

I'm not sure this comment does justice to the situation. Poland put out a separate bid for manufacturing and servicing of their locomotives and one company won the manufacturing bid while another won the servicing bid. The servicing company was unable to get the trains into working order and after hiring hackers accused the manufactoring company of bricking the software on purpose by including geo-fences where the trains would no longer work after arriving at the servicing company's property. Perhaps the interesting part to me was Dragon Sector's (the hackers) claims that the software needs to be blessed so although they discovered problems they never changed anything because they don't have the authority to bless it and heavily imply that the fact that the manufactoring company is changing the software at will is illegal. The changes by the manufactoring company had an (undisclosed) activation sequence added to it so you didn't need to modify the software in order to get the train working so the servicing company never actually modified the software. ▶ this video link

CitesView on HN
@archy_2025 · in “We've Not Been Trained for This: Life After the Newag DRM Disclosure [video]”

The whole train DRM saga has been endlessly entertaining as someone looking in from afar, but I can only imagine the stress this must place on operators trying to keep trains maintained with this dagger dangling over their heads. I wish I could hack a train, thats a once in a lifetime opportunity and would make for an incredible "2 truth and a lie" type story Also available at link Previous coverage: "37C3 - Breaking "DRM" in Polish trains" ▶ this video "O trzech takich, co zhakowali prawdziwy pociąg – a nawet 30 pociągów" link Mastodon post by q3k link

CitesView on HN
@golebiewsky2024 · in “Veles: Open-source tool for binary data analysis”

Oh, I know something about this. Some people that made this are part of DragonSector [1] polish hacking group that broke DRMs in trains quite recently [2]. Sadly I joined company after there were long gone. Really surprised seeing this posted here as it was pointed out, the repo is pretty old and archived. [1]: link [2]: ▶ this video

CitesView on HN
36C3 -  BahnMining - Pünktlichkeit ist eine Zier - english translation1:01:50

36C3 - BahnMining - Pünktlichkeit ist eine Zier - english translation

media.ccc.de
12K views • 6 years ago
36C3 -  A systematic evaluation of OpenBSD's mitigations53:02

36C3 - A systematic evaluation of OpenBSD's mitigations

media.ccc.de
18K views • 6 years ago
35C3 -  Modchips of the State36:52

35C3 - Modchips of the State

media.ccc.de
41K views • 7 years ago
BahnMining - Pünktlichkeit ist eine Zier (David Kriesel)1:01:50

BahnMining - Pünktlichkeit ist eine Zier (David Kriesel)

media.ccc.de
3.3M views • 6 years ago
36C3 -  Uncover, Understand, Own - Regaining Control Over Your AMD CPU56:37

36C3 - Uncover, Understand, Own - Regaining Control Over Your AMD CPU

media.ccc.de
23K views • 6 years ago
34C3 -  Console Security - Switch56:50

34C3 - Console Security - Switch

media.ccc.de
135K views • 8 years ago
36C3 -  Open Source is Insufficient to Solve Trust Problems in Hardware1:00:46

36C3 - Open Source is Insufficient to Solve Trust Problems in Hardware

media.ccc.de
13K views • 6 years ago
DCEmu Reviews - 27C3 - Chaos Communication Congress 2010 - fail0verflow - FULL VIDEO44:40

DCEmu Reviews - 27C3 - Chaos Communication Congress 2010 - fail0verflow - FULL VIDEO

1KIND Reviews
47K views • 15 years ago
Reballing flip chip GPUs is BULLSHIT - the truth about dead laptop GPUs & repairing them.18:43

Reballing flip chip GPUs is BULLSHIT - the truth about dead laptop GPUs & repairing them.

Louis Rossmann
773K views • 12 years ago
CBTC: Communications-Based Train Control9:26

CBTC: Communications-Based Train Control

mtainfo
767K views • 11 years ago
Brother Printer Genuine Toner Fix - Use Any Toner8:07

Brother Printer Genuine Toner Fix - Use Any Toner

Chris Asipyan
229K views • 6 years ago
Console Hacking 2016 (33c3)53:44

Console Hacking 2016 (33c3)

media.ccc.de
166K views • 9 years ago
28c3: The coming war on general computation54:35

28c3: The coming war on general computation

28c3
267K views • 14 years ago
DEF CON 23 - Chris Domas - Repsych: Psychological Warfare in Reverse Engineering38:49

DEF CON 23 - Chris Domas - Repsych: Psychological Warfare in Reverse Engineering

DEFCONConference
173K views • 10 years ago
Take a look inside Steam Deck™!5:25

Take a look inside Steam Deck™!

Valve
1.6M views • 5 years ago
What is Right to Repair? An introduction for curious people.13:47

What is Right to Repair? An introduction for curious people.

Louis Rossmann
188K views • 6 years ago
DEF CON 23 - Zoz - And That's How I Lost My Other Eye...Explorations in Data Destruction (Fixed)53:09

DEF CON 23 - Zoz - And That's How I Lost My Other Eye...Explorations in Data Destruction (Fixed)

DEFCONConference
533K views • 11 years ago
Trusted Computing? Yes or No3:31

Trusted Computing? Yes or No

Robin Good
47K views • 20 years ago
Break Me00 The MoVfuscator Turning mov into a soul crushing RE nightmare Christopher Domas46:19

Break Me00 The MoVfuscator Turning mov into a soul crushing RE nightmare Christopher Domas

Adrian Crenshaw
81K views • 11 years ago
Inside a smart meter, and the REAL problem with them.16:45

Inside a smart meter, and the REAL problem with them.

bigclivedotcom
1.7M views • 8 years ago