Norway reviews cybersecurity after remote-access feature found in Chinese buses
1–10 of 235 posts
Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses
#2NB: Title shortened for length
Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses
#3If these were esims they would be much harder to detect or remove?
BYD electric busses have recently rolled out where I live in Sweden.
Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses
#4This is just stupid. All modern vehicles har been fully remote controllable for years.
Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses
#5This is just stupid. All modern vehicles har been fully remote controllable for years.
The issue was the eSIMs identified were not disclosed by Yutong, which clearly falls afoul of procurement and cybersecurity regulations.
Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses
#6This is just stupid. All modern vehicles har been fully remote controllable for years.
The issue was the eSIMs identified were not disclosed by Yutong, which clearly falls afoul of procurement and cybersecurity regulations.
I wasn't aware of that, thanks. But still, if you go buy a car right now, I doubt they are going to make it a sales pitch that you are not the only one who can control your car.
Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses
#7Earlier quoted context omitted.
The issue was the eSIMs identified were not disclosed by Yutong, which clearly falls afoul of procurement and cybersecurity regulations.
I wasn't aware of that, thanks. But still, if you go buy a car right now, I doubt they are going to make it a sales pitch that you are not the only one who can control your car.
This is why we invented the fine print.
Not putting this information in the fine print is fraudulent behaviour
Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses
#8Earlier quoted context omitted.
I wasn't aware of that, thanks. But still, if you go buy a car right now, I doubt they are going to make it a sales pitch that you are not the only one who can control your car.
This is why we invented the fine print. Not putting this information in the fine print is fraudulent behaviour
It was most likely in the specs from the beginning. You can't have busses roaming around with no way to turn them off remotely.
Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses
#9If these were esims they would be much harder to detect or remove? BYD electric busses have recently rolled out where I live in Sweden.
> If these were esims they would be much harder to detect or remove?
It's not clear in the article how exactly they discovered it, but by the text that mentions it, I do get the impression they just came across the SIM ports/cards themselves:
> internal tests at a secure facility found Romanian SIM cards inside the buses
But it could also have been that they put the entire bus in a giant Faraday cage (or similar) and tried to see if it emits anything. If they did that, then eSIM or SIM wouldn't have matter, nor where on the bus it was, they'd eventually see it. But if they just physically came across it, then maybe eSIMs would allow them to place them in less accessible areas. But then maybe that wouldn't matter anyways, if the SIM cards are permanently attached anyways.
Bottom line, hopefully wouldn't have made a difference.
Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses
#10Earlier quoted context omitted.
I wasn't aware of that, thanks. But still, if you go buy a car right now, I doubt they are going to make it a sales pitch that you are not the only one who can control your car.
This is why we invented the fine print. Not putting this information in the fine print is fraudulent behaviour
[deleted]