Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Norway reviews cybersecurity after remote-access feature found in Chinese buses

scandasia.com

Post reply on HN
Print view View original

101–110 of 235 posts

Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses

#101

Post by petre »

IAmBroom wrote: post #29

I work in rail safety. Two major non-Chinese train companies attempted to merge a few years ago, explicitly to build a company that could compete with China's national company, and provide safer alternatives to state-sponsored cyberhacking of Western rail. It fell down to an anti-monopoly decision by a single person in the EU ministry, who killed the proposal. Several attempts were made to streamline the merger, but…

So put 70% anti dumping duties (tariffs) on CRCC trains like they did with ebikes?

This will probably get fixed with software audits necessary for compliance under the NIS2 directive. The EU fixed the problem with more regulation and bureaucracy, ensuring that only the big boys can comply. Protect us from China by becoming China?

Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses

#102

Post by drykjdryj »

IAmBroom wrote: post #31
RealityVoid wrote: post #23

All I can say is that shivers go down my spine what could happen if one of those OEM's that have remote updates possible would get their keys compromised. You could brick hundreds of thousands of vehicles. I would be scared shitless to store those things.

Forget bricking them. How about driving their batteries to overheat? An entire fleet across a city enflamed...

https://en.wikipedia.org/wiki/Speed_(1994_film)

Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses

#103

Post by fsflover »

bell-cot wrote: post #72
quantummagic wrote: post #51

Earlier quoted context omitted.

That seems like a cliché happily championed by the malicious.

Vs. conspiracy theorists are happy to imagine an evil genius black op behind every village idiot?

Snowden proved that conspiracy theorists were right.

Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses

#104

Post by stonemetal12 »

wafflemaker wrote: post #73
TrainedMonkey wrote: post #27

Earlier quoted context omitted.

Maybe not so surprising as Norway summer temp averages get into mid 60s F (18C) at the warmest.

That's averages, but Norway has hot summer days too. Factor in thinner atmosphere (more UV), lower sun angles, over 20h days and you get more warmth with less average temperature. And those buses stink like inside of a plastic factory. Never been to a plastic factory, but rode these buses. And the smell is strong even a year into use. Makes you wonder if China has same rules for carcinogenic plastic in consumer goods…

To sell in to the local market they would have had to meet local standards.

Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses

#105

Post by ASalazarMX »

IAmBroom wrote: post #50
CGMthrowaway wrote: post #42

Earlier quoted context omitted.

> Two major non-Chinese train companies attempted to merge Siemens (Germany) and Alstom (France) > It fell down to an anti-monopoly decision by a single person in the EU ministry, who killed the proposal Margrethe Vestager, the European Commissioner for Competition at the time (2019). At the time of the decision, she said "No Chinese supplier has ever participated in a signaling tender in Europe or delivered a single…

Thank you for the details. > ...acknowledging mistakes made in the past " That's falling somewhat short of admitting she alone fucked that situation up. The US and Canada had already given permission for the merge to bypass antitrust laws.

Antitrust is important, so why not pass a law that prioritizes national or European companies for critical infrastructure, even if they're more expensive? Creating a monopoly to combat another monopoly is unlikely to end well in the future.

Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses

#107

Post by toyg »

izacus wrote: post #62
adrianN wrote: post #41

Earlier quoted context omitted.

The European champion would still be ten times smaller than the Chinese but would have factual monopoly in Europe. I don’t think blocking the merger was entirely unreasonable.

Also it would probably be 5x as corrupt. The things you see in EU public tenders is just amazing, especially when they's little to no competition.

5x as corrupt as it is now, or 5x as corrupt as the Chinese counterpart? Because they're pretty corrupt too...

Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses

#108

Post by BrenBarn »

IAmBroom wrote: post #29

I work in rail safety. Two major non-Chinese train companies attempted to merge a few years ago, explicitly to build a company that could compete with China's national company, and provide safer alternatives to state-sponsored cyberhacking of Western rail. It fell down to an anti-monopoly decision by a single person in the EU ministry, who killed the proposal. Several attempts were made to streamline the merger, but…

I mean one way to handle that is to just outright exclude Chinese companies from such bids.

Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses

#109

Post by ThePowerOfFuet »

IAmBroom wrote: post #29

I work in rail safety. Two major non-Chinese train companies attempted to merge a few years ago, explicitly to build a company that could compete with China's national company, and provide safer alternatives to state-sponsored cyberhacking of Western rail. It fell down to an anti-monopoly decision by a single person in the EU ministry, who killed the proposal. Several attempts were made to streamline the merger, but…

You are, of course, referring to Alstom and Siemens.

"A slap in the face is more effective than ten lectures. It makes you understand very quickly." —Leopold van Sacher-Masoch

Siemens received the slap in the form of Stuxnet. Industrial controls and transport are not the same business unit, but enough of the message got around internally.

I firmly believe Alstom would not be making such garbage today, at least not from a cybersecurity perspective, had this merger gone ahead. And, let's say, I know quite well exactly what type of hot garbage they unfortunately continue to make.

It's a shame.

Re: Norway reviews cybersecurity after remote-access feature found in Chinese buses

#110

Post by mtrovo »

buellerbueller wrote: post #70
izacus wrote: post #62

Earlier quoted context omitted.

Also it would probably be 5x as corrupt. The things you see in EU public tenders is just amazing, especially when they's little to no competition.

>The things you see in EU public tenders Can you give examples of what you (obviously, since you're commenting) have seen, and how typical it is?

As someone who barely interacts with the people that care about tenders, my impression is that people that usually win are the ones better at playing the game rather than better at the job. The job later is potentially repackaged in chunks and offered to other players that in turn will do the same downstream. Something like Romania gets EU fund money to build roads in Romania with a German engineering project, German contractors, German supplied materials, but Romanian workers. Or in a more particular case part of recycling trash in Germany is basically being dumped illegally in Poland for a while and the same companies keep operating and winning contracts because why not.

You create a political class full of lawyers, and you get a country where lawyers thrive, who would have thought?

Post reply on HN