News for hackers. Stuff that matters.
Re:Norway reviews cybersecurity after remote-access feature ... by bronlund on Wednesday November 05, 2025 @11:54AM (#45825076)
This is just stupid. All modern vehicles har been fully remote controllable for years.
Re:Norway reviews cybersecurity after remote-access feature ... by alephnerd on Wednesday November 05, 2025 @11:57AM (#45825100)
The issue was the eSIMs identified were not disclosed by Yutong, which clearly falls afoul of procurement and cybersecurity regulations.
Re:Norway reviews cybersecurity after remote-access feature ... by bronlund on Wednesday November 05, 2025 @12:08PM (#45825227)
I wasn't aware of that, thanks. But still, if you go buy a car right now, I doubt they are going to make it a sales pitch that you are not the only one who can control your car.
Re:Norway reviews cybersecurity after remote-access feature ... by amarant on Wednesday November 05, 2025 @12:18PM (#45825353)
This is why we invented the fine print.

Not putting this information in the fine print is fraudulent behaviour

Re:Norway reviews cybersecurity after remote-access feature ... by bluGill on Wednesday November 05, 2025 @02:13PM (#45826663)
There are limits to what can be put into the fine print as well. We probably need to revisit though rules, but you can't get away with anything just by putting it in the fine print.
Re:Norway reviews cybersecurity after remote-access feature ... by bronlund on Wednesday November 05, 2025 @12:25PM (#45825423)
It was most likely in the specs from the beginning. You can't have busses roaming around with no way to turn them off remotely.
Re:Norway reviews cybersecurity after remote-access feature ... by Tor3 on Wednesday November 05, 2025 @01:44PM (#45826331)
"You can't have busses roaming around with no way to turn them off remotely."

Hm? Not a single bus on the road in my city can be turned off remotely. There's never been one ever, since bus transport started. So why should, no, must, that be a feature of new buses?

Re:Norway reviews cybersecurity after remote-access feature ... by mixologist on Thursday November 06, 2025 @03:56AM (#45833005)
Why do you think that they can't be turned off remotely? They all have over the air updates. Just push the update the bricks the bus.
Re:Norway reviews cybersecurity after remote-access feature ... by Tor3 on Thursday November 06, 2025 @08:07AM (#45834803)
Look at what I replied to. The claim was "You can't have [buses] roaming around with no way to turn them off remotely". As if there's some general rule or agreement that it MUST be possible to turn buses off remotely. What I stated was that of course there's no such mandate.

And when I said "Not a single bus on the road in my country can be turned off remotely", that's the truth. They can't. They're all diesel, so there's not even a remote possibility of a hidden esim-powered switch.

Why did the post I replied to claim that it must be possible for buses? And why did you assume that I meant something else, and that all buses are electric?

Re:Norway reviews cybersecurity after remote-access feature ... by donkers on Wednesday November 05, 2025 @12:49PM (#45825716)
I’m pretty sure turning off the bus is something the bus driver can do. It’s not like buses were wildly roaming around before cellular networks were invented…
Re:Norway reviews cybersecurity after remote-access feature ... by secondcoming on Wednesday November 05, 2025 @12:46PM (#45825676)
Yes, those wild buses on the loose have been a major problem
Re:Norway reviews cybersecurity after remote-access feature ... by wafflemaker on Wednesday November 05, 2025 @02:22PM (#45826757)
Kinda explains why nothing is being done in Poland about hunters accidently killing lots of people, mistaking them for boars. If you crack down on hunters, you can't have them control the population of wild buses.
Re:Norway reviews cybersecurity after remote-access feature ... by asplake on Wednesday November 05, 2025 @12:33PM (#45825537)
Can't you? And who should have that power? I believe that this is the concern.
Re:Norway reviews cybersecurity after remote-access feature ... by IAmBroom on Wednesday November 05, 2025 @01:10PM (#45825961)
What? That's the way it's always been.

Do you imagine some benevolent authority sits in your town with a finger on the kill switch for every vehicle in motion?

If it were in the specs from the beginning, there would be no issue. This isn't a "click here to accept" thing; multiple people scan the technical data in these projects.

Re:Norway reviews cybersecurity after remote-access feature ... by drykjdryj on Wednesday November 05, 2025 @02:45PM (#45827007)
Better than a bus that are blown up if it goes under 50 mph.
Re:Norway reviews cybersecurity after remote-access feature ... by RansomStark on Wednesday November 05, 2025 @12:48PM (#45825703)
I fully agree. If these were buses from any other country, this would not be an issue.

Every road vehicle sold today has a sim card, most for diagnostics, some for remote control.

Re:Norway reviews cybersecurity after remote-access feature ... by Tor3 on Wednesday November 05, 2025 @01:42PM (#45826301)
The tests done on the buses showed that they can be stopped as well as otherwise controlled remotely from China. This is way more than diagnostics, and remote control is _not_ something which is common in road vehicles.
Re:Norway reviews cybersecurity after remote-access feature ... by IAmBroom on Wednesday November 05, 2025 @12:57PM (#45825817)
Having "a sim card" is less than saying your car "has an on-board computer". In no way does that imply remote control.

Even you admit that most of them aren't for remote control, so what are you agreeing with?

Re:Norway reviews cybersecurity after remote-access feature ... by mixologist on Thursday November 06, 2025 @03:53AM (#45832983)
Remote control is just one over the air update away.
Re:Norway reviews cybersecurity after remote-access feature ... by int_19h on Wednesday November 05, 2025 @07:43PM (#45830025)
International politics does matter. So, yes, a country that is historically hostile, or allied with countries that are hostile, towards yours, gets different treatment.
Re:Norway reviews cybersecurity after remote-access feature ... by IAmBroom on Wednesday November 05, 2025 @12:55PM (#45825795)
100% false.

For obvious reasons, non-CBTC trains are not remotely controllable (CBTC essentially means "remotely driven"). It's all or nothing; either a safety system that inherently accepts the risk, or no way to remotely control the speed, short of fully stopping the train.

If modern cars have been fully remotely controllable for years, why can't police stop often-deadly car chases?

Ditto on air traffic control and small planes; many don't even have in-plane automatic pilots. AFAIK no ultralights ever do.

Most boats are not remotely controllable; even the large container ship that recently damaged a major US bridge didn't.

Re:Norway reviews cybersecurity after remote-access feature ... by potato3732842 on Wednesday November 05, 2025 @01:18PM (#45826026)
>If modern cars have been fully remotely controllable for years, why can't police stop often-deadly car chases?

They want to retain the power of discretionary action. If the powers that be employed their 1984 stuff all the time over trivial things people wouldn't support them. Part of this means they don't give the beat cops those toys.

Also, there's a difference between "can be" and "are". Like there's god knows how many numbers of compatibility layers and intermediary systems I bet even if the capability exists it's broken more often than it's not. Diverse software systems take a ton of constant work to maintain.

During the "last years of XP" era you probably could have theoretically taken down half the world's industry on paper but if you tried to do so at scale without literal years of prep and testing you'd have been foiled by the 50% of machines where you payload just didn't work for some obscure reason.

Re:Norway reviews cybersecurity after remote-access feature ... by bronlund on Wednesday November 05, 2025 @01:15PM (#45825999)
If the internet has all the information and you are on the internet, why don't you know this already?
Re:Norway reviews cybersecurity after remote-access feature ... by IAmBroom on Wednesday November 05, 2025 @01:17PM (#45826015)
What on Earth are you rambling about now?
Re:Norway reviews cybersecurity after remote-access feature ... by cosmicgadget on Wednesday November 05, 2025 @02:23PM (#45826778)
Can you help me find the mechanism that remotely engages the clutch on my truck?