News for hackers. Stuff that matters.
Re:Norway reviews cybersecurity after remote-access feature ... by alephnerd on Wednesday November 05, 2025 @11:57AM (#45825100)
The issue was the eSIMs identified were not disclosed by Yutong, which clearly falls afoul of procurement and cybersecurity regulations.
Re:Norway reviews cybersecurity after remote-access feature ... by bronlund on Wednesday November 05, 2025 @12:08PM (#45825227)
I wasn't aware of that, thanks. But still, if you go buy a car right now, I doubt they are going to make it a sales pitch that you are not the only one who can control your car.
Re:Norway reviews cybersecurity after remote-access feature ... by amarant on Wednesday November 05, 2025 @12:18PM (#45825353)
This is why we invented the fine print.

Not putting this information in the fine print is fraudulent behaviour

Re:Norway reviews cybersecurity after remote-access feature ... by bluGill on Wednesday November 05, 2025 @02:13PM (#45826663)
There are limits to what can be put into the fine print as well. We probably need to revisit though rules, but you can't get away with anything just by putting it in the fine print.
Re:Norway reviews cybersecurity after remote-access feature ... by bronlund on Wednesday November 05, 2025 @12:25PM (#45825423)
It was most likely in the specs from the beginning. You can't have busses roaming around with no way to turn them off remotely.
Re:Norway reviews cybersecurity after remote-access feature ... by Tor3 on Wednesday November 05, 2025 @01:44PM (#45826331)
"You can't have busses roaming around with no way to turn them off remotely."

Hm? Not a single bus on the road in my city can be turned off remotely. There's never been one ever, since bus transport started. So why should, no, must, that be a feature of new buses?

Re:Norway reviews cybersecurity after remote-access feature ... by mixologist on Thursday November 06, 2025 @03:56AM (#45833005)
Why do you think that they can't be turned off remotely? They all have over the air updates. Just push the update the bricks the bus.
Re:Norway reviews cybersecurity after remote-access feature ... by Tor3 on Thursday November 06, 2025 @08:07AM (#45834803)
Look at what I replied to. The claim was "You can't have [buses] roaming around with no way to turn them off remotely". As if there's some general rule or agreement that it MUST be possible to turn buses off remotely. What I stated was that of course there's no such mandate.

And when I said "Not a single bus on the road in my country can be turned off remotely", that's the truth. They can't. They're all diesel, so there's not even a remote possibility of a hidden esim-powered switch.

Why did the post I replied to claim that it must be possible for buses? And why did you assume that I meant something else, and that all buses are electric?

Re:Norway reviews cybersecurity after remote-access feature ... by donkers on Wednesday November 05, 2025 @12:49PM (#45825716)
I’m pretty sure turning off the bus is something the bus driver can do. It’s not like buses were wildly roaming around before cellular networks were invented…
Re:Norway reviews cybersecurity after remote-access feature ... by secondcoming on Wednesday November 05, 2025 @12:46PM (#45825676)
Yes, those wild buses on the loose have been a major problem
Re:Norway reviews cybersecurity after remote-access feature ... by wafflemaker on Wednesday November 05, 2025 @02:22PM (#45826757)
Kinda explains why nothing is being done in Poland about hunters accidently killing lots of people, mistaking them for boars. If you crack down on hunters, you can't have them control the population of wild buses.
Re:Norway reviews cybersecurity after remote-access feature ... by asplake on Wednesday November 05, 2025 @12:33PM (#45825537)
Can't you? And who should have that power? I believe that this is the concern.
Re:Norway reviews cybersecurity after remote-access feature ... by IAmBroom on Wednesday November 05, 2025 @01:10PM (#45825961)
What? That's the way it's always been.

Do you imagine some benevolent authority sits in your town with a finger on the kill switch for every vehicle in motion?

If it were in the specs from the beginning, there would be no issue. This isn't a "click here to accept" thing; multiple people scan the technical data in these projects.

Re:Norway reviews cybersecurity after remote-access feature ... by drykjdryj on Wednesday November 05, 2025 @02:45PM (#45827007)
Better than a bus that are blown up if it goes under 50 mph.