BROADCASTS.com

We've all been there: the trains you're servicing for a customer suddenly brick themselves and the manufacturer claims that's because you've interfered with a security system.\n\nThis talk will tell the story of a series of Polish EMUs (Electric Multiple Unit) that all refused to move a few days after arriving at an \u201cunauthorized\u201d service company. We'll go over how a train control system actually works, how we reverse-engineered one and what sort of magical \u201csecurity\u201d systems we actually found inside of it.\n\nReality sometimes is stranger than the wildest CTF task. Reality sometimes is running `unlock.py` on a dozen trains.\n\nThe talk will be a mix of technical and non-technical aspects of analysis which should be understandable for anyone with a technical background. We\u2019ll briefly explain how modern EMUs look like inside, how the Train Control & Monitoring System works, and how to analyze TriCore machine code.\nabout this event: https://events.ccc.de/congress/2023/hub/event/breaking_drm_in_polish_trains/