Fou-and-foue - Yahaha! - Tumblr Blog

happy out of touch thursday captain its monday monday

hello mutuals i am sniffing u with my nose. it is cold and wet. sorry

circle of sleep <3

can you imagine what the dash would be like if they hadnt missed

beyond obsessed w this pic of bootsy collins. wizard drip impeccable

please

look at this video of a mouse eating soup and bread and butter

Always in a constant state of "hmm maybe I wasn't as normal in that conversation as I thought I was"

Reblog if you're a filthy queer degenerate

we can't even get you to stop calling us "dude"

Daydream 🍃

💥✨️

rigging & power lines r like siblings i think.

fags are allowed to say dyke and dykes are allowed to say fag in the same way that youre allowed to run up and slap your sibling on the back of the head

Sunbathed memories

Happy new year!!!! 30min daily paintings are back but for how long hahaha

pink moon.

Have you heard about the Polish Train company, Newag, and the bullshit it turns out they got up to?

So, the regional rail operator Koleje Dolnośląskie bought some Newag Impuls back in 2016 . In late 2021, some of them need to have major maintenance done, as they've been in service a while. So the company SPS (Serwis Pojazdów Szynowych) gets the contract to fix them. They basically take the train apart, replace a bunch of it, following all the rules in the documentation Newag gave them, and... it won't move. The train says everything is fine, the brakes are off, there's plenty of power, but you push the throttle up and it won't move.

SPS spends a while trying to figure out what the fuck is wrong, with no luck. So they hire some hackers from the Polish security group Dragon Sector. Dragon Sector figures out how to get into the code of the computer system that runs the train, and OH MY GOD.

So it turns out there's a secret train-lock system. If it's on, the train won't move. This will be triggered in some situations you might think are normal: the clocks are wrong, the serial numbers of the various parts have changed, and a firmware mismatch between the main computer and the power system. Now, the fact that it makes sense to not run the train in these situations until someone can check it? that doesn't extend to the fact the train uses a SECRET lock system, rather than just popping up an error message telling you what's wrong. There's also the problem that while these are all potential error problems, they can't be cleared by anyone with the technical manuals, which are supposed to cover everything about how to run these trains. Only Newag themselves can reset this system.

Which, you know, keeps SPS from properly fixing them. Only Newag can fix them now, but not because SPS lacks any technical ability, but because Newag sabotaged their own trains. But don't worry: it gets worse.

So now that Dragon Sector knows what's happening, they get to look at other trains. It turns out the trains aren't all running the same software, and there are other tricks in there.

One of them is a "how long has the train been stopped?" check. If the train hasn't hit 60 km/h in 10 days, the train locks itself and won't move until Newag can clear it. So, like, if a train is ever out of service, like it's going to a repair place... it'll break itself. Unless the repair place is owned by Newag.

But two of the trains go further: See, these trains have GPS built in, right? You may be able to guess where this is going...

THEY JUST MAKE THE TRAIN CHECK IF IT IS PARKED AT THEIR COMPETITORS' REPAIR YARD AND BREAK ITSELF IF IT WAS.

The sheer audacity of this move. This is frighteningly bullshit anti-competition self-sabotage.

This has, obviously, made some parts of the Polish government to start investigating this. Newag may be (and hopefully will be) in a lot of trouble.

For more info, there's a great video of a presentation by the three people from Dragon Sector who did the hacking, which was presented at the 37th Chaos Communication Congress in Germany.

Ars Technica also has an article on it, but it predates the presentation so it doesn't have some of the later details.

Anyway, the good news is that in the end the hackers at Dragon Sector were able to unlock most of the trains: A few had additional trickery that they didn't want to hack around, because it might break the train's certification. For the others, they discovered undocumented "cheat codes" in the software that they could use to bypass the secret lockouts... presumably the same ones that Newag would have used when they "repaired" trains.

having fun

in the weeds

Black tea and a pink lady. 🫖 original painting available on my website.

why are star wars planets more boring than earth and our solar system like sure we’ve seen desert, snow, diff types of forest, beach, lava, rain, but like… 

rainbow mountains (peru)

red soil (canada/PEI)

rings (saturn’s if they were on earth) 

bioluminescent waves

northern lights (canada)

salt flats (bolivia, where they filmed crait but did NOTHING COOL WITH IT except red dust?? like??? come ON)

and cool fauna like the touch me not or like, you know, the venus flytrap.. and don’t get me started on BUGS like… we have bugs cooler than sw aliens

BASICALLY like???? come on star wars you had one (1) job where are the cool alien species