Feed: Slashdot
Feed Link: https://slashdot.org/
---

Title: Danish Authorities In Rush To Close Security Loophole In Chinese
Electric Buses

Link: https://it.slashdot.org/story/25/11/05/211122...

An anonymous reader quotes a report from the Guardian: Authorities in Denmark
are urgently studying how to close an apparent security loophole in hundreds
of Chinese-made electric buses that enables them to be remotely deactivated.
The investigation comes after transport authorities in Norway, where the
Yutong buses are also in service, found that the Chinese supplier had remote
access for software updates and diagnostics to the vehicles' control systems -
- which could be exploited to affect buses while in transit. Amid concerns
over potential security risks, the Norwegian public transport authority Ruter
decided to test two electric buses in an isolated environment. Bernt Reitan
Jenssen, Ruter's chief executive, said: "The testing revealed risks that we
are now taking measures against. National and local authorities have been
informed and must assist with additional measures at a national level." Their
investigations found that remote deactivation could be prevented by removing
the buses' sim cards, but they decided against this because it would also
disconnect the bus from other systems. Ruter said it planned to bring in
stricter security requirements for future procurements. Jenssen said it must
act before the arrival of the next generation of buses, which could be even
"more integrated and harder to secure." Movia, Denmark's largest public
transport company, has 469 Chinese electric buses in operation -- 262 of
which were manufactured by Yutong. Jeppe Gaard, Movia's chief operating
officer, said he was made aware of the loophole last week. "This is not a
Chinese bus problem," he said. "It is a problem for all types of vehicles and
devices with Chinese electronics built in."

Read more of this story at Slashdot.

---
VRSS v2.1.180528