iiinova — where your digital self keeps evolving

Michał Kowalczyk @mkow.bsky.social · 26/03/2025

Not everything that Newag does is bad. For instance, we would like to congratulate them on making the shortlist of the European SLAPP Contest 2025! www.the-case.eu/latest/the-p...

the-case.eu

The People’s Choice Award: European SLAPP Contest 2025 – CASE

051

Reposted by Michał Kowalczyk

Kevin Collier @kevincollier.bsky.social · 07/02/2025

Snooper's Charter realized. "The British government’s undisclosed order, issued last month, requires blanket capability to view fully encrypted material, not merely assistance in cracking a specific account, and has no known precedent in major democracies." Huge story from @joemenn.bsky.social

washingtonpost.com

U.K. orders Apple to let it spy on users’ encrypted accounts

Secret order requires blanket access to protected cloud backups around the world, which if implemented would undermine Apple’s privacy pledge to its users.

35027

Michał Kowalczyk @mkow.bsky.social · 03/02/2025

This looks huge, a bug allows loading custom microcode into AMD CPUs! Great for reversing CPU internals, but also breaks AMD-SEV and others...

052

Reposted by Michał Kowalczyk

Gynvael Coldwind @gynvael.bsky.social · 30/01/2025

"Hacker", as we in the bizz know well, carries different meanings for different people, and this can cause hilarious misunderstandings. Yesterday, the second part of an ongoing documentary about issues in NEWAG trains that were analyzed by Dragon Sector was aired. [...] gynvael.coldwind.pl?id=799

"[...] representatives of this group of hackers, commonly referred to as "ethical hackers", though theft and home invasion have nothing to do with ethics—but well, I understand, ethical hackers, because that's what they call themselves [...]" (a certain Polish MP)

2112

Reposted by Michał Kowalczyk

Gynvael Coldwind @gynvael.bsky.social · 26/01/2025

If you're following NEWAG vs Dragon Sector suits: Citizens Network Watchdog Poland ("independent, apolitical and non-profit organization in the form of a watchdog & think-do-tank") filed an amicus brief with the court urging the court to dismiss the case as a SLAPP siecobywatelska.pl/od-niedziala...

siecobywatelska.pl

Od niedziałających pociągów do SLAPP-u - Sieć Obywatelska Watchdog

W grudniu 2023 roku głośno było o zainstalowanych w pociągach produkowanych przez Newag blokadach, które uniemożliwiały uruchomienie maszyn po naprawach w niezależnych od producenta serwisach. Zaczęł...

2123

Reposted by Michał Kowalczyk

RE//verse @re-verse.io · 22/01/2025

From sabotaging trains to conquering Tricore: Michał Kowalczyk ( @mkow.bsky.social ) and Jakub Stepniewicz (MrTick) take you on a deep dive into RE challenges—500KB of machine code, Ghidra bugs, and embedded adventures. re-verse.sessionize.com/session/778… #REverse2025 #HardwareHacking

031

Michał Kowalczyk @mkow.bsky.social · 22/11/2024

Exact quote of Polish ex-Minister for Infrastructure about Dragon Sector: (translation mine) "representatives of the group of hackers, so called "ethical hackers", despite that stealing and robbing houses has nothing to do with ethics" (???)

130

Michał Kowalczyk @mkow.bsky.social · 22/11/2024

Good summary of yesterday's Infrastructure Committee meeting in Polish Parliament (PL only, but translation should work). We were compared to house burglars (because we're **hackers**) and the meeting was closed without giving us and other guests a chance to speak. [PL] www.onet.pl/informacje/o...

onet.pl

Potężne zamieszanie w Sejmie po skandalu z pociągami Newagu. "Posłowie chcą zamieść temat pod dywan"

Służby specjalne od dwóch lat wiedzą o skandalu z dziwnymi usterkami w pociągach Newagu, firmy kontrolowanej przez biznesmena Zbigniewa Jakubasa. Jednak w czwartek posłowie sejmowej infrastruktury, na...

000

Reposted by Michał Kowalczyk

Jay 🦋 @jay.bsky.team · 19/11/2024

6. Custom feeds on Bluesky are the first implementation of algorithmic choice. Instead of using a single black-box For You algorithm, you can create and subscribe to your own. Now, there are over 50k+ custom feeds on the network! Check them out: bsky.app/feeds

12210533961

Reposted by Michał Kowalczyk

christogrozev.bsky.social @christogrozev.bsky.social · 18/11/2024

We are kicking things off with a series on the spies, crooks and hit-men released back to Moscow in the recent prisoner swap. Let's start with the improbable identification process of the Russian illegals posing as an Argentine family in Slovenia: youtu.be/3TTFrYqZFZo?...

youtu.be

The Big Swap: The Russian Spies Posing As an Innocent Argentine Family

YouTube video by M4 Studio

915939

Reposted by Michał Kowalczyk

Ellen Nakashima @ellenwapo.bsky.social · 17/11/2024

NEW: Biden's approval for Ukraine to use the powerful ATACMS long-range weapon for limited strikes inside Russia is in response to North Korea's deployment of thousands of troops to aid Moscow's war effort & is a significant reversal of U.S. policy. www.washingtonpost.com/national-sec...

washingtonpost.com

Biden approves Ukraine’s use of long-range U.S. weapons inside Russia, reversing policy

The Biden administration will allow Kyiv “limited” use of the ATACMS long-range missile system to strike enemy positions in Kursk, a significant reversal of U.S. policy.

1125569

Reposted by Michał Kowalczyk

ZaufanaTrzeciaStrona.pl @zaufana3strona.bsky.social · 13/07/2024

Chcecie być objęci nadzorem ABW? Zapraszamy na Oh My H@ck 2024! Nie pożałujecie ;) omhconf.pl Z pozwu przeciwko członkom Dragon Sector: NEWAG zwrócił się do ABW o usunięcie artykułów oraz "objęcie szczególnym nadzorem wszystkich uczestników konferencji Oh my Hack"

021

Reposted by Michał Kowalczyk

Gynvael Coldwind @gynvael.bsky.social · 31/03/2024

Some notes from analyzing the bash part obfuscation of the xz/liblzma part – link leads to the part I found most interesting – it was added in 5.6.1: gynvael.coldwind.pl?lang=en&id=7...

052

Reposted by Michał Kowalczyk

Filippo Valsorda @filippo.abyssdomain.expert · 29/03/2024

This might be the best executed supply chain attack we've seen described in the open, and it's a nightmare scenario: malicious, competent, authorized upstream in a widely used library. Looks like this got caught by chance. Wonder how long it would have taken otherwise.

9378173

Reposted by Michał Kowalczyk

Jon Worth @jonworth.eu · 07/12/2023

I've written a piece setting the amazing work by 3 guys investigating NEWAG's digital sabotage of its Impuls trains in the wider railway context. I try to explain *why* NEWAG behaved as it did, and what the rail industry can learn now the problem has been discovered jonworth.eu/newags-digit...

jonworth.eu

NEWAG's digital sabotage of Dolny Śląsk's trains - what were they thinking? - Jon Worth

In the past couple of days, my Mastodon feed has been full of astonishment about how three Polish IT specialists discovered digital sabotage attempts in trains built by manufacturer NEWAG. The origina...

67937