cross-posted from: https://scribe.disroot.org/post/5486763
In a revelation that has sent shockwaves through Europe’s public transportation sector, Norwegian authorities have uncovered hidden remote-access capabilities in electric buses manufactured by Chinese company Yutong. These features, including concealed SIM cards and software backdoors, allow for potential remote shutdowns from abroad, prompting an urgent review of cybersecurity protocols in critical infrastructure.
The discovery came during routine security tests conducted by Ruter, Oslo’s public transport operator, on a fleet of newly acquired Yutong buses. According to reports, the buses contain embedded systems that enable remote diagnostics, software updates, and even control over battery and power systems—capabilities that could theoretically halt operations from thousands of miles away in China.
This incident highlights growing concerns over supply chain vulnerabilities in the era of connected vehicles, where electric buses represent a key component of sustainable urban mobility. Industry experts warn that such hidden features could be exploited not just by manufacturers but by malicious actors, raising alarms about national security in an increasingly digitized transport landscape.
…
Details emerged from a security audit initiated after Ruter tested the buses’ connectivity features. As reported by Scandasia, hidden remote-access SIM cards were found, allowing unauthorized external control. “We have identified risks related to remote access that could potentially affect the operation of the buses,” a Ruter spokesperson stated in the article.
…
Broader Implications for Transport Security
Norway’s case is not isolated. Similar concerns have surfaced in other sectors, but this marks a significant escalation in public transport. According to Cybernews, the remote control extends to the buses’ diagnostics module and battery systems, potentially allowing for mass disruptions.
The Norwegian government, as detailed in a report by Anadolu Ajansı, is now reviewing cybersecurity risks across all public transport assets. “Manufacturer access allows buses to be stopped from China,” Ruter confirmed, prompting immediate action to mitigate threats.
Industry insiders point to this as a wake-up call for Europe. A recent article in Focus on Travel News noted that Norway is investigating these buses after finding they can be remotely accessed, raising broader concerns about foreign-made critical infrastructure.
…
The problem isn’t Chinese back doors as such, but the enshittification of infrastructure with remote access that alows manufacturers to brick shit whenever they like. Remember those trains in Poland that were remotely shut down whenever their manufacturer saw that they were maintained by a third party?
No, this is not a ‘Chinese’ problem, but as a European I would rather have this problem with a European supplier than with a Chinese supplier for having control over the trains on the continent (or my car, or any technology). But I agree that there shouldn’t be remote access in the first place.
But it was cheeeeeapeeerrrrr. And therefore better by definition.
Oh yes the stupidity of “cheapest bidder wins the contract” is monumental. And comes with a whole bunch of follow-up costs, both literally and figuratively.
Ah. See, we simply don’t have enough enlightened capitalists. If they had simply been erudite enough to calculate the true cost, then the free market would have set them free.
Alas.
The cheapest bid should be automatically deleted.
Your response is so weirdly succinct and ends with a whataboutism, like a state actor. Let’s agree that China is fucked up for doing this and needs to learn to stay in their lane.