Have you heard about the Polish Train company, Newag, and the bullshit it turns out they got up to?

So, the regional rail operator Koleje Dolnośląskie bought some Newag Impuls back in 2016 . In late 2021, some of them need to have major maintenance done, as they've been in service a while. So the company SPS (Serwis Pojazdów Szynowych) gets the contract to fix them. They basically take the train apart, replace a bunch of it, following all the rules in the documentation Newag gave them, and... it won't move. The train says everything is fine, the brakes are off, there's plenty of power, but you push the throttle up and it won't move.

SPS spends a while trying to figure out what the fuck is wrong, with no luck. So they hire some hackers from the Polish security group Dragon Sector. Dragon Sector figures out how to get into the code of the computer system that runs the train, and OH MY GOD.

So it turns out there's a secret train-lock system. If it's on, the train won't move. This will be triggered in some situations you might think are normal: the clocks are wrong, the serial numbers of the various parts have changed, and a firmware mismatch between the main computer and the power system. Now, the fact that it makes sense to not run the train in these situations until someone can check it? that doesn't extend to the fact the train uses a SECRET lock system, rather than just popping up an error message telling you what's wrong. There's also the problem that while these are all potential error problems, they can't be cleared by anyone with the technical manuals, which are supposed to cover everything about how to run these trains. Only Newag themselves can reset this system.

Which, you know, keeps SPS from properly fixing them. Only Newag can fix them now, but not because SPS lacks any technical ability, but because Newag sabotaged their own trains. But don't worry: it gets worse.

So now that Dragon Sector knows what's happening, they get to look at other trains. It turns out the trains aren't all running the same software, and there are other tricks in there.

One of them is a "how long has the train been stopped?" check. If the train hasn't hit 60 km/h in 10 days, the train locks itself and won't move until Newag can clear it. So, like, if a train is ever out of service, like it's going to a repair place... it'll break itself. Unless the repair place is owned by Newag.

But two of the trains go further: See, these trains have GPS built in, right? You may be able to guess where this is going...

THEY JUST MAKE THE TRAIN CHECK IF IT IS PARKED AT THEIR COMPETITORS' REPAIR YARD AND BREAK ITSELF IF IT WAS.

The sheer audacity of this move. This is frighteningly bullshit anti-competition self-sabotage.

This has, obviously, made some parts of the Polish government to start investigating this. Newag may be (and hopefully will be) in a lot of trouble.

For more info, there's a great video of a presentation by the three people from Dragon Sector who did the hacking, which was presented at the 37th Chaos Communication Congress in Germany.

Ars Technica also has an article on it, but it predates the presentation so it doesn't have some of the later details.

Picks and Shovels is a new, standalone technothriller starring Marty Hench, my two-fisted, hard-fighting, tech-scam-busting forensic accountant. You can pre-order it on my latest Kickstarter, which features a brilliant audiobook read by Wil Wheaton.

During the Napster wars, the record labels seriously pissed off millions of internet users when they sued over 19,000 music fans, mostly kids, but also grannies, old people, and dead people.

It's hard to overstate how badly the labels behaved. Like, there was the Swarthmore student who was the maintainer of a free/open source search engine that indexed files available in public sharepoints on the LAN. The labels sued him for millions and millions (the statutory damages for digital copyright infringement runs to $150,000 per file) and, when he begged for a settlement, said that they would accept his life's savings, but only if he changed majors and stopped studying Computer Science.

No, really.

What's more, none of the money the labels extracted from teenagers, grandparents (and the dead) went to artists. The labels just kept it all, while continuing to insist that they were doing all this because they wanted to "protect artists."

One thing everyone agreed on was how disgusted we all were with the labels. What we didn't agree on was what to do about it. A lot of us wanted to reform copyright – say, by creating a blanket license for internet music so that artists could get paid directly. This was the systemic approach.

Another group – call them the "individualists" – wanted a boycott. Just stop buying and listening to music from the major labels. Every dollar you spend with a label is being used to fund a campaign of legal terror. Merely enjoying popular music makes you part of the problem.

You can probably guess which group I was in. Leaving aside the futility of "voting with your wallet" (a rigged ballot that's always won by the people with the thickest wallet), I just thought this was bad tactics.

Here's what I would say when people told me we should all stop listening to popular music: "If members of your popular movement are not allowed to listen to popular music, your movement won't be very popular."

We weren't going to make political change by creating an impossible purity test ("Ew, you listen to music from a major label? God, what's wrong with you?"). I mean, for one thing, a lot of popular music is legitimately fantastic and makes peoples' lives better. Popular movements should strive to increase their members' joy, not demand their deprivation. Again, not merely because this is a nice thing to do for people, but also because it's good tactics to make participation in the thing you're trying to do as joyous as possible.

Which brings me to social media. The problem with social media is that the people we love and want to interact with are being held prisoner in walled gardens. The mechanism of their imprisonment is the "switching costs" of leaving. Our friends and communities are on bad social media networks because they love each other more than they hate Musk or Zuck. Leaving a social platform can cost you contact with family members in the country you emigrated from, a support group of people who share your rare disease, the customers or audience you rely on for your livelihood, or just the other parents organizing your kid's little league game.

Hypothetically, you could organize all these people to leave at once, go somewhere else, and re-establish all your social connections. Practically, the "collective action problem" of doing so is nearly insurmountable. This is what platform owners depend on – it's why they know they can enshittify their services without losing users. So long as the pain of using the service is lower than the pain of leaving it, the companies can turn the screws on users to make their lives worse in order to extract more profit from them. This is why Musk killed the block button and why Zuck fired all his moderators. Why bear the expense of doing something nice for users if they'll still stick around even if you cut a ton of headcount and/or expensive compute?

There's a way out of this, thankfully. When social media is federated, then you can leave a server without leaving your friends. Think of it as being similar to changing cell-phone companies. When you switch from Verizon to T-Mobile, you keep your number, you keep your address book and you keep your friends, who won't even know you switched networks unless you tell them:

https://pluralistic.net/2022/10/29/how-to-leave-dying-social-media-platforms/

There's no reason social media couldn't work this way. You should be able to leave Facebook or Twitter for Mastodon, Bluesky, or any other service and still talk with the people you left behind, provided they still want to talk with you:

https://www.eff.org/interoperablefacebook

the original line is:

フッ…… わしは天涯孤独の身やさかい、 こないな体験は新鮮でええわ。

the phrase they translated as "not having a family" is 天涯孤独

so yknow. make of that what i you will i suppose. i get the sense he wouldnt say that if he was *rejecting* living relatives as family, so i do think he really doesnt have any living relatives. and i think it's been that way for a loooong time, because the context for this conversation is dads taking baths with their kids when they're little, and he's saying that bathing with someone is a novelty to him, so i have to assume he hasn't experienced that for himself as a kid *because* he didn't have parents growing up

The latest major release of HarvesterHarvester (HH) is finally here!!

For those who don't know: HH is a tool for "harvesting" data from the dat files of DigiFX Interactive's 1996 game, Harvester. In short, it gives you access to all of the game's files, restoring approximately 2.1 GiB worth of data in total.

HH was created as the first piece in a toolchain that I'm developing as I reverse engineer Harvester, with the ultimate goal being to eventually port the game to a more modern graphics library or game engine. No real reason why, I'm kinda doing this just because.

As of writing, the output from HH can be used in conjunction with another utility of mine, BMtoBMP (GitHub), to convert all of Harvester's static images into standard bitmap images. All the images above were created using this!

Coming soon will be a similar utility for converting the CMP music/voice files into some standard music file for easier viewing.

New in v2.0.0 is the ability to apply these same processes to other, similar games and file systems! This functionality is still experimental and a work in progress, but I hope to slowly add support for more, different varieties of ISO 9660 file systems as time goes on.