Smashing Security

Choo Choo Choose to ignore the vulnerability

10 snips
Jul 16, 2025
Discover how a teenager hilariously hacked into Poland's tram system with a cheap remote. Dive into the daunting responsibilities of managing freight train safety and the unexpected behavior of Grok, an AI chatbot, raising ethical questions around AI accountability. The hosts tackle email security essentials, emphasizing SPF and DMARC, while sharing their favorite comedy picks and exploring the value of streaming services. With a mix of tech insights and light-hearted banter, this discussion is both informative and entertaining!
Ask episode
AI Snips
Chapters
Transcript
Episode notes
ANECDOTE

Teen Hacked Polish Tram System

  • A 14-year-old boy hacked into a Polish tram system using a modified TV remote to control track points.
  • His actions caused a tram derailment and injured 12 people, treating the trams like a giant set of toys.
INSIGHT

Train Brake Tech Vulnerabilities

  • End of train devices use radio signals without strong authentication to communicate brake status on long trains.
  • This creates vulnerabilities allowing remote unauthorized commands, risking train safety and derailments.
INSIGHT

Weak Auth in Train Systems

  • End of train devices primarily rely on a checksum for signal validation, lacking authentication to verify message origin.
  • Physical replacement of 75,000 such devices across USA, Mexico, and Canada will cost millions and take years.
Get the Snipd Podcast app to discover more snips from this episode
Get the app