Newag - Revision history

Sojourna: /* References */

2026-05-15T00:36:58Z

References

← Older revision		Revision as of 00:36, 15 May 2026
Line 54:		Line 54:

	==References==		==References==
	~~<references />~~		{{Reflist}}

	[[Category:~~Newag~~]]		[[Category:{{PAGENAME}}]]
	[[Category:Poland]]		[[Category:Poland]]

Tracerneo: +cat

2026-05-14T13:49:26Z

+cat

← Older revision		Revision as of 13:49, 14 May 2026
Line 9:		Line 9:
	}}		}}

	'''{{wplink\|Newag\|Newag S.A.}}''' (pronounced ''"nevag"'') is a publicly traded Polish company based in {{wplink\|Nowy Sącz}} that specializes in the production, maintenance, and modernization of railway rolling stock.<ref>{{Cite web \|title=Company factsheet \|url=https://www.gpw.pl/company-factsheet?isin=PLNEWAG00012 \|url-status=live \|archive-url=https://web.archive.org/web/20260407160342/https://www.gpw.pl/company-factsheet?isin=PLNEWAG00012 \|archive-date=7 Apr 2026 \|access-date=1 Mar 2026 \|website=GPW}}</ref><ref>{{Cite web \|title=Company history \|url=https://www.newag.pl/en/company/history/ \|archive-url=http://web.archive.org/web/20250120130623/https://www.newag.pl/en/company/history/ \|archive-date=20 Jan 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref>		'''{{wplink\|Newag\|Newag S.A.}}''' (pronounced ''"nevag"'') is a publicly traded [[Poland\|Polish]] company based in {{wplink\|Nowy Sącz}} that specializes in the production, maintenance, and modernization of railway rolling stock.<ref>{{Cite web \|title=Company factsheet \|url=https://www.gpw.pl/company-factsheet?isin=PLNEWAG00012 \|url-status=live \|archive-url=https://web.archive.org/web/20260407160342/https://www.gpw.pl/company-factsheet?isin=PLNEWAG00012 \|archive-date=7 Apr 2026 \|access-date=1 Mar 2026 \|website=GPW}}</ref><ref>{{Cite web \|title=Company history \|url=https://www.newag.pl/en/company/history/ \|archive-url=http://web.archive.org/web/20250120130623/https://www.newag.pl/en/company/history/ \|archive-date=20 Jan 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref>

	Their most notable products include the electric locomotive families '''Griffin''' and '''Dragon''', as well as the '''Impuls''' family of multiple units.<ref>{{Cite web \|title=Griffin \|url=https://www.newag.pl/en/offer/griffin/ \|archive-url=http://web.archive.org/web/20250125122434/https://www.newag.pl/en/offer/griffin/ \|archive-date=25 Jan 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref><ref>{{Cite web \|title=Dragon \|url=https://www.newag.pl/en/offer/dragon/ \|archive-url=http://web.archive.org/web/20250209153246/https://www.newag.pl/en/offer/dragon/ \|archive-date=9 Feb 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref><ref>{{Cite web \|title=Impuls \|url=https://www.newag.pl/en/offer/impuls/ \|archive-url=http://web.archive.org/web/20250112104016/https://www.newag.pl/en/offer/impuls/ \|archive-date=12 Jan 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref>		Their most notable products include the electric locomotive families '''Griffin''' and '''Dragon''', as well as the '''Impuls''' family of multiple units.<ref>{{Cite web \|title=Griffin \|url=https://www.newag.pl/en/offer/griffin/ \|archive-url=http://web.archive.org/web/20250125122434/https://www.newag.pl/en/offer/griffin/ \|archive-date=25 Jan 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref><ref>{{Cite web \|title=Dragon \|url=https://www.newag.pl/en/offer/dragon/ \|archive-url=http://web.archive.org/web/20250209153246/https://www.newag.pl/en/offer/dragon/ \|archive-date=9 Feb 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref><ref>{{Cite web \|title=Impuls \|url=https://www.newag.pl/en/offer/impuls/ \|archive-url=http://web.archive.org/web/20250112104016/https://www.newag.pl/en/offer/impuls/ \|archive-date=12 Jan 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref>
Line 57:		Line 57:

	[[Category:Newag]]		[[Category:Newag]]
			[[Category:Poland]]

Tempo123: /* References */ Archive

2026-04-07T16:06:10Z

References: Archive

← Older revision		Revision as of 16:06, 7 April 2026
Line 9:		Line 9:
	}}		}}

	'''{{wplink\|Newag\|Newag S.A.}}''' (pronounced ''"nevag"'') is a publicly traded Polish company based in {{wplink\|Nowy Sącz}} that specializes in the production, maintenance, and modernization of railway rolling stock.<ref>{{Cite web \|title=Company factsheet \|url=https://www.gpw.pl/company-factsheet?isin=PLNEWAG00012 \|access-date=1 Mar 2026 \|website=GPW}}</ref><ref>{{Cite web \|title=Company history \|url=https://www.newag.pl/en/company/history/ \|archive-url=http://web.archive.org/web/20250120130623/https://www.newag.pl/en/company/history/ \|archive-date=20 Jan 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref>		'''{{wplink\|Newag\|Newag S.A.}}''' (pronounced ''"nevag"'') is a publicly traded Polish company based in {{wplink\|Nowy Sącz}} that specializes in the production, maintenance, and modernization of railway rolling stock.<ref>{{Cite web \|title=Company factsheet \|url=https://www.gpw.pl/company-factsheet?isin=PLNEWAG00012 \|url-status=live \|archive-url=https://web.archive.org/web/20260407160342/https://www.gpw.pl/company-factsheet?isin=PLNEWAG00012 \|archive-date=7 Apr 2026 \|access-date=1 Mar 2026 \|website=GPW}}</ref><ref>{{Cite web \|title=Company history \|url=https://www.newag.pl/en/company/history/ \|archive-url=http://web.archive.org/web/20250120130623/https://www.newag.pl/en/company/history/ \|archive-date=20 Jan 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref>

	Their most notable products include the electric locomotive families '''Griffin''' and '''Dragon''', as well as the '''Impuls''' family of multiple units.<ref>{{Cite web \|title=Griffin \|url=https://www.newag.pl/en/offer/griffin/ \|archive-url=http://web.archive.org/web/20250125122434/https://www.newag.pl/en/offer/griffin/ \|archive-date=25 Jan 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref><ref>{{Cite web \|title=Dragon \|url=https://www.newag.pl/en/offer/dragon/ \|archive-url=http://web.archive.org/web/20250209153246/https://www.newag.pl/en/offer/dragon/ \|archive-date=9 Feb 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref><ref>{{Cite web \|title=Impuls \|url=https://www.newag.pl/en/offer/impuls/ \|archive-url=http://web.archive.org/web/20250112104016/https://www.newag.pl/en/offer/impuls/ \|archive-date=12 Jan 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref>		Their most notable products include the electric locomotive families '''Griffin''' and '''Dragon''', as well as the '''Impuls''' family of multiple units.<ref>{{Cite web \|title=Griffin \|url=https://www.newag.pl/en/offer/griffin/ \|archive-url=http://web.archive.org/web/20250125122434/https://www.newag.pl/en/offer/griffin/ \|archive-date=25 Jan 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref><ref>{{Cite web \|title=Dragon \|url=https://www.newag.pl/en/offer/dragon/ \|archive-url=http://web.archive.org/web/20250209153246/https://www.newag.pl/en/offer/dragon/ \|archive-date=9 Feb 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref><ref>{{Cite web \|title=Impuls \|url=https://www.newag.pl/en/offer/impuls/ \|archive-url=http://web.archive.org/web/20250112104016/https://www.newag.pl/en/offer/impuls/ \|archive-date=12 Jan 2025 \|access-date=1 Mar 2026 \|website=Newag}}</ref>
Line 45:		Line 45:

	===Lawsuit reported by iFixit (July 2025)===		===Lawsuit reported by iFixit (July 2025)===
	On July 28, 2025, iFixit reported that Newag had initiated legal proceedings against members of Dragon Sector and SPS following their public disclosure of alleged software-based repair restrictions in Impuls trains.<ref>{{Cite web		On July 28, 2025, iFixit reported that Newag had initiated legal proceedings against members of Dragon Sector and SPS following their public disclosure of alleged software-based repair restrictions in Impuls trains.<ref>{{Cite web \|date=28 Jul 2025 \|title=Polish Train Maker Is Suing the Hackers Who Exposed Its Anti-Repair Tricks \|url=https://es.ifixit.com/News/112008/polish-train-maker-is-suing-the-hackers-who-exposed-its-anti-repair-tricks \|url-status=live \|archive-url=https://web.archive.org/web/20260302202139/https://es.ifixit.com/News/112008/polish-train-maker-is-suing-the-hackers-who-exposed-its-anti-repair-tricks \|archive-date=2026-03-02 \|access-date=1 Mar 2026 \|website=iFixit}}</ref>
	\|date=28 Jul 2025
	\|title=Polish Train Maker Is Suing the Hackers Who Exposed Its Anti-Repair Tricks
	\|url=https://es.ifixit.com/News/112008/polish-train-maker-is-suing-the-hackers-who-exposed-its-anti-repair-tricks
	\|access-date=1 Mar 2026
	\|website=iFixit
	}}</ref>

	The report states that the lawsuit includes allegations of copyright infringement related to reverse engineering and software modification. The case remains ongoing.		The report states that the lawsuit includes allegations of copyright infringement related to reverse engineering and software modification. The case remains ongoing.
Line 57:		Line 51:
	==See also==		==See also==

	* [[Leo Express]]		*[[Leo Express]]

	==References==		==References==

Keith: removed incomplete

2026-03-01T18:54:26Z

removed incomplete

← Older revision		Revision as of 18:54, 1 March 2026
Line 1:		Line 1:
	~~{{Incomplete}}~~
	{{CompanyCargo		{{CompanyCargo
	\|Description=Polish manufacturer of railway rolling stock.		\|Description=Polish manufacturer of railway rolling stock.

H0l0: added "leo express" to "See also"

2026-03-01T16:19:56Z

added "leo express" to "See also"

← Older revision		Revision as of 16:19, 1 March 2026
Line 24:		Line 24:
	Alleged mechanisms included:		Alleged mechanisms included:

	* A “lack of movement timer” disabling trains after inactivity.		*A “lack of movement timer” disabling trains after inactivity.
	* Geofencing that disabled trains at competitor workshops.		*Geofencing that disabled trains at competitor workshops.
	* Serialization of CAN bus components.		*Serialization of CAN bus components.
	* A date-based lock tied to servicing deadlines.		*A date-based lock tied to servicing deadlines.

	====Geofencing disruptions====		====Geofencing disruptions====
Line 57:		Line 57:

	==See also==		==See also==
	~~{{Ph-C-SA}}~~
			* [[Leo Express]]

	==References==		==References==

DragonDon: Added newly found article from 2025, corrected 'cite web' formatting, as per Kieth suggestions.

2026-03-01T15:45:50Z

Added newly found article from 2025, corrected 'cite web' formatting, as per Kieth suggestions.

Show changes

DragonDon: /* See also */ "Newag at it again." July 28, 2025 article.

2026-03-01T15:03:24Z

See also: "Newag at it again." July 28, 2025 article.

← Older revision		Revision as of 15:03, 1 March 2026
Line 35:		Line 35:

	==References==		==References==
	{{Reflist}}		{{Reflist}}23. https://es.ifixit.com/News/112008/polish-train-maker-is-suing-the-hackers-who-exposed-its-anti-repair-tricks
	[[Category:{{PAGENAME}}]]		[[Category:{{PAGENAME}}]]

Bananabot: Added archive URLs for 3 citation(s) using CRWCitationBot

2026-02-23T12:45:40Z

Added archive URLs for 3 citation(s) using CRWCitationBot

← Older revision		Revision as of 12:45, 23 February 2026
Line 8:		Line 8:
	\|Logo=Newag Group logo.svg}}		\|Logo=Newag Group logo.svg}}

	'''{{wplink\|Newag\|Newag S.A.}}''' (pronounced ''"nevag"'') is a publicly traded<ref>https://www.gpw.pl/company-factsheet?isin=PLNEWAG00012</ref> Polish company based in {{wplink\|Nowy Sącz}} that specializes in the production, maintenance, and modernization of railway rolling stock.<ref>https://www.newag.pl/en/company/history/ ([http://web.archive.org/web/20250120130623/https://www.newag.pl/en/company/history/ Archived])</ref> Their most notable products include: the families of electric locomotives '''Griffin'''<ref>https://www.newag.pl/en/offer/griffin/ ([http://web.archive.org/web/20250125122434/https://www.newag.pl/en/offer/griffin/ Archived])</ref><ref>https://twojsacz.pl/kolejne-lokomotywy-griffin-z-nowego-sacza-trafily-do-pkp-intercity/ ([http://web.archive.org/web/20251024145656/https://twojsacz.pl/kolejne-lokomotywy-griffin-z-nowego-sacza-trafily-do-pkp-intercity/ Archived])</ref> and '''Dragon''',<ref>https://www.newag.pl/en/offer/dragon/ ([http://web.archive.org/web/20250209153246/https://www.newag.pl/en/offer/dragon/ Archived])</ref> as well as the '''Impuls''' family of multiple units.<ref>https://www.newag.pl/en/offer/impuls/</ref>		'''{{wplink\|Newag\|Newag S.A.}}''' (pronounced ''"nevag"'') is a publicly traded<ref>https://www.gpw.pl/company-factsheet?isin=PLNEWAG00012</ref> Polish company based in {{wplink\|Nowy Sącz}} that specializes in the production, maintenance, and modernization of railway rolling stock.<ref>https://www.newag.pl/en/company/history/ ([http://web.archive.org/web/20250120130623/https://www.newag.pl/en/company/history/ Archived])</ref> Their most notable products include: the families of electric locomotives '''Griffin'''<ref>https://www.newag.pl/en/offer/griffin/ ([http://web.archive.org/web/20250125122434/https://www.newag.pl/en/offer/griffin/ Archived])</ref><ref>https://twojsacz.pl/kolejne-lokomotywy-griffin-z-nowego-sacza-trafily-do-pkp-intercity/ ([http://web.archive.org/web/20251024145656/https://twojsacz.pl/kolejne-lokomotywy-griffin-z-nowego-sacza-trafily-do-pkp-intercity/ Archived])</ref> and '''Dragon''',<ref>https://www.newag.pl/en/offer/dragon/ ([http://web.archive.org/web/20250209153246/https://www.newag.pl/en/offer/dragon/ Archived])</ref> as well as the '''Impuls''' family of multiple units.<ref>https://www.newag.pl/en/offer/impuls/ ([http://web.archive.org/web/20250112104016/https://www.newag.pl/en/offer/impuls/ Archived])</ref>

	==Anti-competitive practices==		==Anti-competitive practices==
	In 2022, a regional Polish train operator commissioned a third-party repair service - '''SPS''' - to complete maintenance on Impuls trains<ref name=":0">https://badcyber.com/dieselgate-but-for-trains-some-heavyweight-hardware-hacking/ ([http://web.archive.org/web/20260222173559/https://badcyber.com/dieselgate-but-for-trains-some-heavyweight-hardware-hacking/ Archived])</ref>. The repair service could not, however, bring the trains to move despite them being in working order. This, alongside accusations of "interfering with the trains' security systems"<ref>https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=227 ([http://web.archive.org/web/20251231190317/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref> by Newag caused a tarnishing of SPS's reputation.<ref>https://www.youtube.com/watch?v=IXlYjgVpVIg ([https://preservetube.com/watch?v=IXlYjgVpVIg Archived])</ref><ref name=":0" /> In 2023, however, a group of Polish cybersecurity experts from Dragon Sector,<ref name=":0" /><ref>https://dragonsector.pl/ ([http://web.archive.org/web/20251228081649/https://dragonsector.pl/ Archived])</ref> after being hired by SPS, disclosed findings that a number of lock-up mechanisms were placed in the trains' software.<ref>https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure#t=691 ([http://web.archive.org/web/20260202053339/https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure Archived])</ref><ref>https://social.hackerspace.pl/@q3k/111528162462505087</ref><ref>https://arstechnica.com/tech-policy/2023/12/manufacturer-deliberately-bricked-trains-repaired-by-competitors-hackers-find/?utm_source=chatgpt.com ([http://web.archive.org/web/20251105052028/https://arstechnica.com/tech-policy/2023/12/manufacturer-deliberately-bricked-trains-repaired-by-competitors-hackers-find/?utm_source=chatgpt.com Archived])</ref> These allegedly include:		In 2022, a regional Polish train operator commissioned a third-party repair service - '''SPS''' - to complete maintenance on Impuls trains<ref name=":0">https://badcyber.com/dieselgate-but-for-trains-some-heavyweight-hardware-hacking/ ([http://web.archive.org/web/20260222173559/https://badcyber.com/dieselgate-but-for-trains-some-heavyweight-hardware-hacking/ Archived])</ref>. The repair service could not, however, bring the trains to move despite them being in working order. This, alongside accusations of "interfering with the trains' security systems"<ref>https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=227 ([http://web.archive.org/web/20251231190317/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref> by Newag caused a tarnishing of SPS's reputation.<ref>https://www.youtube.com/watch?v=IXlYjgVpVIg ([https://preservetube.com/watch?v=IXlYjgVpVIg Archived])</ref><ref name=":0" /> In 2023, however, a group of Polish cybersecurity experts from Dragon Sector,<ref name=":0" /><ref>https://dragonsector.pl/ ([http://web.archive.org/web/20251228081649/https://dragonsector.pl/ Archived])</ref> after being hired by SPS, disclosed findings that a number of lock-up mechanisms were placed in the trains' software.<ref>https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure#t=691 ([http://web.archive.org/web/20260202053339/https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure Archived])</ref><ref>https://social.hackerspace.pl/@q3k/111528162462505087 ([http://web.archive.org/web/20260129142943/https://social.hackerspace.pl/@q3k/111528162462505087 Archived])</ref><ref>https://arstechnica.com/tech-policy/2023/12/manufacturer-deliberately-bricked-trains-repaired-by-competitors-hackers-find/?utm_source=chatgpt.com ([http://web.archive.org/web/20251105052028/https://arstechnica.com/tech-policy/2023/12/manufacturer-deliberately-bricked-trains-repaired-by-competitors-hackers-find/?utm_source=chatgpt.com Archived])</ref> These allegedly include:

	#'''A "lack of movement timer"''', which would disable the train after it has not moved for a set amount of time.<ref>https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1625 ([http://web.archive.org/web/20260218204654/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref>		#'''A "lack of movement timer"''', which would disable the train after it has not moved for a set amount of time.<ref>https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1625 ([http://web.archive.org/web/20260218204654/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref>
	#'''Geofencing''' - the train would disable itself once it detects that it is in one of Newag's competitors' workshops.<ref>[https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1685 https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1713] ([http://web.archive.org/web/20260218204654/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref><ref name=":1">https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure#t=1293 ([http://web.archive.org/web/20260116035645/https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure Archived])</ref><ref>https://social.hackerspace.pl/@q3k/111528162462505087</ref>		#'''Geofencing''' - the train would disable itself once it detects that it is in one of Newag's competitors' workshops.<ref>[https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1685 https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1713] ([http://web.archive.org/web/20260218204654/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref><ref name=":1">https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure#t=1293 ([http://web.archive.org/web/20260116035645/https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure Archived])</ref><ref>https://social.hackerspace.pl/@q3k/111528162462505087 ([http://web.archive.org/web/20260129142943/https://social.hackerspace.pl/@q3k/111528162462505087 Archived])</ref>
	#'''Serializing''' the CAN bus extension device of the train, disabling it if a change in the CAN's serial number is detected.<ref>https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1814 ([http://web.archive.org/web/20251231190317/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref>		#'''Serializing''' the CAN bus extension device of the train, disabling it if a change in the CAN's serial number is detected.<ref>https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1814 ([http://web.archive.org/web/20251231190317/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref>
	#'''A date check,''' which would cause the train to lock up if it was not serviced by Newag before the 21st of November 2022, claiming compressor failure.<ref name=":2">https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1891 ([http://web.archive.org/web/20260218204654/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref>		#'''A date check,''' which would cause the train to lock up if it was not serviced by Newag before the 21st of November 2022, claiming compressor failure.<ref name=":2">https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1891 ([http://web.archive.org/web/20260218204654/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref>

Bananabot: Added archive URLs for 18 citation(s) using CRWCitationBot

2026-02-23T06:37:32Z

Added archive URLs for 18 citation(s) using CRWCitationBot

← Older revision		Revision as of 06:37, 23 February 2026
Line 8:		Line 8:
	\|Logo=Newag Group logo.svg}}		\|Logo=Newag Group logo.svg}}

	'''{{wplink\|Newag\|Newag S.A.}}''' (pronounced ''"nevag"'') is a publicly traded<ref>https://www.gpw.pl/company-factsheet?isin=PLNEWAG00012</ref> Polish company based in {{wplink\|Nowy Sącz}} that specializes in the production, maintenance, and modernization of railway rolling stock.<ref>https://www.newag.pl/en/company/history/</ref> Their most notable products include: the families of electric locomotives '''Griffin'''<ref>https://www.newag.pl/en/offer/griffin/</ref><ref>https://twojsacz.pl/kolejne-lokomotywy-griffin-z-nowego-sacza-trafily-do-pkp-intercity/</ref> and '''Dragon''',<ref>https://www.newag.pl/en/offer/dragon/</ref> as well as the '''Impuls''' family of multiple units.<ref>https://www.newag.pl/en/offer/impuls/</ref>		'''{{wplink\|Newag\|Newag S.A.}}''' (pronounced ''"nevag"'') is a publicly traded<ref>https://www.gpw.pl/company-factsheet?isin=PLNEWAG00012</ref> Polish company based in {{wplink\|Nowy Sącz}} that specializes in the production, maintenance, and modernization of railway rolling stock.<ref>https://www.newag.pl/en/company/history/ ([http://web.archive.org/web/20250120130623/https://www.newag.pl/en/company/history/ Archived])</ref> Their most notable products include: the families of electric locomotives '''Griffin'''<ref>https://www.newag.pl/en/offer/griffin/ ([http://web.archive.org/web/20250125122434/https://www.newag.pl/en/offer/griffin/ Archived])</ref><ref>https://twojsacz.pl/kolejne-lokomotywy-griffin-z-nowego-sacza-trafily-do-pkp-intercity/ ([http://web.archive.org/web/20251024145656/https://twojsacz.pl/kolejne-lokomotywy-griffin-z-nowego-sacza-trafily-do-pkp-intercity/ Archived])</ref> and '''Dragon''',<ref>https://www.newag.pl/en/offer/dragon/ ([http://web.archive.org/web/20250209153246/https://www.newag.pl/en/offer/dragon/ Archived])</ref> as well as the '''Impuls''' family of multiple units.<ref>https://www.newag.pl/en/offer/impuls/</ref>

	==Anti-competitive practices==		==Anti-competitive practices==
	In 2022, a regional Polish train operator commissioned a third-party repair service - '''SPS''' - to complete maintenance on Impuls trains<ref name=":0">https://badcyber.com/dieselgate-but-for-trains-some-heavyweight-hardware-hacking/</ref>. The repair service could not, however, bring the trains to move despite them being in working order. This, alongside accusations of "interfering with the trains' security systems"<ref>https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=227</ref> by Newag caused a tarnishing of SPS's reputation.<ref>https://www.youtube.com/watch?v=IXlYjgVpVIg</ref><ref name=":0" /> In 2023, however, a group of Polish cybersecurity experts from Dragon Sector,<ref name=":0" /><ref>https://dragonsector.pl/</ref> after being hired by SPS, disclosed findings that a number of lock-up mechanisms were placed in the trains' software.<ref>https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure#t=691</ref><ref>https://social.hackerspace.pl/@q3k/111528162462505087</ref><ref>https://arstechnica.com/tech-policy/2023/12/manufacturer-deliberately-bricked-trains-repaired-by-competitors-hackers-find/?utm_source=chatgpt.com</ref> These allegedly include:		In 2022, a regional Polish train operator commissioned a third-party repair service - '''SPS''' - to complete maintenance on Impuls trains<ref name=":0">https://badcyber.com/dieselgate-but-for-trains-some-heavyweight-hardware-hacking/ ([http://web.archive.org/web/20260222173559/https://badcyber.com/dieselgate-but-for-trains-some-heavyweight-hardware-hacking/ Archived])</ref>. The repair service could not, however, bring the trains to move despite them being in working order. This, alongside accusations of "interfering with the trains' security systems"<ref>https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=227 ([http://web.archive.org/web/20251231190317/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref> by Newag caused a tarnishing of SPS's reputation.<ref>https://www.youtube.com/watch?v=IXlYjgVpVIg ([https://preservetube.com/watch?v=IXlYjgVpVIg Archived])</ref><ref name=":0" /> In 2023, however, a group of Polish cybersecurity experts from Dragon Sector,<ref name=":0" /><ref>https://dragonsector.pl/ ([http://web.archive.org/web/20251228081649/https://dragonsector.pl/ Archived])</ref> after being hired by SPS, disclosed findings that a number of lock-up mechanisms were placed in the trains' software.<ref>https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure#t=691 ([http://web.archive.org/web/20260202053339/https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure Archived])</ref><ref>https://social.hackerspace.pl/@q3k/111528162462505087</ref><ref>https://arstechnica.com/tech-policy/2023/12/manufacturer-deliberately-bricked-trains-repaired-by-competitors-hackers-find/?utm_source=chatgpt.com ([http://web.archive.org/web/20251105052028/https://arstechnica.com/tech-policy/2023/12/manufacturer-deliberately-bricked-trains-repaired-by-competitors-hackers-find/?utm_source=chatgpt.com Archived])</ref> These allegedly include:

	#'''A "lack of movement timer"''', which would disable the train after it has not moved for a set amount of time.<ref>https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1625</ref>		#'''A "lack of movement timer"''', which would disable the train after it has not moved for a set amount of time.<ref>https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1625 ([http://web.archive.org/web/20260218204654/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref>
	#'''Geofencing''' - the train would disable itself once it detects that it is in one of Newag's competitors' workshops.<ref>[https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1685 https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1713]</ref><ref name=":1">https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure#t=1293</ref><ref>https://social.hackerspace.pl/@q3k/111528162462505087</ref>		#'''Geofencing''' - the train would disable itself once it detects that it is in one of Newag's competitors' workshops.<ref>[https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1685 https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1713] ([http://web.archive.org/web/20260218204654/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref><ref name=":1">https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure#t=1293 ([http://web.archive.org/web/20260116035645/https://media.ccc.de/v/38c3-we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure Archived])</ref><ref>https://social.hackerspace.pl/@q3k/111528162462505087</ref>
	#'''Serializing''' the CAN bus extension device of the train, disabling it if a change in the CAN's serial number is detected.<ref>https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1814</ref>		#'''Serializing''' the CAN bus extension device of the train, disabling it if a change in the CAN's serial number is detected.<ref>https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1814 ([http://web.archive.org/web/20251231190317/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref>
	#'''A date check,''' which would cause the train to lock up if it was not serviced by Newag before the 21st of November 2022, claiming compressor failure.<ref name=":2">https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1891</ref>		#'''A date check,''' which would cause the train to lock up if it was not serviced by Newag before the 21st of November 2022, claiming compressor failure.<ref name=":2">https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains#t=1891 ([http://web.archive.org/web/20260218204654/https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains Archived])</ref>

	The geofencing mechanism has later been shown to allegedly be the cause of disruptions on a connection serviced by Impuls trains, having them disable themselves when passing near one of the geofenced locations.<ref name=":1" /> The date check, meanwhile, was poorly implemented, and would only cause the train to be locked from 11/21 to 12/1 and from 12/21 to 1/1 each year after 2021.<ref name=":2" /><ref>https://wiadomosci.onet.pl/kraj/skandal-na-kolei-pociag-newagu-stanal-bo-znowu-nadszedl-21-grudnia/41mdspf?utm_source=www.qwant.com_viasg_wiadomosci&utm_medium=referal&utm_campaign=leo_automatic&srcc=undefined&utm_v=2</ref><ref name=":3">https://www.rynek-kolejowy.pl/wiadomosci/impuls-zepsul-sie-z-powodu-21-grudnia-mamy-stanowisko-newagu--116695.html</ref>		The geofencing mechanism has later been shown to allegedly be the cause of disruptions on a connection serviced by Impuls trains, having them disable themselves when passing near one of the geofenced locations.<ref name=":1" /> The date check, meanwhile, was poorly implemented, and would only cause the train to be locked from 11/21 to 12/1 and from 12/21 to 1/1 each year after 2021.<ref name=":2" /><ref>https://wiadomosci.onet.pl/kraj/skandal-na-kolei-pociag-newagu-stanal-bo-znowu-nadszedl-21-grudnia/41mdspf?utm_source=www.qwant.com_viasg_wiadomosci&utm_medium=referal&utm_campaign=leo_automatic&srcc=undefined&utm_v=2 ([http://web.archive.org/web/20251103062116/https://wiadomosci.onet.pl/kraj/skandal-na-kolei-pociag-newagu-stanal-bo-znowu-nadszedl-21-grudnia/41mdspf?utm_source=www.qwant.com_viasg_wiadomosci&utm_medium=referal&utm_campaign=leo_automatic&srcc=undefined&utm_v=2 Archived])</ref><ref name=":3">https://www.rynek-kolejowy.pl/wiadomosci/impuls-zepsul-sie-z-powodu-21-grudnia-mamy-stanowisko-newagu--116695.html ([http://web.archive.org/web/20260130155751/https://www.rynek-kolejowy.pl/wiadomosci/impuls-zepsul-sie-z-powodu-21-grudnia-mamy-stanowisko-newagu--116695.html Archived])</ref>

	Newag firmly denies any claims of wrongdoing, releasing multiple statements<ref name=":3" /> claiming the findings of Dragon Sector, as well as reports from media outlets, are "slander" from their competition, "which is conducting an illegal campaign of black PR against us."<ref name=":4">https://www.railjournal.com/fleet/newag-comes-out-fighting-in-claims-over-foul-play/</ref> Newag claims they "have not, do not and will not introduce" any software locks.<ref name=":4" /> The statements also implied an attempt to "undermine Newag's market position".<ref name=":3" />		Newag firmly denies any claims of wrongdoing, releasing multiple statements<ref name=":3" /> claiming the findings of Dragon Sector, as well as reports from media outlets, are "slander" from their competition, "which is conducting an illegal campaign of black PR against us."<ref name=":4">https://www.railjournal.com/fleet/newag-comes-out-fighting-in-claims-over-foul-play/ ([http://web.archive.org/web/20260216171632/https://www.railjournal.com/fleet/newag-comes-out-fighting-in-claims-over-foul-play/ Archived])</ref> Newag claims they "have not, do not and will not introduce" any software locks.<ref name=":4" /> The statements also implied an attempt to "undermine Newag's market position".<ref name=":3" />

	The investigation against Newag is still on-going.		The investigation against Newag is still on-going.

AnotherConsumerRightsPerson: Removed dead link.

2025-10-05T10:23:19Z

Removed dead link.

← Older revision		Revision as of 10:23, 5 October 2025
Line 25:		Line 25:

	==Incidents==		==Incidents==
	===2023 Anti-competition GPS and time based software lockups [https://zaufanatrzeciastrona.pl/post/o-trzech-takich-co-zhakowali-prawdziwy-pociag-a-nawet-30-pociagow/ <nowiki>[1][pl]</nowiki>~~] [[Newag backdoor]~~]===		===2023 Anti-competition GPS and time based software lockups [https://zaufanatrzeciastrona.pl/post/o-trzech-takich-co-zhakowali-prawdziwy-pociag-a-nawet-30-pociagow/ <nowiki>[1][pl]</nowiki>]===
	In December of 2023 white-hat hacker group Dragon Sector revealed their findings regarding Newag Impuls rolling stock malfunctions. They were employed by SPS Mieczkowski (Serwis Pojazdów Szynowych Mieczkowski) to investigate issues they were having regarding repair of Newag Impuls trains. After getting access to debug port, copying contents of management computer and reverse engineering the result code, they found multiple flags that were tripped from zeroed values. After correcting those and reinserting the computer to the train it have returned to normal function. Then they proceed with analysis of the code. In their findings they presented multiple instances of GPS coordinates that were pointing to the competing service companies. After detecting extended stay at these coordinates (10 days) the train were to lock up and the only repair option was to send the train for service to producer facility. In the code of different computers the group also found parts serialization and arbitrary timed component malfunction. After these findings investigation and court case was initiated against the company and as of August 2025 they have not yet reached the conclusion.		In December of 2023 white-hat hacker group Dragon Sector revealed their findings regarding Newag Impuls rolling stock malfunctions. They were employed by SPS Mieczkowski (Serwis Pojazdów Szynowych Mieczkowski) to investigate issues they were having regarding repair of Newag Impuls trains. After getting access to debug port, copying contents of management computer and reverse engineering the result code, they found multiple flags that were tripped from zeroed values. After correcting those and reinserting the computer to the train it have returned to normal function. Then they proceed with analysis of the code. In their findings they presented multiple instances of GPS coordinates that were pointing to the competing service companies. After detecting extended stay at these coordinates (10 days) the train were to lock up and the only repair option was to send the train for service to producer facility. In the code of different computers the group also found parts serialization and arbitrary timed component malfunction. After these findings investigation and court case was initiated against the company and as of August 2025 they have not yet reached the conclusion.