A city had a rude awakening when it tested its electric buses for security flaws.
Some cities have gone all-in on their dedication to renewable energy and electric public transportation, but discovering that a jurisdiction does not actually control its own public property likely was not part of the idea.
'In theory, the bus could therefore be stopped or rendered unusable.'
This turned out to be exactly the case when Ruter — the public transportation authority for Oslo, Norway — decided to run tests on its new Chinese electric buses.
Approximately 300 e-buses from Chinese company Yutong made their way to Norway earlier this year, with outlet China Buses calling it a "core breakthrough" in Chinese brands' global reach.
Yutong offers at least 15 different types of electric buses ranging from 60- to 120-passenger capacity.
As reported by Norwegian newspaper Aftenposten on Tuesday, Ruter conducted secret testing on some of its electric buses over the summer. It decided to look into one bus from a European manufacturer, as well as another from Yutong, to address cybersecurity risks.
The test results were shocking.
Photo by Li An/Xinhua via Getty Images
Investigators discovered that the Chinese-built buses could be controlled remotely from their homeland, unlike the European vehicles.
Ruter reported that the Chinese can access software updates, diagnostics, and battery systems remotely, and, "In theory, the bus could therefore be stopped or rendered unusable by the manufacturer."
The details were described by Arild Tjomsland, who helped conduct the tests. Tjomsland is a special adviser at the University of South-Eastern Norway, according to Turkish website AA.
"The Chinese bus can be stopped, turned off, or receive updates that can destroy the technology that the bus needs to operate normally," Tjomsland reportedly said. He additionally noted that while the buses could not be steered remotely, they could still be shut down and used as leverage by bad actors.
Pravda Norway described the situation as the Chinese government essentially being able to decommission the buses at any time.
Norway's transport minister praised Ruter for completing the tests and said the government would initiate a risk assessment related to countries "with which Norway does not have security policy cooperation."
Ruter's CEO, Bernt Reitan Jenssen, said the company plans on working with authorities to strengthen the cybersecurity surrounding its public infrastructure.
"We need to involve all competent authorities that deal with cybersecurity, stand together, and draw on cutting-edge expertise," Jenssen said.
As a temporary fix, Ruter revealed the buses can be disconnected from the internet by removing their SIM cards to assume "local control should the need arise."
There was no word as to whether the SIM cards are upsized for buses.
https://www.theblaze.com/news/norway-electric-buses-controlled-china
Some cities have gone all-in on their dedication to renewable energy and electric public transportation, but discovering that a jurisdiction does not actually control its own public property likely was not part of the idea.
'In theory, the bus could therefore be stopped or rendered unusable.'
This turned out to be exactly the case when Ruter — the public transportation authority for Oslo, Norway — decided to run tests on its new Chinese electric buses.
Approximately 300 e-buses from Chinese company Yutong made their way to Norway earlier this year, with outlet China Buses calling it a "core breakthrough" in Chinese brands' global reach.
Yutong offers at least 15 different types of electric buses ranging from 60- to 120-passenger capacity.
As reported by Norwegian newspaper Aftenposten on Tuesday, Ruter conducted secret testing on some of its electric buses over the summer. It decided to look into one bus from a European manufacturer, as well as another from Yutong, to address cybersecurity risks.
The test results were shocking.
Photo by Li An/Xinhua via Getty Images
Investigators discovered that the Chinese-built buses could be controlled remotely from their homeland, unlike the European vehicles.
Ruter reported that the Chinese can access software updates, diagnostics, and battery systems remotely, and, "In theory, the bus could therefore be stopped or rendered unusable by the manufacturer."
The details were described by Arild Tjomsland, who helped conduct the tests. Tjomsland is a special adviser at the University of South-Eastern Norway, according to Turkish website AA.
"The Chinese bus can be stopped, turned off, or receive updates that can destroy the technology that the bus needs to operate normally," Tjomsland reportedly said. He additionally noted that while the buses could not be steered remotely, they could still be shut down and used as leverage by bad actors.
Pravda Norway described the situation as the Chinese government essentially being able to decommission the buses at any time.
Norway's transport minister praised Ruter for completing the tests and said the government would initiate a risk assessment related to countries "with which Norway does not have security policy cooperation."
Ruter's CEO, Bernt Reitan Jenssen, said the company plans on working with authorities to strengthen the cybersecurity surrounding its public infrastructure.
"We need to involve all competent authorities that deal with cybersecurity, stand together, and draw on cutting-edge expertise," Jenssen said.
As a temporary fix, Ruter revealed the buses can be disconnected from the internet by removing their SIM cards to assume "local control should the need arise."
There was no word as to whether the SIM cards are upsized for buses.
https://www.theblaze.com/news/norway-electric-buses-controlled-china
