We’ve not been trained for this: life after the Newag DRM disclosure

You've probably already heard the story: we got contracted to analyze a bunch of trains breaking down after being serviced by independent workshops. We reverse engineered them and found code which simulated failures when they detected servicing attempts. We presented our findings at 37C3... and then shit hit the fan. This talk will be an update about what happened since that presentation. We’ll talk about parliamentary workgroup sessions with dirty train bathroom photos, 140-page lawsuits, how it’s like to repeatedly explain reverse engineering concepts to journalists and much more.