Panel: Responsible Disclosure And (Legal) Risks For Security Researchers
summary
Reverse engineering of train software reveals trains refuse service by detecting hardcoded GPS coordinates that list competitor workshops and a hidden manufacturer backdoor fixed by a driver-panel button sequence; researchers unlock trains, report to Polish prosecutors (case opened after public disclosure last December, offices raided weeks later) and face legal threats. European law discussion cites a German conviction for using a plaintext credential found in client software resulting in a €3,000 fine, and calls for harmonized security‑research exceptions.
AI-written summary · about
chapters (11)
- 0:00Introduction to panel
- 1:32Train manufacturer backdoor case
- 5:28German legal risks for researchers
- 10:30Manufacturer perspective on reverse engineering
- 15:00EU legal changes ahead
- 23:24Ethical disclosure and GDPR concerns
- 26:58Compliance challenges for manufacturers
- 30:09Future wishes for legal reform
- 32:38Legal community engagement in lawmaking
- 34:22How to participate in legal reforms
- 36:51Company culture vs regulation in security
related talks
42mPanel: The Right To Secure; What, Who, How And Why!
35mPatterns and Anti-Patterns in Embedded Development: What Security Incidents...
52mWhistleblowing 101
36mPrivacy, Consent and Security Within Modern Applications
41mPanel: Tackling Automotive Hardware Vulnerabilities- 35mPatterns and Anti-Patterns in Embedded Development: What Security Incidents...
01h 04mYour Car “Knows” You: Security in Connected Vehicles & Roadway Infrastructure
25mEverything Old Is New Again: Legal Restrictions on...