Ski Lift in Austria Controllable Over the Internet

Thu, Apr 26, 2018

Authorities in Innsbruck, Austria have shut down the Patscherkofelbahn ski lift after two security researchers managed to gain access to the controls for operating the lift.

Settings for controlling the ski lift’s speed, the distance between cable cars, and cable tension were all exposed in the open, along with logs and other data.

Of course the big question is: How did the researchers get access? After all, a transportation “vehicle” carrying thousands of passengers a day is reasonably secured against tampering from the outside, right?

The two were surprised because there wasn’t any login screen to prevent Internet user from accessing and interacting with the HMI [Human Machine Interface] panel.

Oh, ok.