pere.pagekite.me Git - homepage.git/blob

   1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
   2           "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
   3 <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr">
   4   <head>
   5     <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
   6     <title>Petter Reinholdtsen: Fortsatt ingen sikkerhetsoppdateringer for billettautomatene til kollektivtrafikken i Oslo?</title>
   7     <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css" />
   8     <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/vim.css" />
   9
  10
  11   </head>
  12   <body>
  13     <div class="title">
  14  <h1>
  15      <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
  16
  17  </h1>
  18
  19 </div>
  20
  21
  22     <div class="entry">
  23       <div class="title">Fortsatt ingen sikkerhetsoppdateringer for billettautomatene til kollektivtrafikken i Oslo?</div>
  24       <div class="date">29th November 2016</div>
  25       <div class="body"><p>For fire og et halvt år siden lot jeg meg overraske over at Ruters
  26 billettautomater for kollektivtrafikken i Oslo kjørte
  27 <a href="http://en.wikipedia.org/wiki/Windows_2000">Windows 2000
  28 Professional</a>, et og et halvt år etter at Microsoft hadde gitt
  29 beskjed om at det ikke lenger kom sikkerhetsoppdateringer til
  30 systemet.  Støtten fra Microsoft
  31 <a href="http://support.microsoft.com/lifecycle/search/?sort=PN&alpha=Windows+2000&Filter=FilterNO">tok
  32 slutt 2010-07-13 i følge Wikipedia og Microsoft selv</a>.</p>
  33
  34 <p>For fem dager siden passerte jeg på nytt en slik billettautomat som
  35 hadde brutt sammen, og den annonserte fortsatt at den kjører Windows
  36 2000 Professional, nå mer enn seks år siden Microsoft sluttet å komme
  37 med sikkerhetspatcher til produktet.  Sikret meg et bilde av
  38 krasjmeldingen på skjermen.
  39
  40 <p><a href="http://people.skolelinux.org/pere/blog/images/2016-11-29-ruter-win2000pro.jpeg"><img width="40%" src="http://people.skolelinux.org/pere/blog/images/2016-11-29-ruter-win2000pro.jpeg" alt="[foto av billettautomat]"></a></p>
  41
  42 <p>Mon tro om de mangler kildekoden til systemet som kjører på
  43 automaten, og dermed ikke uten videre kan oppgradere?</p>
  44
  45 <p>Jeg ser jo fra
  46 <a href="https://www.mimesbronn.no/request/ruterbillett_app">en
  47 innsynshenvendelse om kildekoden til billett-Appen til Ruter på Mimes
  48 brønn</a> at Ruter tilsynelatende ikke legger sikkerheten i
  49 sertifikater, nøkler og passord, men i stedet baserer seg på at
  50 logikken i programvaren holdes hemmelig. Det borger ikke godt for
  51 sikkerheten i Ruters datasystemer.
  52
  53 <p>Det er nå tre og et halvt år siden
  54 <a href="http://www.aftenposten.no/osloby/Ingen-nye-Ruter-automater-for-sommeren-118460b.html">Ruter
  55 fortalte Aftenposten at nye automater ble minst seks måneder
  56 forsinket</a>, da leverandøren ikke hadde god nok kontroll.  Det kan
  57 virke som om leverandøren ikke er alene om å ikke ha god nok
  58 kontroll.</p>
  59
  60 <p>Bildet er tilgjengelig for bruk med bruksvilkårene til
  61 <a href="http://creativecommons.org/licenses/by/3.0/no/">Creative
  62 Commons Navngivelse 3.0 Norge (CC BY 3.0)</a>.</p>
  63 </div>
  64
  65       <div class="tags">Tags: <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ruter">ruter</a>.</div>
  66
  67
  68     </div>
  69
  70
  71
  72
  73     <div id="sidebar">
  74
  75
  76
  77 <h2>Archive</h2>
  78 <ul>
  79
  80 <li>2016
  81 <ul>
  82
  83 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/01/">January (3)</a></li>
  84
  85 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/02/">February (2)</a></li>
  86
  87 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/03/">March (3)</a></li>
  88
  89 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/04/">April (8)</a></li>
  90
  91 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/05/">May (8)</a></li>
  92
  93 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/06/">June (2)</a></li>
  94
  95 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/07/">July (2)</a></li>
  96
  97 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/08/">August (5)</a></li>
  98
  99 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/09/">September (2)</a></li>
 100
 101 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/10/">October (3)</a></li>
 102
 103 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/11/">November (8)</a></li>
 104
 105 </ul></li>
 106
 107 <li>2015
 108 <ul>
 109
 110 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/01/">January (7)</a></li>
 111
 112 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/02/">February (6)</a></li>
 113
 114 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/03/">March (1)</a></li>
 115
 116 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/04/">April (4)</a></li>
 117
 118 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/05/">May (3)</a></li>
 119
 120 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/06/">June (4)</a></li>
 121
 122 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/07/">July (6)</a></li>
 123
 124 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/08/">August (2)</a></li>
 125
 126 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/09/">September (2)</a></li>
 127
 128 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/10/">October (9)</a></li>
 129
 130 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/11/">November (6)</a></li>
 131
 132 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/12/">December (3)</a></li>
 133
 134 </ul></li>
 135
 136 <li>2014
 137 <ul>
 138
 139 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/01/">January (2)</a></li>
 140
 141 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/02/">February (3)</a></li>
 142
 143 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/03/">March (8)</a></li>
 144
 145 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/04/">April (7)</a></li>
 146
 147 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/05/">May (1)</a></li>
 148
 149 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/06/">June (2)</a></li>
 150
 151 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/07/">July (2)</a></li>
 152
 153 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/08/">August (2)</a></li>
 154
 155 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/09/">September (5)</a></li>
 156
 157 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/10/">October (6)</a></li>
 158
 159 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/11/">November (3)</a></li>
 160
 161 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/12/">December (5)</a></li>
 162
 163 </ul></li>
 164
 165 <li>2013
 166 <ul>
 167
 168 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/01/">January (11)</a></li>
 169
 170 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/02/">February (9)</a></li>
 171
 172 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/03/">March (9)</a></li>
 173
 174 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/04/">April (6)</a></li>
 175
 176 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/05/">May (9)</a></li>
 177
 178 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/06/">June (10)</a></li>
 179
 180 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/07/">July (7)</a></li>
 181
 182 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/08/">August (3)</a></li>
 183
 184 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/09/">September (5)</a></li>
 185
 186 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/10/">October (7)</a></li>
 187
 188 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/11/">November (9)</a></li>
 189
 190 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/12/">December (3)</a></li>
 191
 192 </ul></li>
 193
 194 <li>2012
 195 <ul>
 196
 197 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/01/">January (7)</a></li>
 198
 199 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/02/">February (10)</a></li>
 200
 201 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/03/">March (17)</a></li>
 202
 203 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/04/">April (12)</a></li>
 204
 205 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/05/">May (12)</a></li>
 206
 207 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/06/">June (20)</a></li>
 208
 209 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/07/">July (17)</a></li>
 210
 211 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/08/">August (6)</a></li>
 212
 213 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/09/">September (9)</a></li>
 214
 215 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/10/">October (17)</a></li>
 216
 217 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/11/">November (10)</a></li>
 218
 219 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/12/">December (7)</a></li>
 220
 221 </ul></li>
 222
 223 <li>2011
 224 <ul>
 225
 226 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/01/">January (16)</a></li>
 227
 228 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/02/">February (6)</a></li>
 229
 230 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/03/">March (6)</a></li>
 231
 232 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/04/">April (7)</a></li>
 233
 234 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/05/">May (3)</a></li>
 235
 236 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/06/">June (2)</a></li>
 237
 238 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/07/">July (7)</a></li>
 239
 240 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/08/">August (6)</a></li>
 241
 242 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/09/">September (4)</a></li>
 243
 244 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/10/">October (2)</a></li>
 245
 246 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/11/">November (3)</a></li>
 247
 248 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/12/">December (1)</a></li>
 249
 250 </ul></li>
 251
 252 <li>2010
 253 <ul>
 254
 255 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
 256
 257 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
 258
 259 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
 260
 261 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
 262
 263 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
 264
 265 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
 266
 267 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (12)</a></li>
 268
 269 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/08/">August (13)</a></li>
 270
 271 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/09/">September (7)</a></li>
 272
 273 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/10/">October (9)</a></li>
 274
 275 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/11/">November (13)</a></li>
 276
 277 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/12/">December (12)</a></li>
 278
 279 </ul></li>
 280
 281 <li>2009
 282 <ul>
 283
 284 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
 285
 286 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
 287
 288 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
 289
 290 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
 291
 292 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
 293
 294 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
 295
 296 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
 297
 298 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
 299
 300 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
 301
 302 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
 303
 304 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
 305
 306 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
 307
 308 </ul></li>
 309
 310 <li>2008
 311 <ul>
 312
 313 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
 314
 315 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
 316
 317 </ul></li>
 318
 319 </ul>
 320
 321
 322
 323 <h2>Tags</h2>
 324 <ul>
 325
 326  <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (13)</a></li>
 327
 328  <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
 329
 330  <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
 331
 332  <li><a href="http://people.skolelinux.org/pere/blog/tags/bankid">bankid (4)</a></li>
 333
 334  <li><a href="http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (9)</a></li>
 335
 336  <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (16)</a></li>
 337
 338  <li><a href="http://people.skolelinux.org/pere/blog/tags/bsa">bsa (2)</a></li>
 339
 340  <li><a href="http://people.skolelinux.org/pere/blog/tags/chrpath">chrpath (2)</a></li>
 341
 342  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (141)</a></li>
 343
 344  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (158)</a></li>
 345
 346  <li><a href="http://people.skolelinux.org/pere/blog/tags/digistan">digistan (10)</a></li>
 347
 348  <li><a href="http://people.skolelinux.org/pere/blog/tags/dld">dld (16)</a></li>
 349
 350  <li><a href="http://people.skolelinux.org/pere/blog/tags/docbook">docbook (23)</a></li>
 351
 352  <li><a href="http://people.skolelinux.org/pere/blog/tags/drivstoffpriser">drivstoffpriser (4)</a></li>
 353
 354  <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (333)</a></li>
 355
 356  <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (23)</a></li>
 357
 358  <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (12)</a></li>
 359
 360  <li><a href="http://people.skolelinux.org/pere/blog/tags/freeculture">freeculture (29)</a></li>
 361
 362  <li><a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox (9)</a></li>
 363
 364  <li><a href="http://people.skolelinux.org/pere/blog/tags/frikanalen">frikanalen (18)</a></li>
 365
 366  <li><a href="http://people.skolelinux.org/pere/blog/tags/h264">h264 (20)</a></li>
 367
 368  <li><a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju (42)</a></li>
 369
 370  <li><a href="http://people.skolelinux.org/pere/blog/tags/isenkram">isenkram (13)</a></li>
 371
 372  <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (19)</a></li>
 373
 374  <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (9)</a></li>
 375
 376  <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (8)</a></li>
 377
 378  <li><a href="http://people.skolelinux.org/pere/blog/tags/lsdvd">lsdvd (2)</a></li>
 379
 380  <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
 381
 382  <li><a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network (8)</a></li>
 383
 384  <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (39)</a></li>
 385
 386  <li><a href="http://people.skolelinux.org/pere/blog/tags/nice free software">nice free software (8)</a></li>
 387
 388  <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (283)</a></li>
 389
 390  <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (182)</a></li>
 391
 392  <li><a href="http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn (26)</a></li>
 393
 394  <li><a href="http://people.skolelinux.org/pere/blog/tags/open311">open311 (2)</a></li>
 395
 396  <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (62)</a></li>
 397
 398  <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (95)</a></li>
 399
 400  <li><a href="http://people.skolelinux.org/pere/blog/tags/raid">raid (1)</a></li>
 401
 402  <li><a href="http://people.skolelinux.org/pere/blog/tags/reactos">reactos (1)</a></li>
 403
 404  <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (11)</a></li>
 405
 406  <li><a href="http://people.skolelinux.org/pere/blog/tags/rfid">rfid (3)</a></li>
 407
 408  <li><a href="http://people.skolelinux.org/pere/blog/tags/robot">robot (10)</a></li>
 409
 410  <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
 411
 412  <li><a href="http://people.skolelinux.org/pere/blog/tags/ruter">ruter (5)</a></li>
 413
 414  <li><a href="http://people.skolelinux.org/pere/blog/tags/scraperwiki">scraperwiki (2)</a></li>
 415
 416  <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (52)</a></li>
 417
 418  <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (4)</a></li>
 419
 420  <li><a href="http://people.skolelinux.org/pere/blog/tags/skepsis">skepsis (5)</a></li>
 421
 422  <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (49)</a></li>
 423
 424  <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (5)</a></li>
 425
 426  <li><a href="http://people.skolelinux.org/pere/blog/tags/stortinget">stortinget (10)</a></li>
 427
 428  <li><a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (43)</a></li>
 429
 430  <li><a href="http://people.skolelinux.org/pere/blog/tags/sysadmin">sysadmin (2)</a></li>
 431
 432  <li><a href="http://people.skolelinux.org/pere/blog/tags/usenix">usenix (2)</a></li>
 433
 434  <li><a href="http://people.skolelinux.org/pere/blog/tags/valg">valg (8)</a></li>
 435
 436  <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (59)</a></li>
 437
 438  <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (4)</a></li>
 439
 440  <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (38)</a></li>
 441
 442 </ul>
 443
 444
 445     </div>
 446     <p style="text-align: right">
 447  Created by <a href="http://steve.org.uk/Software/chronicle">Chronicle v4.6</a>
 448 </p>
 449
 450   </body>
 451 </html>