]> pere.pagekite.me Git - homepage.git/blob
945b66df115c32e57df2724635ebc39cb20f8fb5
[homepage.git] /
1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3 <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr">
4 <head>
5 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
6 <title>Petter Reinholdtsen: Fortsatt ingen sikkerhetsoppdateringer for billettautomatene til kollektivtrafikken i Oslo?</title>
7 <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css" />
8 <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/vim.css" />
9
10
11 </head>
12 <body>
13 <div class="title">
14 <h1>
15 <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
16
17 </h1>
18
19 </div>
20
21
22 <div class="entry">
23 <div class="title">Fortsatt ingen sikkerhetsoppdateringer for billettautomatene til kollektivtrafikken i Oslo?</div>
24 <div class="date">29th November 2016</div>
25 <div class="body"><p><a href="http://people.skolelinux.org/pere/blog/Er_billettautomatene_til_kollektivtrafikken_i_Oslo_uten_sikkerhetsoppdateringer_.html">For
26 fire og et halvt år siden</a> lot jeg meg overraske over at Ruters
27 billettautomater for kollektivtrafikken i Oslo kjørte
28 <a href="http://en.wikipedia.org/wiki/Windows_2000">Windows 2000
29 Professional</a>, et og et halvt år etter at Microsoft hadde gitt
30 beskjed om at det ikke lenger kom sikkerhetsoppdateringer til
31 systemet. Støtten fra Microsoft
32 <a href="http://support.microsoft.com/lifecycle/search/?sort=PN&alpha=Windows+2000&Filter=FilterNO">tok
33 slutt 2010-07-13 i følge Wikipedia og Microsoft selv</a>.</p>
34
35 <p>For fem dager siden passerte jeg på nytt en slik billettautomat som
36 hadde brutt sammen, og den annonserte fortsatt at den kjører Windows
37 2000 Professional, nå mer enn seks år siden Microsoft sluttet å komme
38 med sikkerhetspatcher til produktet. Sikret meg et bilde av
39 krasjmeldingen på skjermen.
40
41 <p><a href="http://people.skolelinux.org/pere/blog/images/2016-11-29-ruter-win2000pro.jpeg"><img width="40%" src="http://people.skolelinux.org/pere/blog/images/2016-11-29-ruter-win2000pro.jpeg" alt="[foto av billettautomat]"></a></p>
42
43 <p>Mon tro om de mangler kildekoden til systemet som kjører på
44 automaten, og dermed ikke uten videre kan oppgradere?</p>
45
46 <p>Jeg ser jo fra
47 <a href="https://www.mimesbronn.no/request/ruterbillett_app">en
48 innsynshenvendelse om kildekoden til billett-Appen til Ruter på Mimes
49 brønn</a> at Ruter tilsynelatende ikke legger sikkerheten i
50 sertifikater, nøkler og passord, men i stedet baserer seg på at
51 logikken i programvaren holdes hemmelig. Det borger ikke godt for
52 sikkerheten i Ruters datasystemer.
53
54 <p>Det er nå tre og et halvt år siden
55 <a href="http://www.aftenposten.no/osloby/Ingen-nye-Ruter-automater-for-sommeren-118460b.html">Ruter
56 fortalte Aftenposten at nye automater ble minst seks måneder
57 forsinket</a>, da leverandøren ikke hadde god nok kontroll. Det kan
58 virke som om leverandøren ikke er alene om å ikke ha god nok
59 kontroll.</p>
60
61 <p>Bildet er tilgjengelig for bruk med bruksvilkårene til
62 <a href="http://creativecommons.org/licenses/by/3.0/no/">Creative
63 Commons Navngivelse 3.0 Norge (CC BY 3.0)</a>.</p>
64
65 <p>Oppdatering 2016-12-01: Saken har fått omtale på
66 <a href="http://www.digi.no/artikler/petter-advarte-selskapet-allerede-i-2012-da-systemkraesjen-dukket-opp-igjen-pa-tirsdag-ble-han-svaert-overrasket/365613">digi.no</a>
67 og
68 <a href="https://nrkbeta.no/2016/12/01/mener-oslos-billettsystem-er-en-tikkende-bombe/">NRK
69 Beta</a>.</p>
70 </div>
71
72 <div class="tags">Tags: <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ruter">ruter</a>.</div>
73
74
75 </div>
76
77
78
79
80 <div id="sidebar">
81
82
83
84 <h2>Archive</h2>
85 <ul>
86
87 <li>2017
88 <ul>
89
90 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/01/">January (4)</a></li>
91
92 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/02/">February (3)</a></li>
93
94 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/03/">March (4)</a></li>
95
96 </ul></li>
97
98 <li>2016
99 <ul>
100
101 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/01/">January (3)</a></li>
102
103 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/02/">February (2)</a></li>
104
105 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/03/">March (3)</a></li>
106
107 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/04/">April (8)</a></li>
108
109 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/05/">May (8)</a></li>
110
111 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/06/">June (2)</a></li>
112
113 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/07/">July (2)</a></li>
114
115 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/08/">August (5)</a></li>
116
117 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/09/">September (2)</a></li>
118
119 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/10/">October (3)</a></li>
120
121 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/11/">November (8)</a></li>
122
123 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/12/">December (5)</a></li>
124
125 </ul></li>
126
127 <li>2015
128 <ul>
129
130 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/01/">January (7)</a></li>
131
132 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/02/">February (6)</a></li>
133
134 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/03/">March (1)</a></li>
135
136 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/04/">April (4)</a></li>
137
138 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/05/">May (3)</a></li>
139
140 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/06/">June (4)</a></li>
141
142 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/07/">July (6)</a></li>
143
144 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/08/">August (2)</a></li>
145
146 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/09/">September (2)</a></li>
147
148 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/10/">October (9)</a></li>
149
150 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/11/">November (6)</a></li>
151
152 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/12/">December (3)</a></li>
153
154 </ul></li>
155
156 <li>2014
157 <ul>
158
159 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/01/">January (2)</a></li>
160
161 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/02/">February (3)</a></li>
162
163 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/03/">March (8)</a></li>
164
165 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/04/">April (7)</a></li>
166
167 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/05/">May (1)</a></li>
168
169 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/06/">June (2)</a></li>
170
171 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/07/">July (2)</a></li>
172
173 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/08/">August (2)</a></li>
174
175 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/09/">September (5)</a></li>
176
177 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/10/">October (6)</a></li>
178
179 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/11/">November (3)</a></li>
180
181 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/12/">December (5)</a></li>
182
183 </ul></li>
184
185 <li>2013
186 <ul>
187
188 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/01/">January (11)</a></li>
189
190 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/02/">February (9)</a></li>
191
192 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/03/">March (9)</a></li>
193
194 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/04/">April (6)</a></li>
195
196 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/05/">May (9)</a></li>
197
198 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/06/">June (10)</a></li>
199
200 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/07/">July (7)</a></li>
201
202 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/08/">August (3)</a></li>
203
204 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/09/">September (5)</a></li>
205
206 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/10/">October (7)</a></li>
207
208 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/11/">November (9)</a></li>
209
210 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/12/">December (3)</a></li>
211
212 </ul></li>
213
214 <li>2012
215 <ul>
216
217 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/01/">January (7)</a></li>
218
219 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/02/">February (10)</a></li>
220
221 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/03/">March (17)</a></li>
222
223 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/04/">April (12)</a></li>
224
225 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/05/">May (12)</a></li>
226
227 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/06/">June (20)</a></li>
228
229 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/07/">July (17)</a></li>
230
231 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/08/">August (6)</a></li>
232
233 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/09/">September (9)</a></li>
234
235 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/10/">October (17)</a></li>
236
237 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/11/">November (10)</a></li>
238
239 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/12/">December (7)</a></li>
240
241 </ul></li>
242
243 <li>2011
244 <ul>
245
246 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/01/">January (16)</a></li>
247
248 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/02/">February (6)</a></li>
249
250 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/03/">March (6)</a></li>
251
252 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/04/">April (7)</a></li>
253
254 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/05/">May (3)</a></li>
255
256 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/06/">June (2)</a></li>
257
258 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/07/">July (7)</a></li>
259
260 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/08/">August (6)</a></li>
261
262 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/09/">September (4)</a></li>
263
264 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/10/">October (2)</a></li>
265
266 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/11/">November (3)</a></li>
267
268 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/12/">December (1)</a></li>
269
270 </ul></li>
271
272 <li>2010
273 <ul>
274
275 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
276
277 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
278
279 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
280
281 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
282
283 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
284
285 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
286
287 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (12)</a></li>
288
289 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/08/">August (13)</a></li>
290
291 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/09/">September (7)</a></li>
292
293 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/10/">October (9)</a></li>
294
295 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/11/">November (13)</a></li>
296
297 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/12/">December (12)</a></li>
298
299 </ul></li>
300
301 <li>2009
302 <ul>
303
304 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
305
306 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
307
308 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
309
310 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
311
312 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
313
314 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
315
316 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
317
318 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
319
320 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
321
322 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
323
324 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
325
326 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
327
328 </ul></li>
329
330 <li>2008
331 <ul>
332
333 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
334
335 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
336
337 </ul></li>
338
339 </ul>
340
341
342
343 <h2>Tags</h2>
344 <ul>
345
346 <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (13)</a></li>
347
348 <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
349
350 <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
351
352 <li><a href="http://people.skolelinux.org/pere/blog/tags/bankid">bankid (4)</a></li>
353
354 <li><a href="http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (9)</a></li>
355
356 <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (16)</a></li>
357
358 <li><a href="http://people.skolelinux.org/pere/blog/tags/bsa">bsa (2)</a></li>
359
360 <li><a href="http://people.skolelinux.org/pere/blog/tags/chrpath">chrpath (2)</a></li>
361
362 <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (148)</a></li>
363
364 <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (158)</a></li>
365
366 <li><a href="http://people.skolelinux.org/pere/blog/tags/debian-handbook">debian-handbook (3)</a></li>
367
368 <li><a href="http://people.skolelinux.org/pere/blog/tags/digistan">digistan (10)</a></li>
369
370 <li><a href="http://people.skolelinux.org/pere/blog/tags/dld">dld (16)</a></li>
371
372 <li><a href="http://people.skolelinux.org/pere/blog/tags/docbook">docbook (23)</a></li>
373
374 <li><a href="http://people.skolelinux.org/pere/blog/tags/drivstoffpriser">drivstoffpriser (4)</a></li>
375
376 <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (345)</a></li>
377
378 <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (23)</a></li>
379
380 <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (12)</a></li>
381
382 <li><a href="http://people.skolelinux.org/pere/blog/tags/freeculture">freeculture (29)</a></li>
383
384 <li><a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox (9)</a></li>
385
386 <li><a href="http://people.skolelinux.org/pere/blog/tags/frikanalen">frikanalen (18)</a></li>
387
388 <li><a href="http://people.skolelinux.org/pere/blog/tags/h264">h264 (20)</a></li>
389
390 <li><a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju (42)</a></li>
391
392 <li><a href="http://people.skolelinux.org/pere/blog/tags/isenkram">isenkram (15)</a></li>
393
394 <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (20)</a></li>
395
396 <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (9)</a></li>
397
398 <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (8)</a></li>
399
400 <li><a href="http://people.skolelinux.org/pere/blog/tags/lsdvd">lsdvd (2)</a></li>
401
402 <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
403
404 <li><a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network (8)</a></li>
405
406 <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (39)</a></li>
407
408 <li><a href="http://people.skolelinux.org/pere/blog/tags/nice free software">nice free software (9)</a></li>
409
410 <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (287)</a></li>
411
412 <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (187)</a></li>
413
414 <li><a href="http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn (28)</a></li>
415
416 <li><a href="http://people.skolelinux.org/pere/blog/tags/open311">open311 (2)</a></li>
417
418 <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (64)</a></li>
419
420 <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (99)</a></li>
421
422 <li><a href="http://people.skolelinux.org/pere/blog/tags/raid">raid (1)</a></li>
423
424 <li><a href="http://people.skolelinux.org/pere/blog/tags/reactos">reactos (1)</a></li>
425
426 <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (11)</a></li>
427
428 <li><a href="http://people.skolelinux.org/pere/blog/tags/rfid">rfid (3)</a></li>
429
430 <li><a href="http://people.skolelinux.org/pere/blog/tags/robot">robot (10)</a></li>
431
432 <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
433
434 <li><a href="http://people.skolelinux.org/pere/blog/tags/ruter">ruter (5)</a></li>
435
436 <li><a href="http://people.skolelinux.org/pere/blog/tags/scraperwiki">scraperwiki (2)</a></li>
437
438 <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (52)</a></li>
439
440 <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (4)</a></li>
441
442 <li><a href="http://people.skolelinux.org/pere/blog/tags/skepsis">skepsis (5)</a></li>
443
444 <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (51)</a></li>
445
446 <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (5)</a></li>
447
448 <li><a href="http://people.skolelinux.org/pere/blog/tags/stortinget">stortinget (11)</a></li>
449
450 <li><a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (48)</a></li>
451
452 <li><a href="http://people.skolelinux.org/pere/blog/tags/sysadmin">sysadmin (3)</a></li>
453
454 <li><a href="http://people.skolelinux.org/pere/blog/tags/usenix">usenix (2)</a></li>
455
456 <li><a href="http://people.skolelinux.org/pere/blog/tags/valg">valg (8)</a></li>
457
458 <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (59)</a></li>
459
460 <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (4)</a></li>
461
462 <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (40)</a></li>
463
464 </ul>
465
466
467 </div>
468 <p style="text-align: right">
469 Created by <a href="http://steve.org.uk/Software/chronicle">Chronicle v4.6</a>
470 </p>
471
472 </body>
473 </html>