1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3 <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr">
5 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
6 <title>Petter Reinholdtsen: Fortsatt ingen sikkerhetsoppdateringer for billettautomatene til kollektivtrafikken i Oslo?</title>
7 <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css" />
8 <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/vim.css" />
15 <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
23 <div class="title">Fortsatt ingen sikkerhetsoppdateringer for billettautomatene til kollektivtrafikken i Oslo?</div>
24 <div class="date">29th November 2016</div>
25 <div class="body"><p><a href="http://people.skolelinux.org/pere/blog/Er_billettautomatene_til_kollektivtrafikken_i_Oslo_uten_sikkerhetsoppdateringer_.html">For
26 fire og et halvt år siden</a> lot jeg meg overraske over at Ruters
27 billettautomater for kollektivtrafikken i Oslo kjørte
28 <a href="http://en.wikipedia.org/wiki/Windows_2000">Windows 2000
29 Professional</a>, et og et halvt år etter at Microsoft hadde gitt
30 beskjed om at det ikke lenger kom sikkerhetsoppdateringer til
31 systemet. Støtten fra Microsoft
32 <a href="http://support.microsoft.com/lifecycle/search/?sort=PN&alpha=Windows+2000&Filter=FilterNO">tok
33 slutt 2010-07-13 i følge Wikipedia og Microsoft selv</a>.</p>
35 <p>For fem dager siden passerte jeg på nytt en slik billettautomat som
36 hadde brutt sammen, og den annonserte fortsatt at den kjører Windows
37 2000 Professional, nå mer enn seks år siden Microsoft sluttet å komme
38 med sikkerhetspatcher til produktet. Sikret meg et bilde av
39 krasjmeldingen på skjermen.
41 <p><a href="http://people.skolelinux.org/pere/blog/images/2016-11-29-ruter-win2000pro.jpeg"><img width="40%" src="http://people.skolelinux.org/pere/blog/images/2016-11-29-ruter-win2000pro.jpeg" alt="[foto av billettautomat]"></a></p>
43 <p>Mon tro om de mangler kildekoden til systemet som kjører på
44 automaten, og dermed ikke uten videre kan oppgradere?</p>
47 <a href="https://www.mimesbronn.no/request/ruterbillett_app">en
48 innsynshenvendelse om kildekoden til billett-Appen til Ruter på Mimes
49 brønn</a> at Ruter tilsynelatende ikke legger sikkerheten i
50 sertifikater, nøkler og passord, men i stedet baserer seg på at
51 logikken i programvaren holdes hemmelig. Det borger ikke godt for
52 sikkerheten i Ruters datasystemer.
54 <p>Det er nå tre og et halvt år siden
55 <a href="http://www.aftenposten.no/osloby/Ingen-nye-Ruter-automater-for-sommeren-118460b.html">Ruter
56 fortalte Aftenposten at nye automater ble minst seks måneder
57 forsinket</a>, da leverandøren ikke hadde god nok kontroll. Det kan
58 virke som om leverandøren ikke er alene om å ikke ha god nok
61 <p>Bildet er tilgjengelig for bruk med bruksvilkårene til
62 <a href="http://creativecommons.org/licenses/by/3.0/no/">Creative
63 Commons Navngivelse 3.0 Norge (CC BY 3.0)</a>.</p>
65 <p>Oppdatering 2016-12-01: Saken har fått omtale på
66 <a href="http://www.digi.no/artikler/petter-advarte-selskapet-allerede-i-2012-da-systemkraesjen-dukket-opp-igjen-pa-tirsdag-ble-han-svaert-overrasket/365613">digi.no</a>
68 <a href="https://nrkbeta.no/2016/12/01/mener-oslos-billettsystem-er-en-tikkende-bombe/">NRK
72 <div class="tags">Tags: <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ruter">ruter</a>.</div>
90 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/01/">January (3)</a></li>
92 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/02/">February (2)</a></li>
94 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/03/">March (3)</a></li>
96 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/04/">April (8)</a></li>
98 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/05/">May (8)</a></li>
100 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/06/">June (2)</a></li>
102 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/07/">July (2)</a></li>
104 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/08/">August (5)</a></li>
106 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/09/">September (2)</a></li>
108 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/10/">October (3)</a></li>
110 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/11/">November (8)</a></li>
112 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/12/">December (3)</a></li>
119 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/01/">January (7)</a></li>
121 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/02/">February (6)</a></li>
123 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/03/">March (1)</a></li>
125 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/04/">April (4)</a></li>
127 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/05/">May (3)</a></li>
129 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/06/">June (4)</a></li>
131 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/07/">July (6)</a></li>
133 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/08/">August (2)</a></li>
135 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/09/">September (2)</a></li>
137 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/10/">October (9)</a></li>
139 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/11/">November (6)</a></li>
141 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/12/">December (3)</a></li>
148 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/01/">January (2)</a></li>
150 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/02/">February (3)</a></li>
152 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/03/">March (8)</a></li>
154 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/04/">April (7)</a></li>
156 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/05/">May (1)</a></li>
158 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/06/">June (2)</a></li>
160 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/07/">July (2)</a></li>
162 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/08/">August (2)</a></li>
164 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/09/">September (5)</a></li>
166 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/10/">October (6)</a></li>
168 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/11/">November (3)</a></li>
170 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/12/">December (5)</a></li>
177 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/01/">January (11)</a></li>
179 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/02/">February (9)</a></li>
181 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/03/">March (9)</a></li>
183 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/04/">April (6)</a></li>
185 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/05/">May (9)</a></li>
187 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/06/">June (10)</a></li>
189 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/07/">July (7)</a></li>
191 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/08/">August (3)</a></li>
193 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/09/">September (5)</a></li>
195 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/10/">October (7)</a></li>
197 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/11/">November (9)</a></li>
199 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/12/">December (3)</a></li>
206 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/01/">January (7)</a></li>
208 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/02/">February (10)</a></li>
210 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/03/">March (17)</a></li>
212 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/04/">April (12)</a></li>
214 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/05/">May (12)</a></li>
216 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/06/">June (20)</a></li>
218 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/07/">July (17)</a></li>
220 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/08/">August (6)</a></li>
222 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/09/">September (9)</a></li>
224 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/10/">October (17)</a></li>
226 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/11/">November (10)</a></li>
228 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/12/">December (7)</a></li>
235 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/01/">January (16)</a></li>
237 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/02/">February (6)</a></li>
239 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/03/">March (6)</a></li>
241 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/04/">April (7)</a></li>
243 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/05/">May (3)</a></li>
245 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/06/">June (2)</a></li>
247 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/07/">July (7)</a></li>
249 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/08/">August (6)</a></li>
251 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/09/">September (4)</a></li>
253 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/10/">October (2)</a></li>
255 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/11/">November (3)</a></li>
257 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/12/">December (1)</a></li>
264 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
266 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
268 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
270 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
272 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
274 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
276 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (12)</a></li>
278 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/08/">August (13)</a></li>
280 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/09/">September (7)</a></li>
282 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/10/">October (9)</a></li>
284 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/11/">November (13)</a></li>
286 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/12/">December (12)</a></li>
293 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
295 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
297 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
299 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
301 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
303 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
305 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
307 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
309 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
311 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
313 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
315 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
322 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
324 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
335 <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (13)</a></li>
337 <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
339 <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
341 <li><a href="http://people.skolelinux.org/pere/blog/tags/bankid">bankid (4)</a></li>
343 <li><a href="http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (9)</a></li>
345 <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (16)</a></li>
347 <li><a href="http://people.skolelinux.org/pere/blog/tags/bsa">bsa (2)</a></li>
349 <li><a href="http://people.skolelinux.org/pere/blog/tags/chrpath">chrpath (2)</a></li>
351 <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (142)</a></li>
353 <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (158)</a></li>
355 <li><a href="http://people.skolelinux.org/pere/blog/tags/digistan">digistan (10)</a></li>
357 <li><a href="http://people.skolelinux.org/pere/blog/tags/dld">dld (16)</a></li>
359 <li><a href="http://people.skolelinux.org/pere/blog/tags/docbook">docbook (23)</a></li>
361 <li><a href="http://people.skolelinux.org/pere/blog/tags/drivstoffpriser">drivstoffpriser (4)</a></li>
363 <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (334)</a></li>
365 <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (23)</a></li>
367 <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (12)</a></li>
369 <li><a href="http://people.skolelinux.org/pere/blog/tags/freeculture">freeculture (29)</a></li>
371 <li><a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox (9)</a></li>
373 <li><a href="http://people.skolelinux.org/pere/blog/tags/frikanalen">frikanalen (18)</a></li>
375 <li><a href="http://people.skolelinux.org/pere/blog/tags/h264">h264 (20)</a></li>
377 <li><a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju (42)</a></li>
379 <li><a href="http://people.skolelinux.org/pere/blog/tags/isenkram">isenkram (13)</a></li>
381 <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (19)</a></li>
383 <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (9)</a></li>
385 <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (8)</a></li>
387 <li><a href="http://people.skolelinux.org/pere/blog/tags/lsdvd">lsdvd (2)</a></li>
389 <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
391 <li><a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network (8)</a></li>
393 <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (39)</a></li>
395 <li><a href="http://people.skolelinux.org/pere/blog/tags/nice free software">nice free software (9)</a></li>
397 <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (285)</a></li>
399 <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (182)</a></li>
401 <li><a href="http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn (26)</a></li>
403 <li><a href="http://people.skolelinux.org/pere/blog/tags/open311">open311 (2)</a></li>
405 <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (62)</a></li>
407 <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (96)</a></li>
409 <li><a href="http://people.skolelinux.org/pere/blog/tags/raid">raid (1)</a></li>
411 <li><a href="http://people.skolelinux.org/pere/blog/tags/reactos">reactos (1)</a></li>
413 <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (11)</a></li>
415 <li><a href="http://people.skolelinux.org/pere/blog/tags/rfid">rfid (3)</a></li>
417 <li><a href="http://people.skolelinux.org/pere/blog/tags/robot">robot (10)</a></li>
419 <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
421 <li><a href="http://people.skolelinux.org/pere/blog/tags/ruter">ruter (5)</a></li>
423 <li><a href="http://people.skolelinux.org/pere/blog/tags/scraperwiki">scraperwiki (2)</a></li>
425 <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (52)</a></li>
427 <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (4)</a></li>
429 <li><a href="http://people.skolelinux.org/pere/blog/tags/skepsis">skepsis (5)</a></li>
431 <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (49)</a></li>
433 <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (5)</a></li>
435 <li><a href="http://people.skolelinux.org/pere/blog/tags/stortinget">stortinget (10)</a></li>
437 <li><a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (44)</a></li>
439 <li><a href="http://people.skolelinux.org/pere/blog/tags/sysadmin">sysadmin (2)</a></li>
441 <li><a href="http://people.skolelinux.org/pere/blog/tags/usenix">usenix (2)</a></li>
443 <li><a href="http://people.skolelinux.org/pere/blog/tags/valg">valg (8)</a></li>
445 <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (59)</a></li>
447 <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (4)</a></li>
449 <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (38)</a></li>
455 <p style="text-align: right">
456 Created by <a href="http://steve.org.uk/Software/chronicle">Chronicle v4.6</a>