UBIKE AUGUST SHUTDOWN DUE TO COMPUTER ENGINEER SABOTAGE|YouBike大當機 竟是內部工程師惡搞

On Aug. 31 the YouBike system shot down and prevented the public from renting of 20,000 bikes. There was a lot of public complaints. When the computer system was examined it was found that this was sabotage. Further investigation found that this was by one of the system engineers. The person has been prosecuted and was held on bail for NT$100,000. On August 31 this year the whole YouBike system nationwide grou701nd to a halt, including Taipei City, New Taipei City, Taoyuan, Xinzhu, Taichung and Changhua. This put 20,000 public bikes out of action and took three days before the system was repaired. After an investigation by prosecutors, it's been found that this was sabotage. ==HO CHIH-HSIN Taichung City Prosecutors Office== The control system in each area automatically downloaded a compromised version of the firmware program version which was then replaced to the control system. So the person understood the whole system procedure to be able to sabotage the server and to automatically, illegally, control the system. The prosecutors found that one of the contracting engineers for YouBike, surnamed Liao, had had a disagreement with his management and so when updating the system, installed malware into the main server, so that the whole system was compromised. Afterwards, he deleted the program. ==HO CHIH-HSIN Taichung City Prosecutors Office== We had access to the information security lab and after analysis, we found that he had deleted a lot of information, but from the traces that were left, piece by piece, we honed in on Liao as the culprit. The contractor said that this had cost the company millions in losses and when they started to investigate they realised that it was sabotage and so asked prosecutors to start an investigation. After the prosecution, the company will seek specific damages from Liao and will increase their own security measures to avoid a shutdown of the system ever happening again. TRANSLATED BY：CLARE LEAR 「YouBike微笑單車」租賃系統，8月31號發生全國大當機，超過兩萬輛單車無法租借，民眾抱怨連連，電腦系統商緊急清查，發現是遭人植入惡意程式，檢調追查竟然是系統商一名工程師所為，被移送法辦，最後10萬元交保。 今年8月31日，全國YouBike單車租借站發生大當機，包括台北市、新北市、桃園、新竹、台中、彰化受到影響，一共有兩萬兩千輛單車無法租借，三天後才修復完成，經過檢調深入追查，發現竟然是遭到惡意程式攻擊。 ==台中市調站專員 何鋕信== 各個地區的車柱控制器 會自動從這個資料夾 下載這支錯誤版本的韌體程式 去更新車柱控制器 所以就造成了車柱控制器當機 所以他本身就是 了解這個所有的流程 所以才有辦法在這個主機上 做一支惡意程式 來自動執行這些非法的動作 檢調調查發現，YouBike的電腦系統承包商一名廖姓工程師，疑因與上級意見不合，趁系統更新時，將自行製作的惡意程式傳送到系統主機內，導致系統大當機，事後再將相關程式刪除。 ==台中市調站專員 何鋕信== 我們拿到本局的資安鑑識實驗室 經過分析之後 發覺說 他有很多資料雖然已經刪除 但是從各個保留下來的蛛絲馬跡 然後逐件的鎖定 所以說追查出來說是廖姓嫌犯所為 系統承包商表示，這起事件造成公司數百萬元損失，案發後主動清查發現是人為惡意造成，才報請檢調調查，待判決確定後會向廖姓工程師進行具體求償，未來也會加強相關防範措施，避免再次發生系統停擺的狀況。 邱植培 彭煥群 台中報導