Imagine a city's bus network suddenly grinding to a halt, and the culprit is none other than the manufacturer itself! This is the startling scenario that the UK is now grappling with, following in the footsteps of Denmark and the Netherlands. But here's where it gets controversial: could China really have the power to stop hundreds of buses in their tracks?
According. to a Financial Times report, British authorities are investigating whether Chinese-made electric buses on their roads can be remotely disabled. The Department for Transport (DfT) and the National Cyber Security Centre (NCSC) are scrutinizing Yutong, the global leader in bus manufacturing, to see if it can access and manipulate the control systems of its buses in the UK. This probe was prompted by a Norwegian investigation that uncovered Yutong's ability to remotely stop or disable its buses.
The UK's concern is not unfounded, as Yutong has supplied around 700 electric buses across the country. Moreover, the company aims to break into the London market with a new double-decker model tailored to Transport for London (TfL) standards. A DfT spokesperson assured the public that they are working closely with the NCSC to understand the technical aspects of the Norwegian and Danish findings.
Danish authorities found that removing the buses' SIM cards could prevent remote deactivation, but this would also sever connections to other essential systems. TfL confirmed that Yutong buses are not currently in use in London and none have been ordered, emphasizing their strict technical requirements. Yutong, in a statement, asserted compliance with local laws and industry standards, stating that their data collection is solely for vehicle maintenance and improvement, with all data encrypted and access-controlled.
However, the Norwegian operator Ruter found that Yutong retained remote access to critical bus systems, unlike a similar Dutch-made bus. Ruter suggested that removing the SIM card could mitigate the risk, but this raises questions about the balance between cybersecurity and operational efficiency.
The situation becomes even more intriguing when considering the political context. Danish transport company Movia is also investigating, but they stress that remote access is not exclusive to Chinese manufacturers. Many electric vehicles (EVs) from Western companies also rely on remote connectivity for updates. Yet, with China's involvement in British infrastructure and technology under intense scrutiny, lawmakers are debating whether to label Beijing as an 'enemy' or 'threat'.
And this is the part most people miss: how do we ensure the security of our critical infrastructure without compromising technological progress and international cooperation? It's a delicate balance, and one that invites passionate opinions. What do you think? Is China a threat to be guarded against, or is this concern overblown?
