LUAS website hacked into

thomasj

https://www.breakingnews.ie/ireland/hacker-breaks-luas-website-security-demanding-a-bitcoin-in-five-days-895306.html

markpb

Now would be a great time for the Luas website to go away and NTA/TfI build a really good single website for all public/PSO transport providers in Ireland.

zom

I am not surprised - level of their arrogance and incompetence must finally lead to something like that. They were warned by hackers ans they still ignored it. You cant fix stupidity...

L1011

Boilerplate text put on all those type of defacements does not mean they were actually warned.

hmmm

I don't like to see people celebrate criminals. There's some unfortunate IT folk probably working overtime at the moment to try and recover this.

zom

L1011 wrote: »

Boilerplate text put on all those type of defacements does not mean they were actually warned.

I sent them feedback few times about issues on their website, haven't seen it fixed then for weeks until eventually content was changed completely (not to even mention any response). I'm not sure of they ignored it or never checked it out but judging from level of smugness presented on their website/social media, they had a big self-assurance they do well...

Del.Monte

hmmm wrote: »

I don't like to see people celebrate criminals. There's some unfortunate IT folk probably working overtime at the moment to try and recover this.

I'm sure the unfortunate IT folk are being well paid for their overtime.

Mrs OBumble

markpb wrote: »

Now would be a great time for the Luas website to go away and NTA/TfI build a really good single website for all public/PSO transport providers in Ireland.

They could call it www.a-b.ie ... :rolleyes:


Why should private companies be restricted in their ability to control their own web-presence, just because they happen to provide transport?

markpb

Mrs OBumble wrote: »

They could call it www.a-b.ie ... :rolleyes:

Why should private companies be restricted in their ability to control their own web-presence, just because they happen to provide transport?

a-b.ie is not a really good website, it's an awful mess.

Transdev are operating Luas in the capacity of a PSO tender, not as a normal private company. There's no need for a Luas website, any more than there's a need for a GAI website. You don't get this rubbish in most cities, you get a single website for a single brand.

hmmm

Del.Monte wrote: »

I'm sure the unfortunate IT folk are being well paid for their overtime.

If they're like most IT departments they aren't And probably have a bunch of smart alecs knowitalls who know nothing about this giving them "advice" and the benefit of their laser like hindsight.

Stephen15

Mrs OBumble wrote: »

They could call it www.a-b.ie ... :rolleyes:


Why should private companies be restricted in their ability to control their own web-presence, just because they happen to provide transport?

What private companies are you talking about Go-Ahead? Transdev? because they're the only two private companies providing PSO transport in Ireland. They're the NTA's customers so their websites should be corporate one aimed at attracting custom from the NTA not passengers who are the NTA customers not Go-Ahead or Transdev customers.

L1011

Stephen15 wrote: »

What private companies are you talking about Go-Ahead? Transdev? because they're the only two private companies providing PSO transport in Ireland.

+ M&A Coaches + JJ Kavanagh + Bernard Kavanagh + Whartons; 828, 139, 817 and 925 routes.

May have missed some. There are non-NTA PSO funded ferries also.

Stephen15

L1011 wrote: »

+ M&A Coaches + JJ Kavanagh + Bernard Kavanagh + Whartons; 828, 139, 817 and 925 routes.

May have missed some. There are non-NTA PSO funded ferries also.

Ok but the still shouldn't have their own websites. GAI and Transdev would be the only two major private providers of PSO services.

Mrs OBumble

Stephen15 wrote: »

Ok but the still shouldn't have their own websites. GAI and Transdev would be the only two major private providers of PSO services.

They also provide non PSO services. So yes they should.

Stephen15

Mrs OBumble wrote: »

They also provide non PSO services. So yes they should.

Yes but such websites should only be for their non PSO services.

GM228

markpb wrote: »

Transdev are operating Luas in the capacity of a PSO tender, not as a normal private company.

Stephen15 wrote: »

Ok but the still shouldn't have their own websites. GAI and Transdev would be the only two major private providers of PSO services.

Small point, but Transdev don't operate a PSO service. LUAS is not PSO.

monument

For clarity: Luas.ie is owned by TII and hosted on Government servers.

Domain: luas.ie
Domain Holder: Transport Infrastructure Ireland
Admin-c: AYJ235-IEDR
Tech-c: ENS2-IEDR
Account Name: Eircom
Registrar Abuse Contact: Service not supported currently
Registration Date: 05-August-1999
Renewal Date: 05-August-2019
Holder-type: Billable
Locked status: NO
Renewal status: Active
In-zone: 1
Nserver: cwext.gn.gov.ie
Nserver: gbext.gn.gov.ie
Nserver: ext3.gn.gov.ie

Mrs OBumble wrote: »

They could call it www.a-b.ie ... :rolleyes:


Why should private companies be restricted in their ability to control their own web-presence, just because they happen to provide transport?

All using one website should be no different to having one brand on buses and all accepting Leap.

Nobody is going to stop the companies from having private websites but it should not be where they are sending people for PSO services.

PreCocious

monument wrote: »

For clarity: Luas.ie is owned by TII and hosted on Government servers.

Domain: luas.ie
Domain Holder: Transport Infrastructure Ireland
Admin-c: AYJ235-IEDR
Tech-c: ENS2-IEDR
Account Name: Eircom
Registrar Abuse Contact: Service not supported currently
Registration Date: 05-August-1999
Renewal Date: 05-August-2019
Holder-type: Billable
Locked status: NO
Renewal status: Active
In-zone: 1
Nserver: cwext.gn.gov.ie
Nserver: gbext.gn.gov.ie
Nserver: ext3.gn.gov.ie






All using one website should be no different to having one brand on buses and all accepting Leap.

Nobody is going to stop the companies from having private websites but it should not be where they are sending people for PSO services.

For clarity all you've shown there is that their name servers are hosted by government networks. Currently an nslookup resolves to a non government networks address.

stop

PreCocious wrote: »

For clarity all you've shown there is that their name servers are hosted by government networks. Currently an nslookup resolves to a non government networks address.

Yup, I think it currently resolves to a ddos provider and prior to that was hosted on an Irish cloud provider, so could be anywhere. Site content was developed by a company called release4.

Mrs OBumble

Stephen15 wrote: »

Yes but such websites should only be for their non PSO services.

Why shouldn't they advertise the PSO services?

By all means have a central site listing all licensed public transport (PSO or not). Make it a good version of www.a-b.ie

But there's no harm in private companies spreading their commercial risk by doing their own advertising of those and other services.

Stephen15

Mrs OBumble wrote: »

But there's no harm in private companies spreading their commercial risk by doing their own advertising of those and other services.

That creates a fragmented system whereby people are under the impression their service is a commercial one rather than a PSO one as people may find misleading information on one website over another. TfL only has one website which includes all information regarding the tube, bus, TfL rail, Tramlink, DLR and London Overground all in one place.

markpb

Mrs OBumble wrote: »

Why shouldn't they advertise the PSO services?

By all means have a central site listing all licensed public transport (PSO or not). Make it a good version of www.a-b.ie

But there's no harm in private companies spreading their commercial risk by doing their own advertising of those and other services.

What you're arguing and what happens are two different things. This thread isn't about a Transdev website, it's about a Luas website. It's not doing anything for Transdev, it's just enforcing the image that Dublin's public transport is a fragmented mess.

A-B.ie is an okay journey planner with a poor front end, nothing more. If you want Luas stop information, you have to go to the Luas website. If you want DB taxsaver info, you have to go to the DB website. If you want to pay a GAI fare penalty, you go to the GAI website. It's an awful mess that we accept because it's the status quo.

It's worth bearing in mind that we're paying Transdev to maintain the Luas website, we're paying DB to buy and maintain a competing journey planner (or at least, we did for several years). It's not just a poor customer experience, it's a waste of money.