“So how bad is this? You could remotely take control [of] a train's brake controller from a very long distance away, using hardware that costs sub $500."