Jailbroken coin-operated washing machines unlock unlimited free cycles and millions in funds — unpatched security vulnerability could also pose a fire hazard

Sherbrooke and Taranenko of UC Santa Cruz found a flaw in the CSC Serviceworks app called CSC Go, where it has a flawed API allowing a custom script to authorize free laundry cycles, add credits to the account, and bypass its safety checks, potentially making its internet-connected washing machines a fire hazard.

https://www.tomshardware.com/tech-industry/jailbroken-coin-operated-washing-machines-unlock-unlimited-free-cycles-and-millions-in-funds

Établi 22d | 18 mai 2024 à 17:10:04


Connectez-vous pour ajouter un commentaire

Autres messages de ce groupe

 Office 2007 infosec researcher recalls panic after major bug announcement turned out to be a false positive

Former eEye researcher Greg Linares and team scrambled to find an Office 2007 vulnerability after their first heralded bug turned out to be a false positive.

9 juin 2024 à 17:50:05 | tomshardware.com
 World's first chip-based 3D printer is smaller than a coin — benefits from having no moving parts

This small 3D printer concept uses a photonic chip's light beam and optical antennas to use a specific light wave and cure resin.

9 juin 2024 à 17:50:04 | tomshardware.com
 The Samsung Odyssey G50A 27-inch QHD IPS monitor is now just $255 at Amazon

The Samsung Odyssey G50A 27-inch gaming monitor is currently marked down at Amazon to one of its lowest prices to date.

9 juin 2024 à 17:50:04 | tomshardware.com
 This PSU has enough juice to power four RTX 4090s — the HELA 2500R comes with four 12V-2x6 connectors and requires a special wall plug

This 2,500-watt PSU can power four high-powered GPUs natively. SilverStone designed for it for professional applications like AI research, and you need a 240-volt outlet

9 juin 2024 à 15:40:03 | tomshardware.com
 This AIO cooler is designed to cool two CPUs at once — SilverStone’s new XE360-Dual

SilverStone introduced the XE360-Dual, which has two water blocks connected in serial, to cool two AMD or Intel server processors using a single radiator.

9 juin 2024 à 13:20:05 | tomshardware.com
 Playdate $400K consoles theft misery ends with mysterious return of consignment — investigations 'closing in' on the perps

Gaming handheld brand Playdate is celebrating the return of hundreds of thousands of dollars worth of misdelivered-then-stolen devices. Playdate has a curious tale to sha

9 juin 2024 à 13:20:05 | tomshardware.com