Australian finds vulnerability in his coffee maker
An Australian man has discovered security holes in his internet-connected coffee maker that could allow a remote attacker to not only take over his Windows XP-based PC but also make his coffee too weak. Craig Wright, a risk advisory services manager at professional services firm BDO, found several security holes, including a buffer overflow in the internet connection software that links his Jura F90 coffee maker to his PC.
Once connected to the internet, the high-end coffee maker, which retails for nearly US$2,000 on Amazon, lets you do things like set the strength of your coffee and get remote diagnostic help over the internet without having to send the appliance in for service. Wright posted the information on the vulnerabilities, and the fact that there is no patch available yet, to the BugTraq security e-mail list on Tuesday. Read the rest of this entry »
Tags: amazon, australian man, coffee maker, Coffee Makers, craig wright, e mail, internet connection software, professional services firm