New, by me: Two universtiy students have uncovered a security bug that lets millions do their laundry for free.
CSC ServiceWorks provides internet-connected laundry machines to thousands of residential homes and universities around the U.S., Canada and Europe.
The students found that any security checks are done by the app on the user’s device and automatically trusted by CSC’s servers,
But CSC still hasn't fixed the isue — or acknowledged their findings.
More: https://techcrunch.com/2024/05/17/csc-serviceworks-free-laundry-million-machines
Zack Whittaker /
npub1tn…ay0nr
2024-05-17 18:47:46
Author Public Key
npub1tnd8wwd5ux624dj36094wh9ax9utku8ahnxk4d367e9tlpg458qqvay0nrPublished at
2024-05-17 18:47:46Event JSON
{
"id": "157a90da96998d332e966067e8e2860354cd8a7072af253f1a75ff816189577b",
"pubkey": "5cda7739b4e1b4aab651d3cb575cbd3178bb70fdbccd6ab63af64abf8515a1c0",
"created_at": 1715964466,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.social/users/zackwhittaker/statuses/112457447298124340",
"activitypub"
]
],
"content": "New, by me: Two universtiy students have uncovered a security bug that lets millions do their laundry for free.\n\nCSC ServiceWorks provides internet-connected laundry machines to thousands of residential homes and universities around the U.S., Canada and Europe.\n\nThe students found that any security checks are done by the app on the user’s device and automatically trusted by CSC’s servers,\n\nBut CSC still hasn't fixed the isue — or acknowledged their findings. \n\nMore: https://techcrunch.com/2024/05/17/csc-serviceworks-free-laundry-million-machines",
"sig": "133696b45b85e37105289f76da5b2c3873cf2bad85d1d556c95a6d9b75f671d41aa7c292b8d0c161a805c1af3f85e1f2e4451799232b94e5cd788d5bb3368604"
}