Internet-connected coffee maker has security holes

Internet-connected coffee maker has security holes

Check this out, including the pic of the coffee maker:

http :// news.cnet,com /8301-10784_3-9970757-7.html?part=rss&subj=news&tag=2547-1009_3-0-10

Anthony

Re: Internet-connected coffee maker has security holes

Anthony Ferrante <ferrante276-ngspam@yahoo,com > wrote in
news:i96i54tlrlj51omjld68vkkme2pvofqbuf@4ax,com :

> Check this out, including the pic of the coffee maker:
>
> http :// news.cnet,com /8301-10784_3-9970757-7.html?part=rss&subj=news&tag
> =2547-1009_3-0-10
>
> Anthony

Now on Slashdot:

http :// it.slashdot.org/article.pl?sid=08/06/17/1941200

> Craig Wright discovered that the Jura F90 Coffee maker, with its
> honest-to-God Jura Internet Connection Kit, can be taken over by a
> remote attacker, who can cause the coffee to be weaker or stronger;
> change the amount of water per cup; or cause the machine to require
> service (call this one a DDoC). 'Best yet, the software allows a
> remote attacker to gain access to the Windows XP system it is running
> on at the level of the user.' An Internet-enabled, remote-controlled
> coffee-machine and XP backdoor what more could a hacker ask for?

Here's the coffee pot on Amazon, for $1800:

http :// www .amazon,com /Jura-Capresso-Impressa-Automatic-Coffee-
Espresso/dp/B00008I8NT

Never connect a Windows box (like this coffee maker) directly to the
Internet. Always use a NAT router (what I call a Windows condom). If you
need to offer a service to the Internet, configure port forwarding on the
router. If you don't know how to do that, you shouldn't be offering the
service. The router doesn't guarantee safety, but it sets the bar a lot
higher for attackers, encouraging them to go mess with someone else.

Re: Internet-connected coffee maker has security holes

Some fun links from the Slashdot discussion:

http :// en.wikipedia.org/wiki/Trojan_room_coffee_pot

http :// www .faqs.org/rfcs/rfc2324.html

(Note the date on the RFC.)

Re: Internet-connected coffee maker has security holes

On Jun 18, 4:25 pm, ScratchMonkey
<scratchmonkey.blackl...@sewingwitch,com > wrote:
> Some fun links from the Slashdot discussion:
>
> http :// en.wikipedia.org/wiki/Trojan room coffee pot
>
> http :// www .faqs.org/rfcs/rfc2324.html
>
> (Note the date on the RFC.)

YEAH -- I THINK WE'VE HEARD ENUF.

Re: Internet-connected coffee maker has security holes

"lockjaw" <davebobbl@gmail,com > wrote in message
news:ad36f790-22ba-472e-8121-fde62dc2d891@m45g2000hsb.googlegroups,com ...
On Jun 18, 4:25 pm, ScratchMonkey
<scratchmonkey.blackl...@sewingwitch,com > wrote:
> Some fun links from the Slashdot discussion:
>
> http :// en.wikipedia.org/wiki/Trojan_room_coffee_pot
>
> http :// www .faqs.org/rfcs/rfc2324.html
>
> (Note the date on the RFC.)

YEAH -- I THINK WE'VE HEARD ENUF.

Another post from Captain Negative. Please ignore.

Thanks for the links- interesting.

Re: Internet-connected coffee maker has security holes

"wavemechanic" <dinner@six,net > wrote in message
news:485a4c60@dnews.tpgi,com .au...
> "lockjaw" <davebobbl@gmail,com > wrote in message
> news:ad36f790-22ba-472e-8121-fde62dc2d891@m45g2000hsb.googlegroups,com ...
> On Jun 18, 4:25 pm, ScratchMonkey
> <scratchmonkey.blackl...@sewingwitch,com > wrote:
>> Some fun links from the Slashdot discussion:
>>
>> http :// en.wikipedia.org/wiki/Trojan_room_coffee_pot
>>
>> http :// www .faqs.org/rfcs/rfc2324.html
>>
>> (Note the date on the RFC.)
>
> YEAH -- I THINK WE'VE HEARD ENUF.
>
> Another post from Captain Negative. Please ignore.
>
> Thanks for the links- interesting.
>

I've just finished reading the Slashdot thread- very amusing, recommended if
you're into embracing your inner nerd.
Those guys sure do know how to make a bad joke:
"Is this technically a Java exploit ?"
And for all you Douglas Adams fans out there:
"Whatever you do, don't ask it for a cup of tea while it's connected to the
Internet."

Re: Internet-connected coffee maker has security holes

On Jun 19, 8:09 am, "wavemechanic" <din...@six,net > wrote:
> "lockjaw" <davebo...@gmail,com > wrote in message
>
> news:ad36f790-22ba-472e-8121-fde62dc2d891@m45g2000hsb.googlegroups,com ...
> On Jun 18, 4:25 pm, ScratchMonkey
>
> <scratchmonkey.blackl...@sewingwitch,com > wrote:
> > Some fun links from the Slashdot discussion:
>
> > http :// en.wikipedia.org/wiki/Trojan room coffee pot
>
> > http :// www .faqs.org/rfcs/rfc2324.html
>
> > (Note the date on the RFC.)
>
> YEAH  --   I THINK WE'VE HEARD ENUF.
>
> Another post from Captain Negative. Please ignore.
>
> Thanks for the links- interesting.

where ya been wm?

another gem.

Re: Internet-connected coffee maker has security holes

On 2008-06-19, lockjaw <davebobbl@gmail,com > wrote:

> YEAH -- I THINK WE'VE HEARD ENUF.

who axed you, ave?

nb

Re: Internet-connected coffee maker has security holes

On Jun 20, 11:13 am, notbob <not...@nothome,com > wrote:
> On 2008-06-19, lockjaw <davebo...@gmail,com > wrote:
>
> > YEAH  --   I THINK WE'VE HEARD ENUF.
>
> who asked you, dave?
>
> nb

Another pinhead, bnb.

dependable -- yet banal.

Re: Internet-connected coffee maker has security holes

On 2008-06-20, lockjaw <davebobbl@gmail,com > wrote:

>> who asked you, dave?

A little editing, eh, ave?

Deceptive, but not unexpected.

nb

Re: Internet-connected coffee maker has security holes

On Fri, 20 Jun 2008 15:13:40 GMT, notbob <notbob@nothome,com > wrote:

>On 2008-06-19, lockjaw <davebobbl@gmail,com > wrote:
>
>> YEAH -- I THINK WE'VE HEARD ENUF.
>
>who axed you, ave?


whenever i read "ave", my mind pronounces it "ah-vay" instead of
"ayv".


--barry "at least it's not 'avenue'"

Re: Internet-connected coffee maker has security holes


>  >
>  >> YEAH  --   I THINK WE'VE HEARD ENUF.
>  >
>  >who axed you, dave?
>
> whenever i read "ave", my mind pronounces it "ah-vay" instead of
> "ayv".
>
> --barry "at least it's not 'avenue'"

this is the extent of nb's contribution to this thread
even less than mine!

Re: Internet-connected coffee maker has security holes

On 2008-06-22, lockjaw <davebobbl@gmail,com > wrote:

> even less than mine!

Only you would believe that possible.

nb

Re: Internet-connected coffee maker has security holes

On Jun 24, 12:48 pm, notbob <not...@nothome,com > wrote:
> On 2008-06-22, lockjaw <davebo...@gmail,com > wrote:
>
> > even less than mine!
>
> Only you would believe that possible.
>
> nb
and what have you done here lately? blowjobbobnotbob