All Your Coffee Are Belong To Us

Wolf nipple chips writes "Craig Wright discovered that the Jura F90 Coffee maker, with its honest-to-God Jura Internet Connection Kit, can be taken over by a remote attacker, who can cause the coffee to be weaker or stronger; change the amount of water per cup; or cause the machine to require service (call this one a DDoC). 'Best yet, the software allows a remote attacker to gain access to the Windows XP system it is running on at the level of the user.' An Internet-enabled, remote-controlled coffee-machine and XP backdoor — what more could a hacker ask for?"

Bah!

Bah! Get your coffee [utah.edu] and an old school French press [wikipedia.org] to brew the tastiest coffee. Put your hacking efforts into the roasting, selection and cultivation of your beans and leave the time and resource wasting, lame Windows controlled coffee makers to the junk heap of history.

Java?

I wonder how well it runs Java...

Re:Java?

I'm only interested if it can do Cocoa as well.

Re:Java?

Maybe if it was running WinCE.

Sex?

Sorry, that's the first thing that came to mind on the question of what more could a hacker want.

Re:Sex?

I assume the question is limited to things within the realms of reality, rather than science-fiction (the only known environment where geeks get laid). Of course, a totally evil hacker might upload a suitable hot coffee mod.

Tea

Whatever you do, don't ask it for a cup of tea while it's connected to the Internet. "Share and enjoy." [russellbeattie.com]

Setting the scene

I mean come on now... what good can an Internet connected coffee maker really do? No security conscious office will ever want a Windows enabled appliance around. Just imagine the scene:

Special Agent Wilkins: How the Hell did they get in?

Special Agent Thompson: Sir..... I... uh, think they got in through the coffee maker.

Special Agent Wilkins: The What?

Special Agent Thompson: Sir, the coffee maker that we got you for your birthday... the one that you wanted to be able to brew up a cup o joe from your office?

Special Agent Wilkins: Oh fsck me....

Re:Setting the scene

This [wikipedia.org] is what happens when coffee pots go on the Internet, albeit in a different way. A similar effect was probably intended, though.

What more could a hacker want?

How about the coffee?

Re:What more could a hacker want?

Hmmmmm. I wonder what would happen if someone totally evil patched the code so you had to win at minesweeper to get the coffee?

EVERYBODY PANIC!

Screw the company web server. Screw the sql database server. They've hacked the coffee machine! AHHHHHHHHH!!!!!!

HTCPCP

So, does this device conform to the HTCPCP (Hyper Text Coffee Pot Control Protocol) [http://www.faqs.org/rfcs/rfc2324.html] ?

Not a constantly-connected device

As far as I can tell, the coffeemaker *doesn't* run Windows-- the exploit is in the "connection kit", which is software that runs on a PC, which plugs into the coffeemaker, which lets coffee-people fix your coffeemaker from afar.

So this wouldn't have much in the way of applicability unless you knew someone with this particular $2000 coffeemaker, which was already experiencing problems, who had purchased the $100+ coffeemaker diagnostic kit and had the coffeemaker plugged in, through the diagnostic kit, to their PC at the time.

Seems like there are better ways to get into Windows.

At least it was a Coffee Maker...

... and not, oh, an integrated diabetes management system, pill dispenser, etc...

classic example of why...

... not everything needs an internet connection

That's why they call it a firewall.

If you let the whole world control your heating elements, bad things happen. When was the last time you saw an Itanium box with a public IP?

What's for breakfast?

Once the coffee maker is compromised and turned into a rogue email server, breakfast choices will be coffee and spam, coffee egg and spam; coffee egg bacon and spam; coffee egg bacon sausage and spam; coffee spam bacon sausage and spam; coffee spam egg spam spam bacon and spam; coffee spam sausage spam spam bacon spam tomato and spam....

Vikings: Spam spam spam spam...

Don't people learn

Don't people ever learn. If you don't install a firewall, anti-virus protection, and anti-spyware software on your coffee maker, you deserve to be hacked. My coffee maker runs Linux and has never been hacked.

Coffee

I, for one, welcome our new coffee brewing overlords.

Did you hear the ones about...

Did you hear the one about the Microsoft coffee maker?

It makes tea then convinces you that you only ever wanted a tea.

Did you hear the one about the Apple coffee maker?

It does an amazing Mocha Frappucino with whipped cream, caramel sauce and a chocolate flake in the top but doesn't know how to make a plain black coffee.

Did you hear the one about the Linux coffee maker?

v0.1 made a good plain coffee but it took a while doing it, v1.0 makes good plain coffee but there's a patch that allows it to make better tea than the Microsoft coffee maker and v2.0 gives you a cup of plain coffee, a cup of whipped cream, a cup of caramel sauce, a chocolate flake in a wrapper and tells you to make the coffee how you want but for a much lower price than the Apple one.

Did you hear the one about the Vista coffee maker?

Nope, neither did I but then who gives a shit.

What more could a hacker want?

An Internet-enabled, remote-controlled coffee-machine and XP backdoor -- what more could a hacker ask for?

Access to the coffee his new bot brews?

Re:hmmm

Yeahhhhhh, i'm gonna have to go ahead & ... disagree with you there, yeahhh. I'm not sure hacking Lumberg's coffee maker is going to have any affect on him, yeahhh, you see, Lumberg doesn't sleep as he is up all night continually drinking from his perpetually-full mug, even as he bangs your girlfriend.

btw, I'm gonna have to ask you to go ahead and come in on Sunday, too... :-P

Re:Weaken them

NO one can survive without caffeine!

I can. I can stop caffeine any time I want to.

Re:First post?

Have the RIAA sent it a DMCA takedown notice for sharing files [slashdot.org] yet?

PC LOAD COFFEE