Denial-of-coffee attacks affect networked coffee-maker

If you own a Jura F90 Coffee Maker, you can also buy a Jura Internet Connection Kit, which lets you program and set your coffee prefs via the network: however, its got a bunch of vulnerabilities that allow for remote denial-of-coffee attacks:
Guess what - it can not be patched as far as I can tell ;) It also has a few software vulnerabilities.

Fun things you can do with a Jura coffee maker:
1. Change the preset coffee settings (make weak or strong coffee)
2. Change the amount of water per cup (say 300ml for a short black) and make a puddle
3. Break it by engineering settings that are not compatible (and making it require a service)

Link (via /.)

Discussion

Take a look at this

Oh noes! Now scary hackers can give me heart disease!!11!!1!eleventy-one!11

Take a look at this

Erm. Like I just posted on Slashdot, the coffeemaker isn't actually constantly connected to the Internet. The exploit is in a piece of software that gets installed on your PC, which connects to your coffeemaker.

A lot less exciting, I know, but that's life.

Take a look at this
#3 posted by Dan Author Profile Page, June 18, 2008 12:14 AM

Well, if you're the kind of person who needs their coffee networked and on the internet, something tells me you really deserve the hassles.

Take a look at this
#4 posted by noen , June 18, 2008 12:20 AM

The hassle is a feature. It adds to the mystique. Somewhere buried in it's code is a secret command to brew the most perfect cup of coffee ever.

Take a look at this
#5 posted by RJ , June 18, 2008 1:33 AM

I have a Mr. Coffee from circa 1972 that I still use. It has no clock, no strength settings or anything. Compared to modern machines, it's rather primitive. But it still brews a consistently good pot of coffee.

Who the blazing hell needs their COFFEE MACHINE to be online? The most I could ever imagine needing would be a timer to go off in the morning to start the brewing process.

Does this mean I'm getting old, or is it just that this idiotic machine has crossed my bullsh!t threshold? Maybe a little of both...

Take a look at this

I prefer my coffee machine like my men...subservient and able to make a damn good cup of coffee.

Take a look at this

I'd like to think that the "installed base" of super-expensive over-featured gadgets like this is, say, in the single digits. But I fear that I'd be very wrong.

Take a look at this

I always found it ironic that the $2999 (!?) Jura coffee machine (at least that's what it costs at "Sur la Table") is named after the region of France where the socialist-anarchist Gustave Corbet grew up.
For that price you can fly to Paris and sit in an actual cafe and drink 500 cups of coffee served to you by a variety of cute waiters while people-watching and reading a good book.

Take a look at this

I should own up to considering this machine. However I don't think it was anything like $2999 here in Europe.

I went for a Gaggia one instead which can be programmed offline the old fashioned way, using a jog dial and LCD display.

Take a look at this

Right on #8.

Take a look at this

How long until the RIAA issues files a lawsuit against a coffeemaker for music downloads?

Take a look at this
#12 posted by Anonymous , June 18, 2008 7:17 AM

Sounds like it's not using the Hyper Text Coffee Pot Control Protocol.

Take a look at this

if you have a good filter on your internet connection, you should be ok.

I'd recommend gold mesh, or at least unbleached paper cones.

Take a look at this

French Press. That's the way.

This machine is cool only if you think your coffee will get better if humans aren't involved. My experince has been the opposite.

Take a look at this
#15 posted by takeshi , June 18, 2008 9:53 AM

@ Baldhead:

I like a good French press, but I must admit that my $300 Cuisinart kicks so much ass, I could never go back to an older model.

For starters, it has a reservoir, which allows the end user to start drinking coffee from the moment it begins brewing. And for closers, it makes like two gallons at a time, very quickly.

Take a look at this

1_ It's a fully automatic espresso machine, which doesn't make good coffee to start with.

2_ You don't need a computer to do a DoC on this thing - they're known to break a lot and need constant repair.

Take a look at this

Is the software java-based?

Take a look at this

#12 & #16. Those comments are grounds for disciplinary action!

Take a look at this

A friend passed on a funny story to me about one of these. The CEO of his previous company was very into the gadgetry, and he bought one of these networked coffeemakers for his office to use. It was installed, but workers' print jobs promptly stopped working. Apparently some wires had gotten crossed somewhere, and print commands were being re-routed to the coffeemaker. The e-mail sent to the employees to notify them that their printing problems were solved also invited them to come claim the cups of coffee that they had inadvertently ordered!

Post a comment

Anonymous