Carding Forum
Professional
- Messages
- 2,788
- Reaction score
- 1,223
- Points
- 113
How a broken washing machine led to a hacker discovery.
Michael Orlitsky encountered problems in the laundry room of his home. CSC Serviceworks has replaced all the old machines with new ones that work either through a coin receiver or through an app. Older machines used card readers, which often failed, but new machines also had problems.
When one of the new machines swallowed up the coins and got stuck in the washing process, Michael had to pay another $2 for another machine. After an hour of waiting on the CSC support line, Orlitsky was sent to the company's website, demanding to install the CSC app for a refund. At this point, Orlitsky decided that " the laundry will be free."
Orlitsky discovered several ways to bypass the CSC system and wash clothes for free. He described his methods on his personal website a year ago, but didn't share them on social media. In August, Michael is scheduled to speak at the DEF CON conference, where he will talk about how he found ways to use CSC washing machines for free.
Orlitsky tried not to damage the equipment during the experiment. He studied the Speed Queen machines from Alliance Laundry Systems by removing the service panel of the dryer. For washing machines, you had to pick the lock on the front panel or order a key on the Alliance Laundry Systems website.
Orlitsky also studied a lot of operating manuals and found out that the machines record the opening time of the service door. CSC probably also has opening records. In the course of his experiments, Orlitsky found several methods that did not work, but he found that shorting the red and black wires on the coin mechanism effectively turned off the washing fee. The situation is similar with dryers. The process of" hacking " itself takes only a few seconds. CSC Serviceworks did not respond to a request for comment, and Orlitsky himself did not receive any messages from the company.
Previously, CSC Serviceworks washing machines have already attracted attention when students from the United States identified a vulnerability in the laundry payment system that allows anyone to use the machines for free.
Source
Michael Orlitsky encountered problems in the laundry room of his home. CSC Serviceworks has replaced all the old machines with new ones that work either through a coin receiver or through an app. Older machines used card readers, which often failed, but new machines also had problems.
When one of the new machines swallowed up the coins and got stuck in the washing process, Michael had to pay another $2 for another machine. After an hour of waiting on the CSC support line, Orlitsky was sent to the company's website, demanding to install the CSC app for a refund. At this point, Orlitsky decided that " the laundry will be free."
Orlitsky discovered several ways to bypass the CSC system and wash clothes for free. He described his methods on his personal website a year ago, but didn't share them on social media. In August, Michael is scheduled to speak at the DEF CON conference, where he will talk about how he found ways to use CSC washing machines for free.
Orlitsky tried not to damage the equipment during the experiment. He studied the Speed Queen machines from Alliance Laundry Systems by removing the service panel of the dryer. For washing machines, you had to pick the lock on the front panel or order a key on the Alliance Laundry Systems website.
Orlitsky also studied a lot of operating manuals and found out that the machines record the opening time of the service door. CSC probably also has opening records. In the course of his experiments, Orlitsky found several methods that did not work, but he found that shorting the red and black wires on the coin mechanism effectively turned off the washing fee. The situation is similar with dryers. The process of" hacking " itself takes only a few seconds. CSC Serviceworks did not respond to a request for comment, and Orlitsky himself did not receive any messages from the company.
Previously, CSC Serviceworks washing machines have already attracted attention when students from the United States identified a vulnerability in the laundry payment system that allows anyone to use the machines for free.
Source
