Most coffee machines are not connected to the internet, but some of the newer models most certainly are. Martin Hron, a security researcher at Avast, managed to reverse engineer an internet-connected coffee machine and after a week of tinkering, he discovered that the machine could be remotely triggered to turn on the burner, display messages, activate the bean grinder as well as dispense water. The only way to stop all this chaos was to unplug the power cord. Read more for a video demonstration and additional information.
How did Hron discover these security holes? When the “Smarter” coffee maker was first plugged in, machine acted as a Wi-Fi access point that used an unsecured connection to communicate with a smartphone app. Since this connection was not encrypted encryption, it was an easy task to figure out how the smartphone controlled the coffee maker and how a rogue phone app could replicate these functions, especially since the firmware updates also did not require any authentication. So, Hron replicated this update process with a modified firmware update.
- THE BEST WAY TO START YOUR MORNING - Say hello to the smaller edition of your favorite Mueller Single Serve Coffee Maker. Fast and easy to use, this Muller Coffee Machine will make you the perfect cup of coffee any time of the day you want. Our compact design easily fits into tight spots or compliments any counter space.
- COMPATIBLE WITH ALL SINGLE CUPS - Designed to fit all 1.0 & 2.0 single coffee capsules, from now on you can make any type of coffee you want. For the best tasting coffee and superior quality, we recommend Schaffhauser Coffee Pods: Crema Forte, Lungo Dolcetto and Ristretto Potente. Choose your favorite flavor and you won't regret it!
- COMPACT & QUICK - Fastest brewing cycle on the market! Takes only 3 MINUTES to have your favorite coffee ready. 10oz water tank, supports standard sized and larger coffee cups (up to 4.1" tall). With removable drip tray, you can clean this coffee machine easily and make your delicious coffees without any mess.
- ONE-TOUCH BUTTON OPERATION - Our team specially designed the fastest and the easiest way to make delicious coffee with just - ONE BUTTON. Click the button for on/off operation. This coffee machine also features AUTO SHUT-OFF preventing the unit from overheating and keeping you safe.
- MUELLER'S MISSION - Our mission is to deliver simply superior products that improve people's lives!
- FITS ANYWHERE: Less than 5” wide, fits neatly on your countertop.
- MULTIPLE CUP WATER RESERVOIR: Removable 46 ounce reservoir lets you brew up to 4 cups before refilling. 8oz cup size
- 3 CUP SIZES: brew an 8, 10, or 12 ounce cup at the push of a button.
- FAST & FRESH BREWED: Delicious coffee made in minutes.
- TRAVEL MUG FRIENDLY: Removable drip tray accommodates travel mugs up to 7. 0” tall and holds a full accidental brew for easy cleanup.
It’s possible. It was done to point out that this did happen and could happen to other IoT devices. This is a good example of an out-of-the-box problem. You don’t have to configure anything. Usually, the vendors don’t think about this,” said Hron.