SoylentNews is people
SoylentNews is powered by your submissions, so send in your scoop. Only 12 submissions in the queue.
SoylentNews
Ken Munro of Pen Test Partners describes his investigation of the AGA Total Control oven, which can be controlled remotely with an app, via GSM. Munro found that:
- the app uses HTTP rather than SSL
- there was a potential for telephone numbers associated with the ovens to be enumerated
- the app allowed passwords as short as five characters
- "it would be trivial" to turn someone else's oven on and off
- the control system could be misused to send SMS messages to mobile phones
According to the researcher,
Disclosure was a train wreck. We tried Twitter, every email address we could find and then rang them up. No response to any of the messages we left.
additional coverage:
This discussion has been archived.
No new comments can be posted.
Vulnerabilities in AGA Total Control Electric Oven
|
Log In/Create an Account
| Top
| 25 comments
| Search Discussion
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
"Consider a spherical bear, in simple harmonic motion..."
-- Professor in the UCB physics department
(Score: 2) by kaszz on Saturday April 15 2017, @01:28AM
It's more a expression of people wanting to do other things than maneuvering appliances. And of course a insane culture of work is everything, living is best reduced to some sick years before dying..