Jailbroken coin-operated washing machines unlock unlimited free cycles and millions in funds — unpatched security vulnerability could also pose a fire hazard
by from Tomshardware on (#6MX92)
Sherbrooke and Taranenko of UC Santa Cruz found a flaw in the CSC Serviceworks app called CSC Go, where it has a flawed API allowing a custom script to authorize free laundry cycles, add credits to the account, and bypass its safety checks, potentially making its internet-connected washing machines a fire hazard.