Slashdot Mirror
Keurig 2.0 Genuine K-Cup Spoofing Vulnerability
An anonymous reader writes A security researcher has released a humorous vulnerability description for the Keurig 2.0 coffee maker, which includes DRM designed to only brew Keurig brand coffe pods (K-Cups): "Keurig 2.0 Coffee Maker contains a vulnerability in which the authenticity of coffee pods, known as K-Cups, uses weak verification methods, which are subject to a spoofing attack through re-use of a previously verified K-Cup." The vulnerability description even includes mitigating controls, such as keeping the Keurig in a locked cabinet when not in use.
Also at Hackaday.
Holy fuck! These pirated K-Cups are going to hurt the whole industry!
I demand additional ineffective security procedures for my Nespresso machine. I'm completely ineffectively unprotected.
I should use this sig to advertise my book ISBN-13 : 978-1501515132.
Why in the hell would anybody buy a coffee maker that uses DRM to prevent using "non-genuine" coffee?
And here you are, posting on Slashdot...
Do not look into laser with remaining eye.
Considering the impact on the environment of pods that just ends up in the garbage there's now two reasons not to buy them.
OK, the coffee they make isn't bad, but what's wrong with an ordinary espresso machine?
If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
I can only imagine how expensive that must be. The last pair of double-D's set me back a fortune before it was all said and done. Although, they were nice.
1. Go to your favorite sore that carries coffee makers
2. Purchase a drip, french press or percolator, or whatever type I missed as per your wishes.
3. Buy some coffee at the same store. This may come as a shock to many people, but there is a large variety of typs of coffees out there. Different grinds, or grind your own - it is amazing I tell you, must be something new. Keurig is not the only company out there. I'm partial to a brand roasted in Philly, that I purchase from of all places, a diner in Rio Grande, New Jersey. But I digress.
Brew your own fucking coffee the way we used to do it when men were men, and the sheep knew to be respectful. Enjoy it on the patio, yelling at kids to get off the lawn.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
A malicious attacker could substitute toxic fake coffee or hot chocolate for the real thing.
A malicious attacker could also substitute a coffee or hot chocolate that is tainted with a chemical that creates slight etchings in the surface of the coffee cup or other cup used to hold the end product. For certain types of cups, the result will be a cup that will be more likely to harbor bacterial growth than one with a smooth surface. Assuming a successful attack, the risk of illness or fatality is low for a healthy adult but it might be significant for a person with a suppressed or compromised immune system.
Recommended mitigation:
Keep people who want to kill you away from your coffee maker.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
Here in Montreal some dude has a mushroom growing kit that grows on a bag filled with coffee grounds. They were the most intensely flavored mushrooms I ever tasted. I was like getting hit in the face by a boxing glove made of mushrooms.
Mostly random stuff.
Tassimo
Nespresso
Get free satoshi (Bitcoin) and Dogecoins
in the Java run time environment
My God can beat up your God. Just kidding...don't take offense. I know there's no God.
I was like getting hit in the face by a boxing glove made of mushrooms.
Sounds like they were some pretty good mushrooms. were you also at a pink floyd concert by chance?
have you seen my sig? there are many others like it but none that are the same
The way demonstrated in the video is a pretty ugly way to fix the problem, you have to constantly put your fake lid on top of the cup you make. Towards the back left side of the piece that lowers down there's some kind of small optical sensor that looks for the keurig border that's only on keurig cups -- if you peel the label off one you can cut out a small piece of just the border and tape it directly under the sensor -- you just have to make sure it's lined up the way it expects and you'll never have to futz with an extra lid again. Some quick scissor work and a piece of scotch tape and it's been going strong for probably around 2 months now.
Freedom Clip: Clips onto your Keurig over the DRM sensor hole so you don't have to mess with extra foil.
https://www.gourmet-coffee.com...
I use a French press, beans, and a grinder. Zero waste other than the grounds (and if I had a yard, I could compost them). The grinder's a hand-cranked model, so the only power used is to heat the water.
I've been making coffee this way for years, but never thought about the fact that it's also very conservative of resources until now.
And I despise the capsule-style makers on general principles; as for Keurig--if I won't accept DRM for my music and video, I sure am as fuck not going to accept it for my coffee.
Il n'y a pas de Planet B.