Slashdot Mirror

← Back to Stories (view on slashdot.org)

Also Hackable: Drive-Through Car Washes

Posted by Soulskill on from the not-everything-needs-a-web-interface dept.

PLAR writes It turns out LaserWash automatic car washes can be easily hacked via the Internet to get a free wash or to manipulate the machines that clean the cars, a security researcher has found. Billy Rios says these car washes have web interfaces with weak/default passwords which, if obtained, could allow an attacker to telnet in and use an HTTP GET request to control the machines. Rios adds that this probably isn't the only car wash brand that's vulnerable.

5 of 103 comments (clear)

  1. Embedded systems devs by Anonymous Coward · · Score: 2, Insightful

    Embedded system developers suck at all things internet, especially security.

    1. Re:Embedded systems devs by kwbauer · · Score: 1, Insightful

      Oh yes, the old "you failed because you didn't account for your product to be used in ways it was never intended to be used" reasoning. Many a good company has been bankrupted because juries have been convinced that your statement is actually logical.

  2. Some things do not belong on the Internet by davidwr · · Score: 4, Insightful

    Some things just should never be put "on the Internet."

    If you must have remote access, either use a dedicated physical connection (with appropriate anti-tampering/tamper-mitigation measures of course) or tunnel them through a rock-solid VPN, but for goodness sake don't put them "on the Internet."

    Yes, companies that run industrial equipment, traffic lights, etc., I'm looking at you too.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
    1. Re:Some things do not belong on the Internet by nitehawk214 · · Score: 4, Insightful

      So, you can't stick a credit card into the thing. And when it breaks down nobody gets alerted.

      Traffic lights: No ability to know when they are working or not, no way to synchronize lights across the city.

      Think about it. Devices need to be connected. Security isn't hard, companies need to start giving a shit about it.

      --
      I'm a good cook. I'm a fantastic eater. - Steven Brust
  3. Re:What? BMW through the brush wash? by JaredOfEuropa · · Score: 2, Insightful

    [anyoldlameexcuse] will void the warranty if they can get away with it.

    --
    If construction was anything like programming, an incorrectly fitted lock would bring down the entire building...