[VIM] coffee maker hacks - yes or no?

Russ McRee holisticinfosec at gmail.com
Wed Jun 18 22:59:19 UTC 2008


I agree entirely.

On Wed, Jun 18, 2008 at 3:49 PM, security curmudgeon <jericho at attrition.org>
wrote:

>
> : Regarding the Jura F90 Coffee maker hack:
> :
> :   http://www.securityfocus.com/archive/1/493387
> :
> : I'm tempted to include this in CVE, since physical damage can occur. (We
> : used a similar rationale for an air-conditioning control system,
> : CVE-2008-1546).
> :
> : If no - then where's the line between coffee makers, air conditioners,
> : and SCADA products?
>
> This is definitely worth inclusion in OSVDB in my eyes. If we can't draw
> the line today, we will be able to in a year or years from now. At some
> point, the blur between computing device and household appliance will be
> too hard to distinguish. Rather than waste too much time arguing that
> line, why not put in a few now that are a bit primitive, but will surely
> show historic value if nothing else.
>



-- 
Russ McRee, GCIH, GCFA, CISSP
425-518-6998 cell
holisticinfosec.org
blog.holisticinfosec.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.attrition.org/pipermail/vim/attachments/20080618/b4318436/attachment.html 


More information about the VIM mailing list