1y ago

Two students uncover security bug that could let millions do their laundry for free

techcrunch.com

EXCLUSIVE: Two students uncover security bug that could let millions do their laundry for free

Laundry services giant CSC ServiceWorks ignored requests to fix a security bug.

14 comments

Snitches. Let the starving college students wear clean clothes.
I don't know if CSC's response is laziness or compassion.
- Definitely laziness. They already laid off or ended the contract of whichever fresh college grad from Jordan they had set up both the app and server for a couple hundred bucks, so while there's nobody to fix the flaws, there's also no ongoing maintenance costs, so they're not really losing any money.
This article is pointless, I mean it doesn't even have a step-by-step to make sure no one exploits it. I certainly would never use a bug in software to get free laundry.
- Sounds like it's just a super basic program with zero protection. If you can figure out what the "commands" are and how to send em, that's all you need.
Interesting article. I had a good chuckle thinking about college kids getting free clean clothes. The bit about adding several million dollars to their laundry account was also humorous. Too bad the company wiped out their account. They should have just left it there and fixed the security flaw as a way to say thanks for the heads up. Like you saved us a ton of money, keep your several million dollars and have free laundry for life LOL. Not quite the run of the mill security flaw I would have been expecting to read about
Wait, are CSC Service Works paying for the electric, laundry detergent, etc... or is this just a convoluted way of leasing the use of a washing machine?
- You've never used a Laundromat?
  
  Yeah, we don't have laundromats in my country except for student housing and similar facilities. Laundry machines are ubiquitous in houses and apartments, even the small crappy ones.
  
  Is that a wired concept?
The bad side of this is if someone was to zero out all balances of every user. I wonder if it is possible to do that or just add to the balance. And let's go worse, sending every balance to negative (because they could be too lazy to check for this).

14 comments