Zack retweeted
The fact that the abbreviation MFA also stands for multi-factor authentication is the best joke about this
Hi @DanishMFA,
I am available for consulting.
RED TEAMING MY COFFEE MAKER:
I tried to clean my coffee maker. Apparently that requires an app. We put a computer and a network stack in a box that heats water, and somehow made cleaning it harder.
Fine. It’s a computer now. Let’s see what it’s doing on my network, what the app talks to, and how much infrastructure we apparently need to make coffee. Live findings and dead ends below 👇
Bluetooth pairing wasn’t enough. the coffee maker wanted application-level authentication too. found its existing pairing key in my own account, derived the eight-byte secret, and sent it. the status read that previously said “not permitted” now returns 40 0c 00 00 00 00 6b 00.






