Compromise a coffee machine

Just found via heise: The Jura F90 Coffee machine’s connectivity kit which “enables [the communication] with the Internet, via a PC [to] download parameters to configure [the] espresso machine to your own personal taste” seems to have some security problems:

The connectivity kit uses the connectivity of the PC it is running on to connect the coffee machine to the internet. This allows a remote coffee machine “engineer” to diagnose any problems and to remotely do a preliminary service.

Best yet, the software allows a remote attacker to gain access to the Windows XP system it is running on at the level of the user.

(Source)

So next time your coffee is too strong or too weak – look out for nearby hackers!