Jailbroken coin-operated washing machines unlock unlimited free cycles and millions in funds — unpatched security vulnerability could also pose a fire hazard

Sherbrooke and Taranenko of UC Santa Cruz found a flaw in the CSC Serviceworks app called CSC Go, where it has a flawed API allowing a custom script to authorize free laundry cycles, add credits to the account, and bypass its safety checks, potentially making its internet-connected washing machines a fire hazard. 

Sherbrooke and Taranenko of UC Santa Cruz found a flaw in the CSC Serviceworks app called CSC Go, where it has a flawed API allowing a custom script to authorize free laundry cycles, add credits to the account, and bypass its safety checks, potentially making its internet-connected washing machines a fire hazard.