What happens when hackers open up everyday household appliances

Wnuck-Lipinski & Noerenberg · 39C3 · CC BY

Disabling washing machine safety checks in firmware

A researcher demonstrates the consequence of disabling safety bits in appliance firmware, triggering the door to pop open mid-wash and flood the room with water.

Disabling Washing Machine Safety Firmware

Cracking washing machine security with a microsecond timing attack

The presenter demonstrates how an unlock subroutine checks secret keys sequentially, creating measurable timing differences on an internal processor pin. A simple Python script brute-forces the secret diagnostic key in under 512 tries.

Bypassing Appliance Security with a Timing Attack

Dumping 'unreadable' washing machine firmware in 30 minutes

Using the cracked diagnostic unlock key, the presenter accesses hidden memory read commands on the washing machine motherboard. By connecting a basic UART adapter, the full mask ROM firmware is successfully dumped in 30 minutes.

Extracting Mask ROM Firmware via Arduino

The manufacturer really used 0x1234 and 0x5678 as secret keys.

The speaker converts the decimal diagnostic security keys discovered on a dishwasher into hexadecimal, revealing that the vendor used embarrassingly predictable sequential numbers.

Dishwasher Security Keys Turned Out to Be a Joke

Every machine shares the exact same secret key.

The speaker reveals that newer appliances rely on challenge-response authentication with a static key shared across every single machine manufactured.

The Flawed Security in Modern Appliances

After weeks of complex protocol reversing and custom tool building, the speaker reveals whether he actually solved the original household problem.

Did the Washing Machine Actually Get Fixed?

The presenter demonstrates building custom ESP32 hardware and an ESPHome integration to sniff internal washing machine bus traffic. The resulting Home Assistant dashboard displays hidden diagnostic data like real-time drum RPM and laundry imbalance.

Sniffing Washing Machine Telemetry into Home Assistant

Secret Easter egg found inside dishwasher firmware

While visually analyzing the firmware binary of a dishwasher floor projector module, the speaker adjusts pixel width to uncover hidden developer logos and humorous graphics baked into the code.

Finding a Secret Easter Egg in Dishwasher Firmware

Hacking a Miele washer into a Siemens app

Hackers reverse engineer proprietary smart home protocols to bridge two rival appliance makers, successfully displaying and triggering a Miele washing machine inside the Siemens Home Connect app.

Controlling a Miele Washer with a Competitor App

[02:38] Disabling Washing Machine Safety Firmware
[12:44] Bypassing Appliance Security with a Timing Attack
[13:53] Extracting Mask ROM Firmware via Arduino
[17:48] Dishwasher Security Keys Turned Out to Be a Joke
[21:06] The Flawed Security in Modern Appliances
[21:31] Did the Washing Machine Actually Get Fixed?
[30:39] Sniffing Washing Machine Telemetry into Home Assistant
[38:03] Finding a Secret Easter Egg in Dishwasher Firmware
[44:07] Controlling a Miele Washer with a Competitor App

What happens when hackers open up everyday household appliances

Explorer des sujets liés