Nespresso Smart Cards Brewed with Weak Security

guest · Feb 8, 2021

Nespresso Smart Cards Brewed with Weak Security
A researcher hacked Nespresso Pro smart cards to dispense free, unlimited coffee.
February 4, 2021
https://threatpost.com/nespresso-smart-cards-weak-security/163675/

Researchers have demonstrated how to outsmart Nespresso Pro machines that use certain smart cards, hacking them to dispense coffee on-demand.

Nespresso produces a range of coffees and machines for personal and professional use. Some of the commercial machines accept Mifare Classic stored-value smart cards, which allow users to load money onto the cards to use in the machines. The cards however have been widely panned as lacking in security for at least the past 12 years. In 2008, a paper entitled Dismantling Mifare Classic was published, flagging many issues.
Click to expand...

To fix the bug, Vanhoof explained Nespresso users should upgrade their smart cards. He added that updating the machines so that money values are stored on a centralized server, rather than the card itself, would be a big improvement.

“After talking to Nespresso, it seems they already offer both of these options,” Vanhoof said. “Clients concerned with the security of their systems should look into these alternatives.”
Click to expand...

Log in or Sign up

Nespresso Smart Cards Brewed with Weak Security

guest Guest

Log in or Sign up

Nespresso Smart Cards Brewed with Weak Security

guest Guest

Useful Searches