[xssfox] recently found a Cricut Maker in an e-waste disposal. A quick scan over the device indicated it was in moderately good condition, with merely some perished rollers to contend …read more

  • PineRune@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    ·
    4 天前

    TLDR:

    Thus, attention turned to intercepting communications between the machine and the host PC over USB. This revealed the machine sending its serial number to the Cricut PC software in plain text with no checksums or encryption at all. Unlocking the machine was as easy as installing an RP2040 in between the Cricut Maker and the host PC. It was programmed to relay packets between the two and spoof the serial number in the process.

    Pretty short article. I’m not sure why OP’s text is so short and cut off mid sentence. (Looks like their account is listed as a bot, so just auto-posting scraped content).