Two students find security bug that could let millions do laundry for free

Two University of California, Santa Cruz students discovered a security flaw in internet-connected washing machines managed by CSC ServiceWorks, potentially allowing free laundry services across multiple countries. The students, Alexander Sherbrooke and Iakov Taranenko, manipulated an API to control the machines remotely without payment.

Despite reporting the vulnerability to CSC ServiceWorks in January, the company did not respond, leading the students to publicize their findings. The issue highlights ongoing security concerns with internet-connected devices, underscoring the importance of responsive and responsible management by companies to prevent exploitation. CSC ServiceWorks has yet to comment on the matter.