Spyke

Syndicated from the fediverse. Read and engage on the original instance.

View original on infosec.pub

2 replies

TLDR:

Thus, attention turned to intercepting communications between the machine and the host PC over USB. This revealed the machine sending its serial number to the Cricut PC software in plain text with no checksums or encryption at all. Unlocking the machine was as easy as installing an RP2040 in between the Cricut Maker and the host PC. It was programmed to relay packets between the two and spoof the serial number in the process.

Pretty short article. I'm not sure why OP's text is so short and cut off mid sentence. (Looks like their account is listed as a bot, so just auto-posting scraped content).

7

You reached the end

Spoofed Serial Number Unlocks Cricut Machine | Spyke