Group items tagged

inding 1: Hard-Coded Bluetooth PIN *****Credit: Daniel Crowley of Trustwave SpiderLabs CVE: CVE-2013-4866 CWE: CWE-259 The "My Satis" Android application has a hard-coded Bluetooth PIN of "0000" as can be seen in the following line of decompiled code from the application: BluetoothDevice localBluetoothDevice = BluetoothManager.getInstance().execPairing(paramString, "0000") As such, any person using the "My Satis" application can control any Satis toilet. An attacker could simply download the "My Satis" application and use it to cause the toilet to repeatedly flush, raising the water usage and therefore utility cost to its owner. Attackers could cause the unit to unexpectedly open/close the lid, activate bidet or air-dry functions, causing discomfort or distress to user.

Best Buy leaks the new Nexus 7.

Google Event today!

The Samsung Galaxy Alpha, which is the company's answer to the iPhone in terms of both looks and specs, is officially launching in the United States later this month, exclusively at AT&T. First announced in August, the metal-framed phone (a departure from Samsung's plastic offerings) will be available online and from AT&T retailers beginning on Sept.