Monday, July 8, 2024

I believe that this is the first BBQ security vulnerability

Oops:

Keen meatheads better hope they haven't angered any cybersecurity folk before allowing their Traeger grills to update because a new high-severity vulnerability could be used for all kinds of high jinks.

With summer in full swing in the northern hemisphere, it means BBQ season is upon us, and with Traeger being one of the most trusted brands in grilling and smoking, there's a good chance that many backyard cookouts could be ruined if crafty crims have their way.

Nick Cerne, security consultant at Bishop Fox, discovered a few weaknesses in certain Traeger grills, ones that have the Traeger Grill D2 Wi-Fi Controller installed – an embedded device allowing a grill to be controlled using a mobile app.

Successful exploits could allow a remote attacker to execute day-ruining commands such as temperature change controls or shutting down the grill altogether.

I think that we can all agree that the definition of a Black Hat hacker is someone who changes the temperature on your smoking briskit to 400 degrees ...

But put a computer in it, expect security bugs.

 

 

14 comments:

  1. Eventually, people will learn. Invest in analogue, it's a bright, unhackable, future. The "cloud" and digital universe, is Satan's AO, among others.

    ReplyDelete
  2. Agreed, Mike.

    Cast iron and charcoal, men - it’s the only way to go.

    ReplyDelete
  3. You mean to tell me there are people out there who would take the time to do that and go home calling their day a Win? How many times do they make the block to see if The Victim figures out the grill has gone rogue and is trying to incinerate our burgers,hotdogs and sausages? Do they mourn if they fail?
    Good grief,, what America has come to.

    ReplyDelete
  4. Meh. No big deal.
    I've had a Treager for years.
    You don't need a firmware bug for it to constantly screw up the temperature, turn off without warning, or have the screen and knob stop working.

    ReplyDelete
  5. have the screen and knob stop working.

    Ohh,Yeah, I've had a wife like that.

    ReplyDelete
  6. Hmmm. Remember that story where hackers got into a Las Vegas casino by hacking their fish tank? The tank had internet-connected sensors measuring its temperature and cleanliness. The hackers got into the fish tank’s sensors and then to the computer used to control them, and from there to other parts of the casino’s network. The intruders were able to copy 10 gigabytes of data to somewhere in Finland.

    https://www.washingtonpost.com/news/innovations/wp/2017/07/21/how-a-fish-tank-helped-hack-a-casino/

    Or how about the one you did back in '17 on the Roombas being hacked to get maps of homes to "share with commercial partners"?

    I wonder if the goal here isn't to ruin your brisket and your holiday, but to get into your home's WiFi network and then to get to considerably more valuable things.

    ReplyDelete
  7. Smoking & grilling- possibly the two oldest methods of cooking meat known to man, do not need a computer to accomplish the mission. But hey! Let’s screw it up anyway!

    ReplyDelete
  8. You need a computer for THAT????

    ReplyDelete
  9. Pete, the pellet grills/smokers all have a computerized pellet feeders that keep the temperature really steady. People start them up first thing and let them run all day. The issue here is that your smoker connects to your WiFi so the app on your phone can get status. Of course, security wasn't an after thought, it wasn't thought of at all.

    ReplyDelete
  10. Brisket @400 degrees? That's what you get for drinking Bud Light in front of the BBQ wifi controller's camera.

    ReplyDelete
  11. I can't find out how to plug in my Weber Smokey Mountain smoker, guess I'll just keep using it broken. Seems to work just fine.

    ReplyDelete
  12. Hackers:
    Knock yourself out.

    https://i.imgur.com/uaU2RMg.jpg

    ReplyDelete
  13. Call me when the computer-controlled grill knows how to make smores...

    ReplyDelete

Remember your manners when you post. Anonymous comments are not allowed because of the plague of spam comments.