<\/a><\/noindex><\/p>\nI couldn\u2019t sleep. It was 3:47 on my smartphone, but it was already quite light outside for summer. Yarik kicked off the edge of the blanket and sat up.<\/p>\n
<\/p>\n
\u2018I definitely won\u2019t get any sleep now,\u2019 he thought, scanning the room. A crumpled pair of jeans and a t-shirt were hanging on a chair in front of the couch, and a pile of clothes lay nearby. I really should do laundry. He walked over, picked up the t-shirt from the chair, brought it to his nose, sniffed it, and grimaced.<\/p>\n
<\/p>\n
\u2018Is this how I walk around the office? No wonder she avoids me.\u2019<\/p>\n
<\/p>\n
The new girl had started in the office recently and immediately caught Yaroslav\u2019s eye. Big green eyes and a short haircut. He remembered well the first time he saw her and their eyes met. Something strong thumped in his chest, shivers ran down his spine, and he awkwardly froze, afraid to look away. Her name was Irina, and she was the only thing keeping Yarik from leaving the tedious office.<\/p>\n
<\/p>\n
He tossed the t-shirt onto the pile of laundry. After thinking for a bit, he threw in the jeans as well. Gathering everything in his arms, he trudged to the bathroom and dropped the clothes next to the washing machine. The light turned on obediently in the bathroom, the washing machine door clicked, and opened slightly. He loaded the laundry into the drum, closed the door, and pressed the start button. The machine beeped, but didn\u2019t start. He pressed Start again. It only beeped once more. Yarik sighed and looked up:<\/p>\n
<\/p>\n
\u2014 Vika, what\u2019s wrong with the washing machine?<\/p>\n
<\/p>\n
\u2014 The device is functioning normally.<\/p>\n
<\/p>\n
\u2014 Then why won\u2019t it start?<\/p>\n
<\/p>\n
\u2014 According to government decree 197\/2 dated June 2, 2029, regarding the enforcement of Federal legislation on disturbing silence during night time and morning hours on weekends and holidays, the start is blocked until 7 AM.<\/p>\n
<\/p>\n
\u2018No, if I start the machine at 7, I won\u2019t make it to work\u2019 \u2014 thoughts of Irina and the sight of crumpled clothes in the washing machine door kept Yarik restless.<\/p>\n
<\/p>\n
\u2014 Vika, how do I hack the washing machine?<\/p>\n
<\/p>\n
\u2014 According to Federal law \u2026<\/p>\n
<\/p>\n
\u2014 Stop\u2026 switch to developer mode.<\/p>\n
<\/p>\n
\u2014 The system has been switched to developer mode.<\/p>\n
<\/p>\n
\u2014 System switched to developer mode.<\/p>\n
<\/p>\n
\u2014 List of vulnerabilities for washing machines.<\/p>\n
<\/p>\n
\u2014 A list of washing machine vulnerabilities and other similar materials are available in the diagnostics service for developers and household system security specialists by subscription only. Would you like to pay for a developer subscription?<\/p>\n
<\/p>\n
Yaroslav sighed heavily.<\/p>\n
<\/p>\n
\u2014 Is a trial period available?<\/p>\n
<\/p>\n
\u2014 A trial period is not provided. As a limited offer, you have access to a 24-hour trial for 299 rubles. The offer expires in 15 minutes.<\/p>\n
<\/p>\n
He pondered for a couple of seconds: \"Three hundred rubles \u2014 that's a lunch at the cafeteria\" \u2014 but, imagining Irina's face evaluating his outfit, he said:<\/p>\n
<\/p>\n
\u2014 Pay through Sberbank.<\/p>\n
<\/p>\n
\u2014 Please state your payment password.<\/p>\n
<\/p>\n
\u2014 Goodbye, Balblo.<\/p>\n
<\/p>\n
A smartphone chimed in the room.<\/p>\n
<\/p>\n
\u2014 Subscription payment has been successfully processed. Access granted for 24 hours.<\/p>\n
<\/p>\n
\u2014 So, Vika, request the system for the list of vulnerabilities for washing machines.<\/p>\n
<\/p>\n
\u2014 The system asks for the brand and model of the device.<\/p>\n
<\/p>\n
Yarik darted into the room for his smartphone and took a picture of the washing machine.<\/p>\n
<\/p>\n
\u2014 Vika, send the latest photo.<\/p>\n
<\/p>\n
\u2014 The photo has been uploaded, the brand and model have been recognized, and the geolocation data identified the location and serial number of the device. The diagnostics system suggests connecting to the device to scan for vulnerabilities.<\/p>\n
<\/p>\n
\u2014 Let it execute.<\/p>\n
<\/p>\n
\u2014 A device from an external network requests access to the washing machine. Grant access?<\/p>\n
<\/p>\n
\u2014 Of course!<\/p>\n
<\/p>\n
\u2014 To grant access, please state the code word.<\/p>\n
<\/p>\n
\u2014 Irina.<\/p>\n
<\/p>\n
\u2014 Access to the device has been granted. System scanning has begun. The process will take approximately ten minutes.<\/p>\n
<\/p>\n
The washing machine blinked rhythmically with lights. Yaroslav slowly moved to the kitchen, poured filtered water into the kettle, and set it to heat. He sat, listening to the water bubbling in the kettle and thinking about work. Just a month ago he was actively looking for a new job, but with the arrival of the new hire, he had lost all interest in changing jobs. Even job offer emails he now deleted without reading. The kettle clicked, and the hissing stopped. Yarik got up, took a mug, placed a tea bag in it, and poured hot water.<\/p>\n
<\/p>\n
\u2014 System scanning is complete. Four vulnerabilities found. Do you want to proceed with the update installation to fix them?<\/p>\n
<\/p>\n
\u2014 No! Delay the installation! \u2014 he almost dropped the mug in surprise.<\/p>\n
<\/p>\n
\u2014 The update installation has been postponed for 24 hours.<\/p>\n
<\/p>\n
Yarik sighed with relief. He needed to find a way to start the machine bypassing the lock.<\/p>\n
<\/p>\n
\u2014 Perform an analysis of current vulnerabilities for potential remote activation.<\/p>\n
<\/p>\n
\u2014 No vulnerabilities of this type have been discovered.<\/p>\n
<\/p>\n
Yaroslav pondered while sipping tea from his mug:<\/p>\n
<\/p>\n
\u2014 What vulnerabilities are currently not closed?<\/p>\n
<\/p>\n
\u2014 Currently, there are active vulnerabilities for the following systems: door lock systems, voice advertising playback systems, payment systems, and time synchronization systems.<\/p>\n
<\/p>\n
Out of all the mentioned, only the last vulnerability was of interest. He went to the kitchen and set the mug with the unfinished tea in the sink.<\/p>\n
<\/p>\n
\u2014 Vika, the description of the time synchronization vulnerability.<\/p>\n
<\/p>\n
\u2014 Vulnerability number 4126. This vulnerability allows for remote modification of the system time until the next synchronization session with the precise time service. Potentially vulnerable systems: voice advertising system, subscription payment system, and delayed start system.<\/p>\n
<\/p>\n
Yaroslav raised his eyebrows in surprise \u2014 'The delayed start system is an option.' He quickly moved back to the bathroom.<\/p>\n
<\/p>\n
\u2014 Vika, set the delayed start for the washing machine to 7 AM.<\/p>\n
<\/p>\n
\u2014 The delayed start has been set.<\/p>\n
<\/p>\n
\u2014 Switch the diagnostic system to test mode for the time synchronization vulnerability.<\/p>\n
<\/p>\n
\u2014 Transition completed.<\/p>\n
<\/p>\n
\u2014 Menu of available commands.<\/p>\n
<\/p>\n
\u2014 The command to increment the system time is available.<\/p>\n
<\/p>\n
Yaroslav looked at his smartphone. The clock read 4:15 \u2014 'So... we need to move the system clock forward by 2 hours and 45 minutes.'<\/p>\n
<\/p>\n
\u2014 Execute the command to increment the system time by 165 minutes.<\/p>\n
<\/p>\n
\u2014 Command executed.<\/p>\n
<\/p>\n
He stared at the washing machine. Nothing was happening. Perhaps the vulnerability code didn't trigger, or he miscalculated the increment. Yarik began to sort through options when suddenly the machine clicked loudly as the locking mechanism engaged and started drawing water for washing.<\/p>\n
<\/p>\n
He was in the room and lying on the sofa when the machine had already filled with water and began to slowly rotate the drum. Yaroslav leaned back on the pillow, stretched contentedly, and closed his eyes.<\/p>\n
<\/p>\n
\"Yes, that's why the boss calls me a 'hacker' \u2014 he thought and smiled.<\/p>\n
Source: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"\u0412 \u044d\u0442\u043e\u043c \u044e\u043c\u043e\u0440\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0435 \u044f \u0445\u043e\u0442\u0435\u043b \u043f\u043e\u0444\u0430\u043d\u0442\u0430\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u0442\u0435\u043c\u0443 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u043c\u043e\u0433 \u0431\u044b \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u0442\u044c «\u0432\u0437\u043b\u043e\u043c» \u0441\u0442\u0438\u0440\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0432 \u043d\u0435\u0434\u0430\u043b\u0451\u043a\u043e\u043c \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430, \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0432\u0435\u0437\u0434\u0435\u0441\u0443\u0449\u0435\u0433\u043e \u0434\u043e\u043d\u0430\u0442\u0430. \u041d\u0435 \u0441\u043f\u0430\u043b\u043e\u0441\u044c. \u041d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0435 3:47, \u043d\u043e \u0437\u0430 \u043b\u0435\u0442\u043d\u0438\u043c \u043e\u043a\u043d\u043e\u043c \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0432\u0435\u0442\u043b\u043e. \u042f\u0440\u0438\u043a \u0441\u043a\u0438\u043d\u0443\u043b \u0441 \u0441\u0435\u0431\u044f \u043d\u043e\u0433\u043e\u0439 \u043a\u0440\u0430\u0439 \u043e\u0434\u0435\u044f\u043b\u0430 \u0438 \u0441\u0435\u043b.* \u00ab\u041e\u043f\u044f\u0442\u044c \u043d\u0435 \u0432\u044b\u0441\u043f\u043b\u044e\u0441\u044c, \u0431\u0443\u0434\u0443 \u0445\u043e\u0434\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28111,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37461","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t
![\"\u2018Hacker\u2019\"](\"\/wp-content\/uploads\/2019\/08\/dbad798f695ac4e74722f0a3b7c890af.jpeg\")
<\/p>\n