Consumer electronics: the next market for Identity and Access Management software?  We just took a giant leap towards that reality with the availability of an “Internet connectivity kit” for the Jura F90 coffee maker.

We take an even larger step towards needing IdM at home when said “Internet connectivity kit” doesn’t require a username or password for remote logins.  Nor does it perform input validation when changing factory parameters.  We even have Bugtraq and Security Focus vuln posts.

To be fair, we are talking about a coffee machine here, so IdM might be overkill.  But if I paid Amazon $1800 for a coffee machine, I wouldn’t want some script kiddie shooting coffee beans at me from across the room, or worse yet — giving me a flat white, when I clearly pressed long black.

I can hear it now…

“Yes, IBM?  Can I get a Tivoli Access Manager license for 2 users?  My wife and I are going to use TAMeb for our coffee machine…”

Source: CrunchGear

Filed under: Security