full-disclosure-uk January 2009 archive
Main Archive Page > Month Archives  > full-disclosure-uk archives
full-disclosure-uk: [Full-disclosure] Hackery Channel 01-09-01-L

[Full-disclosure] Hackery Channel 01-09-01-LOLZ: Cat Spoofing against Flow Control

From: hack ery <hackery.channel_at_nospam>
Date: Thu Jan 29 2009 - 23:04:53 GMT
To: full-disclosure@lists.grok.org.uk

Security Risk: High
Exploitable: Local
Vulnerability: Arbitrary Flow Control Control, Cat Spoofing Discovered by: The Hackery Channel
Tested: No

The Flow Control project is an access control project for a cat. It consists of a cat door, an electromagnetic latch, a access control device, and image recognition software that allows Flow to enter the house, and only when she is not carrying prey. When Flow is within proximity of the door, she passes through a light that casts a shadow on an area monitored by a camera. If the silouhette, appears to be Flow without prey, access is granted.

Cat Spoofing: An attacker could potentially gain access by posing as a kitty by placing a cut out of the kitty next to the light.

Mitigation: None.
Work around: Guard dog
Vendor Notified: No
Vendor Site: http://www.quantumpicture.com/Flo_Control/flo_control.htm

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/