Archive link

Michael Orlitzky was not having a good day with his laundry. First CSC Serviceworks, a laundry management company, replaced all of the machines in his building with new coin-op or app-powered ones. The card reading machines had been an issue for years because the cards would stop working and the recharge machine would steal dollar bills, Orlitzky said. Now he had another enemy with its own quirks to get used to. Plus, CSC had replaced the machines about a week ahead of schedule, meaning that any cash on his or others’ laundry cards was now worthless and unusable.

Then, one of the new machines ate his quarters. The first machine was stuck on the cold setting, and he had to pay another $2 and move all of his belongings to another machine. He called CSC customer service and was on hold for an hour. CSC eventually told him to get a refund through the company’s website, which in turn insisted he install CSC’s app to proceed.

“That was the day I decided laundry would be free,” Orlitzky told 404 Media in an email.

Orlitzky then discovered multiple bypasses to CSC machines that allow him to wash his clothes for free. Since then, he’s been pretty quiet about the whole thing. Orlitzky published a brief write-up of his escapades on his personal website last year, but hasn’t shared it on social media. Some people in his building know his secret, but that’s about it. That is, until now, with Orlitzky due to speak at the DEF CON hacker conference in August about how he found infinite money cheats for CSC laundry machines. The talk is called “Laundering Money.”

  • Admiral Patrick@dubvee.org
    link
    fedilink
    English
    arrow-up
    99
    ·
    edit-2
    4 months ago

    CSC eventually told him to get a refund through the company’s website, which in turn insisted he install CSC’s app to proceed.

    That should be illegal. I already refuse to install most apps, and I certainly won’t install one for absolute basic customer support purposes.

    Lol, like, I hit a deer a few years ago. Insurance wanted me to download their app, walk around my car and take pictures, and they’d send me a check the next day. Nope. I made them send an adjustor. I’m that dedicated to not installing apps. 😆

    • xor@infosec.pub
      link
      fedilink
      arrow-up
      43
      ·
      4 months ago

      give me an app that doesn’t touch any other part of my phone and doesn’t require signing some 300 pages of terms of service where i agree to be a human centipede… then maybe

      • Admiral Patrick@dubvee.org
        link
        fedilink
        English
        arrow-up
        27
        ·
        4 months ago

        Right?

        I offered to take photos at the angles they wanted and email them to my agent, but they said it had to go through the app. I’m pretty sure the adjustor that came out used the same app, but hey, that’s his (work?) phone, not mine. Nor is it my personal info I’m signing away the rights to by clicking “agree”.

        • BCsven
          link
          fedilink
          arrow-up
          14
          ·
          4 months ago

          Some of those type apps build a 3d image from multiple photos, it helps get a full assessment of damage and location. There used to be a great free one on android, but the company eventually moved it to a corporate website paid service. I was able to take several rounds of photos of my salad bowl, it sent it to the cloud to be processed then you get a 3d colourized STL file back that you can bring into CAD etc. the detail of the lettuce waa amazing. This was before LIDAR on cellphones too

          • KomfortablesKissen@discuss.tchncs.de
            link
            fedilink
            arrow-up
            7
            ·
            edit-2
            4 months ago

            I’m really sceptical an insurance app can do that. And even if it does work, what’s stopping them from taking the photos from the mail (Don’t start with data protection, if they really want to they can give me a link to upload stuff; or a key to encrypt the mail)?

            I agree that an app would be a better user experience. If it would refrain from sending any kind of data other than the photos. Also the photos need to be only the pictures, no EXIF or other stuff.

            Also LIDAR in phones? I need to read up on this.

            Edit: ah, apple only. Welp.

            • BCsven
              link
              fedilink
              arrow-up
              3
              ·
              4 months ago

              Oh I totally agree with protecting privacy, I was just explaining why they may want app use…because the tech is there for 3d use…not in the app persay but via cloud processing. More than likely it makes their job easy since photos go into the database with claim number and location data all filled in without them doing any labour

      • 14th_cylon@lemm.ee
        link
        fedilink
        arrow-up
        12
        ·
        4 months ago

        and doesn’t mine bitcoin in background, or isn’t so terribly written it seems it does that even if it doesn’t.

        that being said, is there anything that prevents michael to have his own washing machine in his own apartment? is there some strange american rule that forbids that?

        • girlfreddyOP
          link
          fedilink
          arrow-up
          14
          ·
          4 months ago

          Lots of places forbide it, on the off chance it floods the unit. There’s also the thing (when renting an older unit) where water usage is included in the rent … and they don’t want you using more than they allot in their assessments.

          Can’t have anyone dipping into their profits.

        • xor@infosec.pub
          link
          fedilink
          arrow-up
          7
          ·
          4 months ago

          well aside from it taking up a lot of space and making a lot of noise, there’s a water and gas line hookup that probably requires permission….
          but they do make really small ones that can only do a couple garments at a time.
          usually marketed for long haul truck drivers….

      • CanadaPlus@lemmy.sdf.org
        link
        fedilink
        arrow-up
        12
        ·
        4 months ago

        300 pages of terms of service where i agree to be a human centipede

        Oh my god, that’s exactly what it’s like. I’m borrowing that one.

    • smeg@feddit.uk
      link
      fedilink
      English
      arrow-up
      17
      ·
      4 months ago

      “Download our app!”

      “Oh, I don’t have a smartphone.”

      • Admiral Patrick@dubvee.org
        link
        fedilink
        English
        arrow-up
        12
        ·
        4 months ago

        My current phone is about 8 years old and long overdue for replacement. If I can find a dumb phone that can also act as a hotspot, that’s probably going to be my “upgrade”.

    • FiveMacs
      link
      fedilink
      arrow-up
      12
      ·
      4 months ago

      Lol there’s rental companies here FORCING you to download their app to pay your rent. Can’t even give em cash or a check…has to be done through their app.

  • bjorney
    link
    fedilink
    arrow-up
    78
    ·
    4 months ago

    lol. Did this in my old building - the dryer was on an improperly rated circuit and the breaker would trip half the time, eating my money and leaving wet clothes.

    It was one of the old, “insert coin, push metal chute in” types. Turns out you could bend a coat hanger and fish it through a hole in the back to engage the lever that the push-mechanism was supposed to engage. Showed everyone in the building.

    The landlord came by the building a month later and asked why there was no money in the machines, I told him “we all started going to the laundromat down the street because it was cheaper”

  • walden@sub.wetshaving.social
    link
    fedilink
    arrow-up
    51
    ·
    4 months ago

    This quote is hilarious.

    CSC probably has a record of someone opening up the machine. “My personal stance on that is suck my diiiiiiiick, but feel free to perform your own risk assessment,” Orlitzky writes.

  • thingsiplay@beehaw.org
    link
    fedilink
    arrow-up
    19
    arrow-down
    1
    ·
    4 months ago

    He was hacking the machine. But isn’t it stealing and illegal, if he short circuit the machine? I mean its like showing someone how to get free apple, by going in a shop and stealing without anyone notices it. Or by hacking into a server and ordering a meal for free. I don’t see how this is any different.

    • Vodulas [they/them]@beehaw.org
      link
      fedilink
      arrow-up
      36
      ·
      4 months ago

      Meh, it is illegal, but personally I don’t find it immoral. Laundry machines like this are just another way for landlords to extract money from their tenants for basic needs. They have them in a captive situation and should be providing either hookups in unit or free laundry facilities.

      • Admetus@sopuli.xyz
        link
        fedilink
        arrow-up
        10
        ·
        4 months ago

        ‘Free laundry machines’ could essentially be included in the rent, provided laundry machines are used properly and intentional damage paid for. I would be okay with CCTV being employed to ensure this. An extra $10 for water usage, and everyone uses their own detergent.

        But does that make sense for capitalists?

        • Vodulas [they/them]@beehaw.org
          link
          fedilink
          arrow-up
          10
          ·
          edit-2
          4 months ago

          For me, rents are already pure profit for most apartment buildings, so they should just include it. I do agree there would need to be some incentive to keep them in order, but CCTV seems a little invasive. Not sure what the answer is, but I don’t think landlords would do it any how

          Edit: By “For me” I meant in my opinion, not that I run apartments. Tired brain…

          • Admetus@sopuli.xyz
            link
            fedilink
            arrow-up
            1
            ·
            4 months ago

            Profit 😕

            I agree CCTV is a bit invasive…depends on the tenants! If I were a landlord with some tenants of concern, I’d have washing machines facing away from CCTV so no laundry is on camera!

      • thingsiplay@beehaw.org
        link
        fedilink
        arrow-up
        4
        arrow-down
        1
        ·
        4 months ago

        That’s a different issue. The machine was obviously defective, not stealing your money. And even if someone steal from you, doesn’t change the fact you stole too. Someone doing something illegal does not give you the rights doing something illegal too.

        • terminhell@lemmy.dbzer0.com
          link
          fedilink
          arrow-up
          12
          ·
          4 months ago

          And to a point I agree. But the way the story reads, it sounds like not much was done with the new machines after installation. We’ve all had money taken from faulty vending machines. But the stakes are slightly higher in this.

          • thingsiplay@beehaw.org
            link
            fedilink
            arrow-up
            4
            arrow-down
            1
            ·
            4 months ago

            But isn’t he abusing it further than just getting his money back? If you know a weak point on a machine and use it just so you give yourself the right to abuse it, is criminal in my opinion. The first time is probably an accident and taking back what is his own. Now he has the knowledge and is going with the intention to abuse a defect.

            Let’s say a shop website has an issue and one time the site was faulty and did take your money without anything in return. Then the hacker decides to break the law and get his money back, somewhat understandable, but not legally right. Still stealing. Then he realizes this loophole would be abused to make more money and nobody would notice. That’s not okay anymore.

            Or do I read it wrong here? The above analogy hopefully explains how I view this situation.

            • jarfil@beehaw.org
              link
              fedilink
              arrow-up
              12
              ·
              4 months ago

              Some businesses mess up… and understand that their clients need to feel like they’re being treated fairly in order to keep earning money from them, which means giving their money back, an apology, and maybe some free credit or discount coupons.

              Other businesses, think they can abuse their users freely… until they end up pissing the wrong guy. Sometimes it’s a guy with a spray can, sometimes it’s a guy with a brick, and sometimes it’s someone capable of abusing them back.

              You can call it illegal, it might even be morally wrong and excessive… but that’s what happens when you abuse people more than what they’re willing to take. Action and reaction, fuck around and find out, and all that.

            • ulterno@lemmy.kde.social
              link
              fedilink
              English
              arrow-up
              4
              ·
              4 months ago

              You’re right, but at the same time.

              Let’s say a website has an issue and was one time faulty. Clients lost money. Then the site owner is notified of the fault by multiple clients. The site owner uses some words to placate them and goes on with their day.

              The site owner then makes some changes to the site, meaning they did have the time and money to pay a developer to update the site, but decides to keep the previous bug in, as a feature, implemented in a different way, this time better at stealing their money.


              Sure, the obvious solution is to use another site (the laundromat down the road).


              Anti Commercial AI License - CC BY-NC-SA 4.0

    • Kissaki@beehaw.org
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      4 months ago

      It’s not the same kind of stealing as stealing an apple or meal. Those remove the product, the material in its entirety.

      The only devaluation washing does is in wear. And even less directly in the initial investment not being paid back upon use.

      That’s concerns outside of morals of course. But stealing products isnt equateable to stealing usage.

  • Railison@aussie.zone
    link
    fedilink
    English
    arrow-up
    15
    ·
    4 months ago

    If you have the room, you can often buy these second hand for a bargain from colleges etc. They’re built like tanks and you can wash almost anything inside them. When they do break, laundry operators try to DIY so there are videos everywhere on how to do repairs.

  • regul@lemm.ee
    link
    fedilink
    arrow-up
    15
    ·
    4 months ago

    If you have an older coin-op washer in your building you can usually look up the model number and either buy a master key or learn the default programming code to set the price.

  • ditty@lemm.ee
    link
    fedilink
    English
    arrow-up
    10
    ·
    4 months ago

    My apartment building also converted their coin machines to CSC Go, so I’ve been biding my time until he reveals this exploit. They’re $2.50 per wash cycle and $2.25 per dryer cycle, but if you do a big load it won’t get fully dried so you might need an extra cycle. It’s basically highway robbery even considering the water and electricity usage.

    • girlfreddyOP
      link
      fedilink
      arrow-up
      1
      ·
      4 months ago

      Tbf I don’t think CSC Serviceworks intentionally stole residents money. They just ignored the problems … like you’re doing rn.