HeadlinesBriefing favicon HeadlinesBriefing.com

Hobbyist Unlocks Deactivated Cricut Maker via USB Hack

Hacker News •
×

A hobbyist discovered a locked Cricut Maker in e-waste and managed to restore full functionality through hardware-level hacking. The machine showed a "Machine deactivated" message despite passing self-tests. Initial attempts to find an EEPROM on the motherboard proved unsuccessful, and intercepting network traffic was complicated by certificate pinning.

The breakthrough came by capturing USB CDC communications between the cutter and computer using Wireshark, revealing unencrypted serial number packets. Using a Raspberry Pi RP2040 overclocked to 240MHz, the hacker built a USB proxy device that intercepted and replaced the machine's serial number with a valid one. This allowed the deactivated unit to appear as functional in Cricut's official software and account system.

The approach exposed potential security vulnerabilities, as random serial numbers could be registered to arbitrary accounts. After replacing worn rollers and reassembling the device, the Cricut operated like new. While the method is complex, the author noted simpler software-based alternatives exist, such as patching the application or writing custom drivers.