Urgent.News

One page, thousands of outlets. See who else covered it.

Editions

Tech

Unlocking a locked/deactivated e-waste Cricut Maker

The Cricut Maker was discovered in e-waste, displaying cosmetic damage aside from its broken rollers. It was suspected that this was the reason for its disposal, prompting the author to bring it home for examination. Cricut is known for disabling or locking machines, but the author was keen to explore the possibility of restoring its functionality.

Upon confirming the machine's lock status, the author proceeded to implement a solution. The last user had likely received a warranty replacement or a discount for a newer model. Replacement rollers were easily accessible and inexpensive. Despite powering the device with 12V instead of the required 18V, the Cricut Maker exhibited responsiveness with a successful self-test and communication with the software.

Upon attempting to bypass the software deactivation, challenges arose due to encryption measures. The author then focused on intercepting the USB communication between the Cricut and the computer. Utilizing a Raspberry Pi RP2040 and TinyUSB Arduino examples, the author devised a proxy/rewriting device capable of modifying the serial number.

This alteration enabled the software to recognize the machine as if it were legitimate. The serial numbers are sequentially assigned, and the status of all units can be monitored on Cricut's website. The rewritten serial number allowed the device to function as if it were registered under the author's account. The completed restoration involved cleaning the Cricut, replacing the rollers using hot water, reassembling the machine, and adding a protective case for the RP2040.

While this process is not the most user-friendly, it successfully revived the Cricut Maker. Alternative approaches were considered, such as employing software-only solutions, but the author opted to utilize the hardware-based method. The code required for serial number modification was not shared due to potential legal considerations under Australian Copyright law.

Written by urgent.news from Hacker News's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at sprocketfox.io →

More in Tech

The Cognito war stories: four ways it breaks an MCP server, and the fix for each

If you are putting Amazon Cognito behind a remote MCP server, here are four specific ways it will break the connector before you ever reach your own code - each with the symptom, the reason, and the…

  • Cognito rejects RFC 8707 resource indicators, breaking MCP server authentication
  • Cognito access tokens lack aud claim, complicating audience validation
  • Managed Login v2 requires client branding styles, causing login page unavailability

More from Wednesday 19 August →