this post was submitted on 12 Aug 2024
224 points (98.7% liked)

Technology

59569 readers
3825 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

Malicious hackers can take over control of vacuum and lawn mower robots made by Ecovacs to spy on their owners using the devices’ cameras and microphones, new research has found.

Security researchers Dennis Giese and Braelynn are due to speak at the Def Con hacking conference on Saturday detailing their research into Ecovacs robots. When they analyzed several Ecovacs products, the two researchers found a number of issues that can be abused to hack the robots via Bluetooth and surreptitiously switch on microphones and cameras remotely.

“Their security was really, really, really, really bad,” Giese told TechCrunch in an interview ahead of the talk.

The researchers said they reached out to Ecovacs to report the vulnerabilities but never heard back from the company, and believe the vulnerabilities are still not fixed and could be exploited by hackers.

you are viewing a single comment's thread
view the rest of the comments
[–] zaphod@sopuli.xyz 58 points 3 months ago (20 children)

Am I the only one who thinks vacuums, washing machines, fridges and so on shouldn't be connected to the internet?

[–] Lifecoach5000@lemmy.world 8 points 3 months ago (8 children)

I’m not super happy about it, but my roomba is absolutely essential now that I’ve been spoiled with it. I don’t like the idea of any of my appliances being online straight tied to a vendor’s app and service - but I’m willing to accept the trade off in this instance. Maybe someday I’ll upgrade to a different robot vac. I know there are FOSS setups to work around some of those challenges and circumvent some of the BS.

[–] skyspydude1@lemmy.world 3 points 3 months ago

The good news with iRobot is that they actually have pretty solid cybersecurity. They also do a pretty great job of supporting parts for old robots and make them quite easy to repair. For a typical consumer product, I feel like they're far better than most companies in terms of how shitty they could be vs how shitty they actually are.

load more comments (7 replies)
load more comments (18 replies)