Comment on Man Alarmed to Discover His Smart Vacuum Was Broadcasting a Secret Map of His House

• KazuyaDarklight@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

  Tend to agree, security is always the goal but if someone is in my house hacking my vacuum, I have bigger issues. The no-notice remote kill is the bigger issue to me.

  source

  • subignition@fedia.io ⁨3⁩ ⁨weeks⁩ ago

    The much bigger concern is that the pathway used to send the remote kill command could very easily be utilized by nefarious actors.

    source

    • krashmo@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

      To do what, wear out one section of carpet faster than the rest of your house?

      source

      • subignition@fedia.io ⁨3⁩ ⁨weeks⁩ ago

        If a hacker can get into the device remotely it can be an entry point to your home network.

        source
      • teft@piefed.social ⁨3⁩ ⁨weeks⁩ ago

        Remote “kill”

        Where does it end? First it wears down your carpets and then we’re in Maximum Overdrive.

        source

        • -> View More Comments
      • Tehdastehdas@piefed.social ⁨2⁩ ⁨weeks⁩ ago

        It could overcharge and overheat the battery, leading to explosion or at least fire.

        source
• kylian0087@lemmy.dbzer0.com ⁨3⁩ ⁨weeks⁩ ago

  It is not good. But in most cases just adb doesnt grand root access. That’s just bad.

  source

  • riskable@programming.dev ⁨3⁩ ⁨weeks⁩ ago

    NO! It’syour device, you should have root! The fact that the manufacturer gives their product owners root is a good thing, not bad!

    I will die on this fucking hill.

    source

    • kylian0087@lemmy.dbzer0.com ⁨3⁩ ⁨weeks⁩ ago

      I agree with you. But granting root straight from adb with 0 auth is not good.

      source

      • JustEnoughDucks@feddit.nl ⁨2⁩ ⁨weeks⁩ ago

        But on this threat model? Why would it not be good?

        It has to physically accessed on the PCB itself from what I gather.

        There are 2 “threats” from what I see:

        • someone at the distribution facility pops it open and has the know how to install malware on it (very very unlikely)

        • someone breaks into your home unnoticed and has the time to carefully take apart your vacuum and upload pre-prepared malware instead of just sticking an IP camera somewhere. If this actually happens, the owner has much much bigger problems and the vacuum is the least of their worries.

        The homeowner is the other person that can access it and it is a big feature in that case.

        source