Enjoying the great vista of the Fedisphere.

  • 1 Post
  • 16 Comments
Joined 3 years ago
cake
Cake day: June 17th, 2023

help-circle



  • At first I thought ”Well, duh!”, but the manufacturer having a remote kill switch when he network blocked his vacuum from sharing his home map data with them, as well as unprotected root access when connecting to the vacuum… urgh.

    The engineer says he stopped the device from broadcasting data, though kept the other network traffic — like firmware updates — running like usual. The vacuum kept cleaning for a few days after, until early one morning when it refused to boot up.

    After reverse engineering the vacuum, a painstaking process which included reprinting the devices’ circuit boards and testing its sensors, he found something horrifying: Android Debug Bridge, a program for installing and debugging apps on devices, was “wide open” to the world. “In seconds, I had full root access. No hacks, no exploits. Just plug and play,” Narayanan said.










  • Regna@lemmy.worldtoTechnology@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    16
    ·
    7 months ago

    That’s interesting, I remember there were discussions on Slashdot or Reddit about how easy it was to abuse Googles report tool several years ago. Reading this articles description of the abuse in action enraged me. And domestic violence victims too often withdraw their complaints due to economic factors or fear. Fuck Maury Blackman, the perpetrator of violence and intimidating lawsuits.