Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
Privacy

Manufacturer Remotely Bricks Smart Vacuum After Its Owner Blocked It From Collecting Data (tomshardware.com) 123

"An engineer got curious about how his iLife A11 smart vacuum worked and monitored the network traffic coming from the device," writes Tom's Hardware.

"That's when he noticed it was constantly sending logs and telemetry data to the manufacturer — something he hadn't consented to." The user, Harishankar, decided to block the telemetry servers' IP addresses on his network, while keeping the firmware and OTA servers open. While his smart gadget worked for a while, it just refused to turn on soon after... He sent it to the service center multiple times, wherein the technicians would turn it on and see nothing wrong with the vacuum. When they returned it to him, it would work for a few days and then fail to boot again... [H]e decided to disassemble the thing to determine what killed it and to see if he could get it working again...

[He discovered] a GD32F103 microcontroller to manage its plethora of sensors, including Lidar, gyroscopes, and encoders. He created PCB connectors and wrote Python scripts to control them with a computer, presumably to test each piece individually and identify what went wrong. From there, he built a Raspberry Pi joystick to manually drive the vacuum, proving that there was nothing wrong with the hardware. From this, he looked at its software and operating system, and that's where he discovered the dark truth: his smart vacuum was a security nightmare and a black hole for his personal data.

First of all, it's Android Debug Bridge, which gives him full root access to the vacuum, wasn't protected by any kind of password or encryption. The manufacturer added a makeshift security protocol by omitting a crucial file, which caused it to disconnect soon after booting, but Harishankar easily bypassed it. He then discovered that it used Google Cartographer to build a live 3D map of his home. This isn't unusual, by far. After all, it's a smart vacuum, and it needs that data to navigate around his home. However, the concerning thing is that it was sending off all this data to the manufacturer's server. It makes sense for the device to send this data to the manufacturer, as its onboard SoC is nowhere near powerful enough to process all that data. However, it seems that iLife did not clear this with its customers.

Furthermore, the engineer made one disturbing discovery — deep in the logs of his non-functioning smart vacuum, he found a command with a timestamp that matched exactly the time the gadget stopped working. This was clearly a kill command, and after he reversed it and rebooted the appliance, it roared back to life.

Thanks to long-time Slashdot reader registrations_suck for sharing the article.
EU

New Large Coral Reef Discovered Off Naples Containing Rare Ancient Corals (independent.co.uk) 13

Off the southwest cost of Italy, a remotely operated submarine made "a significant and rare discovery," reports the Independent — a vast white coral reef that was 80 metres tall (262 feet) and 2 metres wide (6.56 feet) "containing important species and fossil traces." Often dubbed the "rainforests of the sea", coral reefs are of immense scientific interest due to their status as some of the planet's richest marine ecosystems, harbouring millions of species. They play a crucial role in sustaining marine life but are currently under considerable threat...

hese impressive formations are composed of deep-water hard corals, commonly referred to as "white corals" because of their lack of colour, specifically identified as Lophelia pertusa and Madrepora oculata species. The reef also contains black corals, solitary corals, sponges, and other ecologically important species, as well as fossil traces of oysters and ancient corals, the Italian Research Council said. It called them "true geological testimonies of a distant past."

Mission leader Giorgio Castellan said the finding was "exceptional for Italian seas: bioconstructions of this kind, and of such magnitude, had never been observed in the Dohrn Canyon, and are rarely seen elsewhere in our Mediterranean". The discovery will help scientists understand the ecological role of deep coral habitats and their distribution, especially in the context of conservation and restoration efforts, he added.

The undersea research was funded by the EU.

Thanks to davidone (Slashdot reader #12,252) for sharing the article.
Programming

The Toughest Programming Question for High School Students on This Year's CS Exam: Arrays 65

America's nonprofit College Board lets high school students take college-level classes — including a computer programming course that culminates with a 90-minute test. But students did better on questions about If-Then statements than they did on questions about arrays, according to the head of the program. Long-time Slashdot reader theodp explains: Students exhibited "strong performance on primitive types, Boolean expressions, and If statements; 44% of students earned 7-8 of these 8 points," says program head Trevor Packard. But students were challenged by "questions on Arrays, ArrayLists, and 2D Arrays; 17% of students earned 11-12 of these 12 points."

"The most challenging AP Computer Science A free-response question was #4, the 2D array number puzzle; 19% of students earned 8-9 of the 9 points possible."

You can see that question here. ("You will write the constructor and one method of the SumOrSameGame class... Array elements are initialized with random integers between 1 and 9, inclusive, each with an equal chance of being assigned to each element of puzzle...") Although to be fair, it was the last question on the test — appearing on page 16 — so maybe some students just didn't get to it.

theodp shares a sample Java solution and one in Excel VBA solution (which includes a visual presentation).

There's tests in 38 subjects — but CS and Statistics are the subjects where the highest number of students earned the test's lowest-possible score (1 out of 5). That end of the graph also includes notoriously difficult subjects like Latin, Japanese Language, and Physics.

There's also a table showing scores for the last 23 years, with fewer than 67% of students achieving a passing grade (3+) for the first 11 years. But in 2013 and 2017, more than 67% of students achieved that passsing grade, and the percentage has stayed above that line ever since (except for 2021), vascillating between 67% and 70.4%.

2018: 67.8%
2019: 69.6%
2020: 70.4%
2021: 65.1%
2022: 67.6%
2023: 68.0%
2024: 67.2%
2025: 67.0%

Comment Re:Noise Rate (Score 1) 199

And by the time the first "warning" was raised- the girl's camp was under water. The "emergency" wasn't raised until hours later.

And the republican legislature (including the repp for Kerr County) voted down the flood siren warning system. He says now that he "might" have voted differently.

Comment Re:Noise Rate (Score 1) 199

The emergency alerts on the phones do not discriminate. They play that incredibly nasty noise.
And they also play it for amber alerts--- for kids who were kidnapped over 100 miles away -- 24 hours a day.

One you get woken up for a watch or an amber alert at 3am out of a sound sleep, the alerts get turned off.

Comment Re:The thing that gets me... (Score 1) 104

Is that even with all this solar, wind, etc.... China *still* must build more coal plants even tho we are finding out their population is smaller than we thought.

In time, alternative energy will destroy demand for coal but for now, the projections are still for more coal plant by 2045.

I'm hoping they are wrong and solar/wind comes online faster. It's cheaper than coal but they simply can't produce and build it out fast enough globally.

Comment The thing that gets me... (Score 0) 104

Is that with all this solar, wind, etc.... China *still* must build more coal plants even tho we are finding out their population is smaller than we thought.

In time, it will destroy demand for coal but for now, the projections are still for more coal plant by 2045.

I'm hoping they are wrong and solar/wind comes online faster. It's cheaper than coal but they simply can't produce and build it out fast enough globally.

Comment Re:Noise Rate (Score 1) 199

And it's not just kids (won't someone think of the children)...

In Texas, we can get a half dozen "watch" alerts a day when storm systems are moving through.

That's *POINTLESS*. If your alert system is sending more than one message a day, you probably didn't set it up well.

And worse, the watches usually mean "stay at home, avoid getting caught in deep flood waters" and not "leave your home because floodwaters over your roof will be there in under 90 minutes."

Comment Re:Simple... (Score 1) 199

And it's not even just amber alerts. You can get a half dozen "watch" alerts from a fast moving system *per day*.

At that level, "watch" alerts are useless. Especially since in most of texas they mean, "don't leave home or your car may be flooded out" and not "leave home- your home will be flooded out".

And the short staffing of the service in the U.S. due to Ham-handed layoffs this year did not help.

Comment Re:Humans are doomed (Score 1) 128

Global population will begin to decline in 2080.

However, the population of people 40 and under *has already peaked* and is declining. That means *not enough people working* to pay for benefit programs for people over 60 starts *today* .

So you are not having kids-- big whoop. Basically you are saying, "after me the deluge"

Population growth is occurring because of improved medical care and longer lifespans. But having 5 billion seniors, 2 billion adults, and 1 billion kids isn't going to be healthy.

I'm going to move on now. I can tell you are a flat-earther type. Further discussion with you is pointless.

Slashdot Top Deals

Lead me not into temptation... I can find it myself.

Working...