Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
Privacy

Manufacturer Remotely Bricks Smart Vacuum After Its Owner Blocked It From Collecting Data (tomshardware.com) 121

"An engineer got curious about how his iLife A11 smart vacuum worked and monitored the network traffic coming from the device," writes Tom's Hardware.

"That's when he noticed it was constantly sending logs and telemetry data to the manufacturer — something he hadn't consented to." The user, Harishankar, decided to block the telemetry servers' IP addresses on his network, while keeping the firmware and OTA servers open. While his smart gadget worked for a while, it just refused to turn on soon after... He sent it to the service center multiple times, wherein the technicians would turn it on and see nothing wrong with the vacuum. When they returned it to him, it would work for a few days and then fail to boot again... [H]e decided to disassemble the thing to determine what killed it and to see if he could get it working again...

[He discovered] a GD32F103 microcontroller to manage its plethora of sensors, including Lidar, gyroscopes, and encoders. He created PCB connectors and wrote Python scripts to control them with a computer, presumably to test each piece individually and identify what went wrong. From there, he built a Raspberry Pi joystick to manually drive the vacuum, proving that there was nothing wrong with the hardware. From this, he looked at its software and operating system, and that's where he discovered the dark truth: his smart vacuum was a security nightmare and a black hole for his personal data.

First of all, it's Android Debug Bridge, which gives him full root access to the vacuum, wasn't protected by any kind of password or encryption. The manufacturer added a makeshift security protocol by omitting a crucial file, which caused it to disconnect soon after booting, but Harishankar easily bypassed it. He then discovered that it used Google Cartographer to build a live 3D map of his home. This isn't unusual, by far. After all, it's a smart vacuum, and it needs that data to navigate around his home. However, the concerning thing is that it was sending off all this data to the manufacturer's server. It makes sense for the device to send this data to the manufacturer, as its onboard SoC is nowhere near powerful enough to process all that data. However, it seems that iLife did not clear this with its customers.

Furthermore, the engineer made one disturbing discovery — deep in the logs of his non-functioning smart vacuum, he found a command with a timestamp that matched exactly the time the gadget stopped working. This was clearly a kill command, and after he reversed it and rebooted the appliance, it roared back to life.

Thanks to long-time Slashdot reader registrations_suck for sharing the article.

Comment Re: Good idea. (Score 1) 196

No man is an island. It's basically impossible to do anything that affects nobody else. If you kill yourself, you might have kids than then needed to be provided for by the state. If you harm yourself, even if nobody is obligated to help you, you can do emotional/mental damage to others who observe your suffering. If you decline protection of infectious desiese, you out others at risk. And so on and so on. Libertarians hate this one weird fact ...

Comment Re:I don't understand what the issue is. (Score 5, Insightful) 262

They don't want to take money that can then be demanded to be returned after having spent it. It's quite simple. What constitutes discrimination is subjective - don't look at me, every nation has volumes of evolving laws and case law on trying to define discrimination, and in what cases it's legally permitted. Knowing this administration, the bar in the agreement probably isn't even legal - just, "When we say you're doing it, you're doing it." You'd be stupid to take money on those terms. They might as well take money that is only allowed to be spent on "super cool shit, although we can then decide later that something isn't as cool as we said it was the month before".

NSF reserves the right to terminate financial assistance awards and recover all funds if recipients, during the term of this award, operate any program in violation of Federal anti- discriminatory laws or engage in a prohibited boycott.

Hilarious. Hey, would you like to take on a massive economic liability? Take this money!

Comment Re:What's the problem? (Score 5, Insightful) 262

Where the definition of "discriminatory practices" is up to the NSF, subject to whatever day of the week it is, and the claw backs are retroactive to money already spent?

Independent of your (stupid in your case) politics, that's a poison pill. No rational actor should be expected to swallow that.

Comment Re:Oh you sweet innocent child (Score 1, Interesting) 56

That's not what's happening. That's never what happens. Any time someone uses an ai chat bot as part of their work, they immediately turn into drooling idiots.

Yeah, who needs a chatbot when you can make unqualified claims as statements of fact. You don't even need citations, such as the ones you're claiming (without citation) they make up. (Which just to be clear, they do, a certain amount, although a casual interpretation of your words suggests you're implying "always".)

Look, there are lots of problems with LLMs, but I find it amusing to watch people launch into "what I say is true, because I said it, and it sounds true to me" when talking about LLMs being sources of inaccurate information.

Comment Re:China may or may not has overtaken (Score 4, Informative) 169

"This is Chinese propaganda"

Do a quick self-learn. The amount of solar panels China was selling to the US before exports was only around 20% of their total solar module exports. Their total solar exports are only about 7% of their total intl trade surplus. They sell as much capacity to Europe in a year as the US has installed *total, nationally*.

I'm not arguing they don't care about loss of business to the US, obviously it impacts them.

But watching the US self-elect to fall farther behind, checking of boxes down a veritable "how to" list of losing US hegemony is far more valuable to them.

In that sense - maybe it is propaganda, but reverse psychology style, because you're doing the lord's work for them.

EU

New Large Coral Reef Discovered Off Naples Containing Rare Ancient Corals (independent.co.uk) 13

Off the southwest cost of Italy, a remotely operated submarine made "a significant and rare discovery," reports the Independent — a vast white coral reef that was 80 metres tall (262 feet) and 2 metres wide (6.56 feet) "containing important species and fossil traces." Often dubbed the "rainforests of the sea", coral reefs are of immense scientific interest due to their status as some of the planet's richest marine ecosystems, harbouring millions of species. They play a crucial role in sustaining marine life but are currently under considerable threat...

hese impressive formations are composed of deep-water hard corals, commonly referred to as "white corals" because of their lack of colour, specifically identified as Lophelia pertusa and Madrepora oculata species. The reef also contains black corals, solitary corals, sponges, and other ecologically important species, as well as fossil traces of oysters and ancient corals, the Italian Research Council said. It called them "true geological testimonies of a distant past."

Mission leader Giorgio Castellan said the finding was "exceptional for Italian seas: bioconstructions of this kind, and of such magnitude, had never been observed in the Dohrn Canyon, and are rarely seen elsewhere in our Mediterranean". The discovery will help scientists understand the ecological role of deep coral habitats and their distribution, especially in the context of conservation and restoration efforts, he added.

The undersea research was funded by the EU.

Thanks to davidone (Slashdot reader #12,252) for sharing the article.

Slashdot Top Deals

Is knowledge knowable? If not, how do we know that?

Working...