Sure, sure… All that stuff has good sec…oops…
Sammy Azdoufal used Claude Code to build an app to link his brand-new DJI Romo vacuum to a PS5 controller. Then he noticed something strange. The app wasn’t just controlling his vacuum. It was controlling thousands.
By accident, Azdoufal had taken control of roughly 7,000 DJI robot vacuums around the world, each responding to code he’d intended to use only for his own device. “I found my device was just one in an ocean of devices,” he told The Verge.
He hadn’t hacked DJI’s servers, he said. Instead, he extracted his own Romo’s private token—a key meant to prove you’re allowed to access your own machine—but DJI’s servers returned the data of thousands of other customers as well. “I didn’t infringe any rules. I didn’t bypass, I didn’t crack, brute force, whatever,” he said.
Full article HERE from Inc.com
Once again, we see a manufacturer that ‘thought’ they had things covered…
But they didn’t. Simply put, security is almost always the LAST thing companies think about, other than as a PITA, because it makes the engineers, CSRs, and techs have to work harder to actually DO anything to the particular product.
We’ve seen vehicles hacked to the point that they controlled braking, engines, etc. So called ‘secure’ systems have turned out to not be secure at all, and we all know hackers are out there everyday, including Chinese schools and who knows whom else that are hitting military systems, universities, networks, infrastructure, phones, individual computers, and pretty much anything connected to the web 24/7/365.
And this doesn’t even account for the ‘simple’ phishing attempts that go on daily by the middle easterners, or Nigerian ‘princes’…
Those who’ve fallen for the ‘smart home’ schtick are just begging to get all of their data taken. When everything in your house is connected, everything you do is available/sold to third parties by those manufacturers.
Your fridge reports what you buy/eat/how often you open the door? That’s sold to advertisers. Your fridge door isn’t opened for a day or two? Criminals rob your house. That smart thermostat? Well, you don’t actually control your house temps, the electric company does. Too much draw? They turn the temp up or down as required…
That smart electric meter? Criminals monitor those for usage drops, so they know the homeowners/renters are gone, and they home is ‘available’ for robbery.
And the list goes on and on…
No, I don’t have any ‘smart’ devices in my home, nor any ‘subscriptions’ in my vehicle either. And I don’t plan on ever having any! I’ve done everything I can to sequester my router and limited wireless access to it with the recommendations provided by Borepatch at his blog, HERE.
Yes, I’m old, yes, I’m grumpy… YMMV and all that stuff…
