ncr100 a day ago

Ecovacs notified in December 2023

> “Ecovacs has always prioritised product and data security, as well as the protection of consumer privacy,” they said in a statement.

Still not fixed, today.

Mobile Webcam exploit at 100 meters.

killingtime74 a day ago

I specifically bought a robot vacuum with less sensors (no camera) for this reason. Why does it need camera if bump sensors and Lidar already works, it's asking for trouble.

  • MBCook 3 hours ago

    Some manufacturers use cameras instead of LiDAR (iRobot, for example).

    Others use both. LiDAR for walls, cameras for object identification below the LiDAR plane, directly in front of the robot. That’s how the fancy ones avoid socks or cables or other small things.

  • dikkechill 14 hours ago

    How did you do your research and which one did you eventually buy?

    • iammiles 10 hours ago

      This sounds like the Roborock S series. I went with lidar over camera because it can run in any lighting condition and I don’t have a need for poop detection.

dikkechill 14 hours ago

I found the open source Valetudo (https://github.com/Hypfer/Valetudo) project quite interesting, as it sits between the vendor firmware and (cloud) connectivity. The project is made possible due to Dennis Giese's research.

It currently supports Dreame, Xiaomi, Roborock and some others. But not Ecovacs. And not sure it prevents this type of Bluetooth vulnerabilities.

  • FloatArtifact 6 hours ago

    I specifically shopped for vacuum using that website and it wasn't too bad to set up.

  • Tier3r 10 hours ago

    No truck on this robot vacuum race because I don't own one, but one an incredible name.

ChrisArchitect a day ago

ABC Australia

Title: We hacked a robot vacuum — and could watch live through its camera