Is Sharp's Robot Vacuum Cleaner Vulnerable To Remote Take-over? (jvn.jp) 42
Slashdot reader AmiMoJo reports: Sharp's COCOROBO (heart-bot) vacuum cleaners can not just clean your house. They have cameras that can be viewed from a smart phone, and automatically take pictures of things they find under your sofa. They have microphones and voice recognition, and are able to ask how your day was when you get home from work. You can even activate their speakers and talk to your pets from the office. Unfortunately, so can anyone else if you don't install critical firmware updates.
JPCERT's warning says that the attacker must be on the same LAN to impersonate you, though "as a result, there is a possibility that an arbitrary operation may be conducted."
JPCERT's warning says that the attacker must be on the same LAN to impersonate you, though "as a result, there is a possibility that an arbitrary operation may be conducted."
Under the sofa? (Score:3)
How about checking under the sofa cushions? Maybe it would be able to earn a wage.
What IoT appliance isn't vulnerable? (Score:3)
Re: OMFG! (Score:2)
My vacuum was hacked and it caught fire.
Re: (Score:1)
Re: (Score:2)
Vacuum on fire! Put it out!
Begs the question... (Score:1)
Re:OMFG! (Score:5, Informative)
Because it has a CAMERA and can be driven around the house through the smart phone interface. If it gets hacked, the bad guy gets a mobile spy cam in your house.
The biggest problem with these robot vaccums.... (Score:2)
If Roomba made a self-emptying model, I'd be all over that like nobody's business.
Re: (Score:2)
Re: (Score:2)
It's not really filthy... there are just multiple pets here that shed. A lot. With a regular vacuum, which is going to generally do a better job than a robot vacuum anyways, we already have to vacuum every two or three days or it gets crazy, Robot vacuum canisters are very tiny, and there are a couple of rooms in our house where a robot vacuum might only just be barely able to finish that one room before its canister needed to be emptied. Multiple vacuums would solve the problem, but that would just d
Re: (Score:2)
I've had a few different robot vacuums over the years. They don't replace vacuuming entirely, but they do reduce the workload a lot.
If you run them regularly then the small bin size isn't a problem, as there isn't that much to pick up. They can't get in every corner but remove the majority of new dust and debris coming into the house. You can then touch up after it every now and then with a powerful hand held manual vacuum every now and then.
Re: (Score:2)
We already vacuum every two or three days as it is to keep up with the fur and hair that our pets leave everywhere. While a robot vacuum could be programmed to run every day, I think it's unlikely a single robot vacuum could manage even one day without having an issue because of the small bin size. 2 or 3 robot vacuums would probably do the trick, but then that's 2 or 3 times the price as well... and even a single robot vacuum is going to
Re: (Score:2)
Even the cheap 100 euro ones are actually not bad these days, especially if you restrict them to one or two rooms.
Notice! ***CDG CV**** (Score:2)
Re: (Score:2)
Now imagine that this CDG works from across the street through the WiFi.
Re: (Score:2)
Re: (Score:2)
Yes, and it's protected by a password. Often the dog's name or the home phone number. Or someone abuses WPS to gain access.
Re: Notice! ***CDG CV**** (Score:2)
Re: (Score:2)
No, it's just that I have a realistic view of the actual state of security in networks, including those set up by people reading a flip book and people who don't even do that much.
You seem to be ignorant of the known issues with WPS including common user errors.
Not (Score:3)
Re: (Score:2)
Re: (Score:2)
Not to be a luddite, but ... (Score:2)
Unfortunately, so can anyone else if you don't install critical firmware updates.
Seriously, it's not that hard to vacuum/sweep your floors.
Re: (Score:3)
http://d3d71ba2asa5oz.cloudfro... [cloudfront.net]
Re: (Score:3)
Unfortunately, so can anyone else if you don't install critical firmware updates.
Seriously, it's not that hard to vacuum/sweep your floors.
Sadly, in 15 years we will probably be saying that about underwear.
What idiot thought these were good ideas. (Score:5, Insightful)
They are vacuum cleaners. They do not need MICROPHONES. If you can't bother to control it via an App, then connect up Amazon's Alexis and let Alexis convert your voice into vacuum cleaner commands.
Same thing for cameras. What moron thinks that letting your vaccuum cleaner take pictures in your home is a good idea>
As for me, I don't trust Amazon with a mike in my home, let alone some random vacuum company maker.
Re: (Score:2)
Please, if you are watching it hoover up your dog's tail are you seriously telling me you don't want to hear your dog yelp too?
For pity's sake! (Score:1)
In actual fact,what the fsck do you want a robotic Hoover for anyway? Like most of these autonomous things, they never work properly and, once the "Ah, lookit going across the floor traumatising the poor dog again" novelty wears off, you're left however much money you paid and several IQ points the poorer.
Tish, pshaw and, indeed, codswallop. Also, your dog now hates you and anyone who looks like you. Aren't you proud?
Great tool for burglars to case a house (Score:2)
The greatest danger I can see is a tech savvy burglar using the device to see if the house is occupied. One could do the same thing with a "smart" water meter. If someone can determine that no one is home, they can break in and take all the time they want. This may or may not be possible, but you can't really limit yourself when thinking about how technology can be misused.
Trust issues (Score:1)
First no, then yes (Score:2)
Any IoT device that is connected to the internet will almost always start with no, they cannot be taken over. But when (not if) an exploit is discovered then it will be possible. It's like Moore's law.