this post was submitted on 05 Dec 2025
394 points (99.0% liked)

Technology

77096 readers
2770 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
L4s@hackingne.ws
394
Manufacturer issues remote kill command to disable smart vacuum after engineer blocks it from collecting data — user revives it with custom hardware and Python scripts to run offline (www.tomshardware.com)
submitted 14 hours ago by spaghettiwestern@sh.itjust.works to c/technology@lemmy.world
58 comments fedilink hide all child comments
 

An engineer got curious about how his iLife A11 smart vacuum worked and monitored the network traffic coming from the device. That’s when he noticed it was constantly sending logs and telemetry data to the manufacturer — something he hadn't consented to. The user, Harishankar, decided to block the telemetry servers' IP addresses on his network, while keeping the firmware and OTA servers open. While his smart gadget worked for a while, it just refused to turn on soon after. After a lengthy investigation, he discovered that a remote kill command had been issued to his device.

you are viewing a single comment's thread
view the rest of the comments
[–] spaghettiwestern@sh.itjust.works 49 points 14 hours ago* (last edited 13 hours ago) (2 children)

My robot vac will only operate when connected to the Internet so it's only allowed to communicate when actually in use. As soon as it returns to the charger Internet access is automatically blocked.

Unfortunately the manufacturer has deliberately made this as inconvenient as possible. If communication is blocked for more than a few hours the vacuum loses all maps and will no longer even load saved maps from the Tuya app. To use it the vac must be powered down and the app killed. Only then can a saved map be restored.

It's too bad it's so useful.

[–] ExLisper@lemmy.curiana.net 8 points 13 hours ago (1 children)

it’s only allowed to communicate when actually in use.

What's the point? The manufacturer is interested in the map of your apartment and usage statistics. What do you think it's sending when not in use? Does it have a microphone or something?

[–] spaghettiwestern@sh.itjust.works 16 points 13 hours ago* (last edited 13 hours ago) (2 children)

Since I haven't pulled it apart or tried to decrypt the ssl traffic I have no idea whether it has "a microphone or something." That's the point.

[–] everett@lemmy.ml 8 points 11 hours ago (1 children)

Keeping it offline some of the time isn't effective against passive data collection unless you're willing to take the inconvenient step of factory-resetting it each time you're about to use it. Anything it collects it can just hold onto until it next gets the chance to upload.

[–] FauxLiving@lemmy.world 6 points 11 hours ago (1 children)

SmartTVs will hold onto your data as long as they have storage, even through a factory reset. So if you sell it and the next person hooks it up to the Internet then the data is uploaded.

[–] everett@lemmy.ml 4 points 11 hours ago

I know it can be done, so it wouldn't shock me at all to find out that it does happen, but do you know of any manufacturers who have been proven to do this?

[–] muntedcrocodile@hilariouschaos.com 3 points 12 hours ago

SSL bold of you to assume that