this post was submitted on 05 Dec 2025
399 points (99.0% liked)

Technology

77096 readers
2647 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

An engineer got curious about how his iLife A11 smart vacuum worked and monitored the network traffic coming from the device. That’s when he noticed it was constantly sending logs and telemetry data to the manufacturer — something he hadn't consented to. The user, Harishankar, decided to block the telemetry servers' IP addresses on his network, while keeping the firmware and OTA servers open. While his smart gadget worked for a while, it just refused to turn on soon after. After a lengthy investigation, he discovered that a remote kill command had been issued to his device.

top 50 comments
sorted by: hot top controversial new old
[–] SocialMediaRefugee@lemmy.world 1 points 2 hours ago

If I don't own it 100% then reimburse me if you disable it.

[–] elvith@feddit.org 12 points 9 hours ago

Having not read the article: “Let’s apply Hanlon’s Razor: Oh, probably it just collects the data locally and caches it until the vendor’s servers are reachable. After a while the data partition was full and it stopped working as this case was never deemed possible when this was developed.”

Having read that the kill command was logged and he found it in the logs: “ok, there are no technical details, so there might still be a misunderstanding, but that’s not what I expected!”

[–] GreenShimada@lemmy.world 153 points 14 hours ago (2 children)

The fact that this isn't considered outright fraud is disturbing. This person OWNS the device, yes? They're not leasing it.

FFS, this should be illegal.

[–] Vorticity@lemmy.world 40 points 14 hours ago (4 children)

I agree with you that this should be illegal. I expect this was in the terms of service, though. Since we have no laws restricting this kind of bullshit, the company can argue that they're within their rights.

We need some real legislation around privacy. It's never going to happen, but it needs to. We need a right to anonymity but that is too scary for advertisers and our police state.

[–] FartMaster69@lemmy.dbzer0.com 43 points 13 hours ago (1 children)

Terms of service need to stop being treated like law.

[–] MalReynolds@slrpnk.net 19 points 11 hours ago

They're not law as long as you can afford the lawyers and legal costs to fight them. Which is, of course, the problem and the system working as designed.

[–] UnspecificGravity@piefed.social 1 points 6 hours ago

Unless you are to this terms before you bought the thought I don't see how that's a valid contract.

[–] dan@upvote.au 8 points 12 hours ago

Just because something's written in the terms of service, doesn't mean it's legal.

[–] GreenShimada@lemmy.world 5 points 10 hours ago

I expect this was in the terms of service, though

While I expect the same, there's also just a reasonablility standard. If Meta and Google updated their TOS to say that users agreed to become human chattle slaves to mine cobalt and forfeit their rights, no court (...right, SCOTUS?...right?) would uphold that. A TOS is a contract, but it's mostly for the protection of companies from liability. Takign active steps to brick someone's device over the device not connecting to it's C2 server (the company had zero evidence this was done intentionally and a router firewall misconfiguration could just have easily done the same thing), is IMO something that should result in a lawsuit.

[–] Zier@fedia.io 12 points 11 hours ago (1 children)

There needs to be a huge neon orange warning on the Front of these products that explains, clearly, that you don't own it, your privacy will be invaded and the company can disable it at anytime. This will stop people from buying this garbage, and hopefully companies will stop if they want our money.

My life rule is, if it says Smart on it, it's never going to be smart. It will always cause trouble.

[–] GreenShimada@lemmy.world 7 points 11 hours ago (1 children)

IMO "Smart" refers to the lawyers that got paid to write a 900-page TOS that lets a company do whatever they want.

[–] Zier@fedia.io 1 points 7 hours ago

No that's called "smarmy".

[–] j4k3@piefed.world 27 points 11 hours ago (1 children)

Stalkerware is criminal digital slavery. It is sale and ownership of a part of a person to manipulate and exploit them.

[–] BennyTheExplorer@lemmy.world 11 points 10 hours ago

I think your comparison to slavery is a bit overblown and minimizes the tragedy of actual slavery. But I agree with the sentiment.

[–] Goldholz@lemmy.blahaj.zone 1 points 5 hours ago

Say it with me. If buying doesnt mean 100% ownership...

[–] brsrklf@jlai.lu 24 points 12 hours ago (2 children)

There's something not working in this article.

They say it "makes sense" for the device to basically send the plan of your home to some online server, because the vacuum is not powerful enough to process this data on its own. This is already a bit horrifying to me, but okay.

And then when that guy blocked it out, the vacuum "worked for a while" before something sent the kill command through an update.

How come is it still working at all if navigation requires that server?

[–] MangoPenguin@lemmy.blahaj.zone 1 points 5 hours ago

They do process mapping locally, there's no reason for a remote connection other than remote control outside your LAN and data collection.

[–] fonix232@fedia.io 31 points 12 hours ago (2 children)

It's not the navigation that requires the server but the processing of the mapping data.

Which in itself is BS because most of these vacuums come with hardware roughly equivalent of a top of the line smartphone from about 5-6 years ago. They can easily do the raw data to map conversion, even if it's a bit slow and takes 20-30 seconds.

Also if you read the article it specifies that the damn thing is already running Google Cartographer which is a SLAM 3D map builder software - one of the better pro-grade mapping software suites, mind you. So the whole claim of cloud needed for processing is BS.

[–] Nalivai@lemmy.world 4 points 10 hours ago

It's not that it's impossible, but it requires effort, skill, and time. Instead of hiring a bunch of programmers who would make it run on the device locally, you can just throw the same amount of money at Amazon and it will run whatever unoptimised version of the renderer you stole on some random Chinese forum. As a bonus, you got to enrich a multibillionaire and make a world slightly worse place, which is a second and third priority of every CEO after getting money.

[–] brsrklf@jlai.lu 8 points 12 hours ago

My VR headset can create pretty accurate 3D maps of my environment like nothing, and it only uses cameras to do so, so I can imagine it's doable.

Then, yeah, it doesn't "make sense" for that thing to externalize that.

[–] FlashMobOfOne@lemmy.world 2 points 7 hours ago

Yeah, mine has it. I have to go into the app once a week and manually delete it.

[–] spaghettiwestern@sh.itjust.works 49 points 15 hours ago* (last edited 14 hours ago) (8 children)

My robot vac will only operate when connected to the Internet so it's only allowed to communicate when actually in use. As soon as it returns to the charger Internet access is automatically blocked.

Unfortunately the manufacturer has deliberately made this as inconvenient as possible. If communication is blocked for more than a few hours the vacuum loses all maps and will no longer even load saved maps from the Tuya app. To use it the vac must be powered down and the app killed. Only then can a saved map be restored.

It's too bad it's so useful.

[–] SaharaMaleikuhm@feddit.org 0 points 6 hours ago (1 children)

Should have read up on it before buying this crap.

Lol. Read what? Does your TV manual or privacy policy tell you what's being transmitted? Have you ever even bought a connected appliance?

load more comments (6 replies)
[–] Blackmist@feddit.uk 10 points 11 hours ago (2 children)

Had a kill command actually been sent, or does the device just not work without a remote server talking to it every so often?

Because the second one is probably worse from a "what if this company goes bust" standpoint.

[–] core@leminal.space 5 points 8 hours ago

Man itd be great if there was an answer to this. Maybe in an article somewhere. Guess we'll never know.

[–] Nalivai@lemmy.world 9 points 10 hours ago

Don't worry, the quality of the modern hardware is so shitty, it will not outlive the company for long

[–] psx_crab@lemmy.zip 24 points 14 hours ago

As useful a smart device are, it's very annoying that the company behind it are always either: 1) a scumbag that will collect data and will lockdown the device if people doesn't use it their way; 2)incompetent idiots that can't make a good software to save their life. So by using these device you basically have to pick the thing that you're willing to lose.

It's really too bad because robovac save me a lot of time and mental exhaustion.

[–] rowinxavier@lemmy.world 16 points 14 hours ago

I have just purchased a Dreame L10s Ultra and have had the PCB for a breakout board made and components for setting it up ordered. In a few days I should get the last bits and I will be able to root the device and have it connect to Valetudo managed through Home Assistant. Fully local operation with basically the same features but none of the privacy issues. As soon as I can get it connected I will be able to use it just like a robot I actually own should without some random third party being involved in every single operation.

[–] doomsel@lemmy.world 16 points 14 hours ago

I specifically got one which can run valetudo and it works great for over two years now. Without sending images of my flat to china or the us

[–] Canuck@sh.itjust.works 8 points 12 hours ago* (last edited 12 hours ago) (1 children)
load more comments (1 replies)
[–] ExLisper@lemmy.curiana.net 12 points 13 hours ago (3 children)

I was thinking about getting one but I learned that they do require a lot of maintenance like cleaning the brushes and you have to change parts regularly. That sounds like more work they just sweeping from time to time. Also, broom has a lower carbon footprint.

load more comments (3 replies)
[–] whoisearth@lemmy.ca -2 points 5 hours ago (2 children)

Play stupid games win stupid prizes.

I have a standard vacuum. I spend about 10 minutes a day vacuuming. Miele has no telemetry whatsoever lol

[–] ayyy@sh.itjust.works 0 points 4 hours ago (1 children)

I spend about 10 minutes a day vacuuming

[–] whoisearth@lemmy.ca -1 points 2 hours ago

Yes and the point being spending 300$+ to eliminate 10 minutes a day is absolutely hilarious.

[–] zalgotext@sh.itjust.works 0 points 4 hours ago (2 children)

Ugh. Stop shaming people for wanting to automate mundane tasks. No one's playing a stupid game here, the problem isn't robot vacuums. The problem is that manufacturers insist on holding features hostage on the basis that you connect said vacuum to the Internet, so they can harvest (and then sell) your data. Be mad at that, not at normal people wanting to make a boring chore less burdensome.

Yup. A good robot vacuum is an amazing quality of life thing if you have lots of furry pets. They’re not great for deep cleaning, but they’re fantastic for daily maintenance. Just have it run every day after you leave for work, and you never start to accumulate fur. You just need to touch up the corners and edges every now and then.

The real issue is that the makers seem absolutely laser-focused on packing as much data collection into the things as they possibly can. There’s no real reason for it except capitalism.

Imagine making fun of people for using a dishwasher or a clothes washer/dryer. Those are tasks that can be easily automated, so why wouldn’t you? Until recently, manufacturers were happy to ship those things without the invasive data collection. Pretty much everyone would agree that a washing machine beats spending 6 hours a week hunched over a washboard and hot water basin. And a clothes dryer allows you to do the laundry even when it has been rainy and cold for six fucking weeks, which would make a clothesline impractical. The automation isn’t the problem. An automated vacuum is no different, except for the fact that it has wheels. The problem is the manufacturers shoehorning data collection into fucking everything.

[–] whoisearth@lemmy.ca 0 points 2 hours ago (1 children)

Disagree. My experience is they still don't get everything, can't do furniture or corners well or under furniture. They're stupid. They're expensive and if you really can't spend 10 minutes or less to vacuum your house daily or every other day it speaks volumes on the type of person you are.

I stand by what I said. More money than brains.

[–] zalgotext@sh.itjust.works 1 points 1 hour ago

They're not a replacement for a regular vacuum/broom, they're a supplement. This is like complaining that the washing machine can't completely remove red wine stains by itself. And there are robot vacuums at every price point, just like normal vacuums.

I'm glad you can vacuum your whole house in 10 minutes, but the rest of us don't live in a shoebox and have pets with fur. You making judgments on a person's character based on the chores they want to make easier speaks volumes about the type of person you are, you soggy walnut.

[–] FelixCress@lemmy.world 5 points 12 hours ago

remote kill command had been issued to his device.

What the actual fuck?!

load more comments
view more: next ›