Post #2291877
2026-05-08 00:18 UTC
Replies (9)
-
@eyesinthefire@oldbytes.space 2026-05-08 03:38
@iagox86@infosec.exchange of COURSE these are the first end user devices that I have heard of having HaLoW. What absolute vaporware consigned to this level of nonsense.
-
@tyzbit@toot.now 2026-05-08 13:03
@iagox86@infosec.exchange for some reason i now suddenly think of those compromised walkie-talkies that were turned into explosive devices by israel...
-
@earthshine@masto.hackers.town 2026-05-08 17:29
@iagox86@infosec.exchange What do you reckon is the travel range on these robot mowers, and how trivial would it be to find one in a DC neighborhood within range of an insecure wireless network with insecure government owned devices with access to sensitive data or systems? Especially if you could automate the process to just dragnet every network every robot sees for footholds....
-
@burly@olifant.social 2026-05-08 17:32
@iagox86@infosec.exchange holy fuckin shit!! > Yarbo sells autonomous lawn mowers and snow blowers, consumer robots priced between $1,500 and $5,000, deployed in private homes all over the world. Every one of them ships with a **persistent SSH tunnel, a root password hardcoded identically across the entire fleet, and telemetry that phones home to ByteDance.**
-
@janxdevil@sfba.social 2026-05-08 18:50
@iagox86@infosec.exchange But NAT is good. They make home networks secure!
-
@Kyebr@hachyderm.io 2026-05-08 19:25
@iagox86@infosec.exchange I don't know why but my mind can't stop thinking about that there is a service called AWS GreenGrass. And it runs lambda function locally and sometimes on cloud. Why do this. Why write a lamda function for AWS when you can just run the code.
-
@Doomed_Daniel@mastodon.gamedev.place 2026-05-08 23:08
@iagox86@infosec.exchange Waiting for a worm making all those devices dance or some other silly (hopefully harmless) shit that will piss the owners off enough to return them or throw them away..
-
@lolbird@tech.lgbt 2026-05-09 03:47
@iagox86@infosec.exchange i'm at a loss for words here. every paragraph just sent me into a deeper state of shock. this thing belongs in the top of the iot hall of shame
-
@gup@mastodon.nl 2026-05-09 05:39
@iagox86@infosec.exchange Voor de niet zo technische geïnteresseerden (ik begrijp ook maar een deel): Deze robotgrasmaaiers (o.a.) hebben een ingebouwd kanaal met een Chinees bedrijf en kunnen beeld- en netwerkgegevens verzamelen. Waarmee niet gezegd is dat dat kanaal hiervoor gebruikt wordt, maar het zou wel kunnen. #privacy #security #espionage