Crumb
c/technology · by snake@slrpnk.net · 93d

A hacker ran me over with a robot lawn mower | The Verge

https://www.theverge.com/tech/925696/yarbo-robot-lawn-mower-hack-remote-control-camera-access-mqtt

124 points · 17 comments · view on lemmy.world

17 Comments

randy@lemmy.ca · 80 pts · 93d (4 replies)

Even if you press that big red emergency stop button on the mower itself, a hacker can send another command to unlock it, Makris says.

Holy cow. I work in factories, and I know enough about industrial safety to know that would not fly.

SchmidtGenetics@lemmy.world · 36 pts · 93d (3 replies)

Yeah a big red shutoff should be the cutoff to the electricity, water, air, oil, or whatever else it’s meant to stop.

zerofk@lemmy.zip · 13 pts · 93d (1 reply)

No, the big red button launches the nukes.

clif@lemmy.world · 4 pts · 92d

That has the secondary effect of shutting off the electricity, water, air, oil, or whatever else ... It just takes a little longer.

randy@lemmy.ca · 3 pts · 92d

And that's only, like, the most basic part of an industrial e-stop. On top of directly disconnecting the energy source, it also has to include redundant circuits (since it's possible for a contactor to break and fail open, or weld and fail closed), and some even need to have signal pulses constantly going through them to actively confirm they haven't been pressed. They absolutely should not just send a signal to a Linux computer, because general-purpose operating systems are too complex to be rated for safety.

This isn't even my area of expertise yet I know this stuff. The fact that they failed at the very first requirement is really messed up.

tomalley8342@lemmy.world · 68 pts · 93d

Makris explains that not only does each Yarbo robot have the same hardcoded root password, but owners can’t defend themselves just by manually setting a better password. Every time Yarbo updates a robot’s firmware, it changes the robot’s root password right back to its default password.

lol

Nima@leminal.space · 53 pts · 93d (1 reply)

he did it intentionally.

"I’ve made the questionable decision of lying down in the mower’s path — to see just how far Makris, the security researcher who discovered those flaws, is able to push the mower."

a_non_monotonic_function@lemmy.world · 12 pts · 93d

Sounds dumb, idk.

baronvonj@piefed.social · 50 pts · 93d

copied from my mastodon

Alexa, mow down my enemies and livestream me the audio so I can hear the lamentation of their women.

Wispy2891@lemmy.world · 35 pts · 93d (2 replies)

Did they vibe coded the backend?

An hacker can get:

  • GPS position
  • Email address
  • Video feed
  • WiFi password
  • Root access to a Linux client in the same WiFi network of the victim which means can change the DNS servers in the router for a mitm Attack if the default password hasn't been changed (and nobody changes that)

And they demonstrated to the journalist..

  1. Get a list of every "smart" lawnmower nearby a nuclear plant
  2. Check the emails of the owner in LinkedIn or something like that to see who could work at that nuclear plant
  3. Have access to his home network and a video feed on a robot that can be remotely moved to other position to check the perimeter

Scary

criss_cross@lemmy.world · 4 pts · 92d

We’re in an untold era of productivity! There’s no time for things like safety!!!

/s

WhyJiffie@sh.itjust.works · 1 pts · 92d

which means can change the DNS servers in the router for a mitm Attack if the default password hasn't been changed (and nobody changes that)

or if the device can succesfully spoof DHCP offers. perhaps crashing the real one, or just being faster somehow

Fubarberry@sopuli.xyz · 15 pts · 93d

Read without the paywall: https://archive.is/mTp9k

sturmblast@lemmy.world · 15 pts · 92d

Sounds like making dangerous home robots with spinning blades and wireless connectivity is a bad idea

ropatrick@lemmy.world · 4 pts · 93d

This sounds like a storyline for the next Honey I Shrunk the Kids movie?

And shouldn't it be...em...the Grass Verge?

I'll get my coat.

EndlessNightmare@reddthat.com · 4 pts · 93d

Flashbacks to Lawnmower Man

popekingjoe@lemmy.world · 2 pts · 93d

I laughed at this.