Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
Privacy Communications Hardware Hacking

Manufacturer Remotely Bricks Smart Vacuum After Its Owner Blocked It From Collecting Data (tomshardware.com) 123

"An engineer got curious about how his iLife A11 smart vacuum worked and monitored the network traffic coming from the device," writes Tom's Hardware.

"That's when he noticed it was constantly sending logs and telemetry data to the manufacturer — something he hadn't consented to." The user, Harishankar, decided to block the telemetry servers' IP addresses on his network, while keeping the firmware and OTA servers open. While his smart gadget worked for a while, it just refused to turn on soon after... He sent it to the service center multiple times, wherein the technicians would turn it on and see nothing wrong with the vacuum. When they returned it to him, it would work for a few days and then fail to boot again... [H]e decided to disassemble the thing to determine what killed it and to see if he could get it working again...

[He discovered] a GD32F103 microcontroller to manage its plethora of sensors, including Lidar, gyroscopes, and encoders. He created PCB connectors and wrote Python scripts to control them with a computer, presumably to test each piece individually and identify what went wrong. From there, he built a Raspberry Pi joystick to manually drive the vacuum, proving that there was nothing wrong with the hardware. From this, he looked at its software and operating system, and that's where he discovered the dark truth: his smart vacuum was a security nightmare and a black hole for his personal data.

First of all, it's Android Debug Bridge, which gives him full root access to the vacuum, wasn't protected by any kind of password or encryption. The manufacturer added a makeshift security protocol by omitting a crucial file, which caused it to disconnect soon after booting, but Harishankar easily bypassed it. He then discovered that it used Google Cartographer to build a live 3D map of his home. This isn't unusual, by far. After all, it's a smart vacuum, and it needs that data to navigate around his home. However, the concerning thing is that it was sending off all this data to the manufacturer's server. It makes sense for the device to send this data to the manufacturer, as its onboard SoC is nowhere near powerful enough to process all that data. However, it seems that iLife did not clear this with its customers.

Furthermore, the engineer made one disturbing discovery — deep in the logs of his non-functioning smart vacuum, he found a command with a timestamp that matched exactly the time the gadget stopped working. This was clearly a kill command, and after he reversed it and rebooted the appliance, it roared back to life.

Thanks to long-time Slashdot reader registrations_suck for sharing the article.
This discussion has been archived. No new comments can be posted.

Manufacturer Remotely Bricks Smart Vacuum After Its Owner Blocked It From Collecting Data

Comments Filter:
  • by Danborg ( 62420 ) on Sunday November 02, 2025 @09:38PM (#65768792)

    It’s designed to feed the company’s data systems first, and clean your floors second.

    • by jhoegl ( 638955 )
      I dont care who or what the app or device is... YOU ARE ALWAYS THE PRODUCT!
      • Reading the summary it seems that a GPT could rewrite it in the style of Robert Howard's Conan as the summary reads like a car chase movie script.

        The user, Harishankar, decided to block the telemetry servers' IP addresses on his network, while keeping the firmware and OTA servers open. While his smart gadget worked for a while, it just refused to turn on soon after... He sent it to the service center multiple times, wherein the technicians would turn it on and see nothing wrong with the vacuum. When they re

  • After Alexa, anyone surprised by this?

    I am waiting to see what happens when Optimus comes out. First, what they say it will do and then what it will actually do.

    • by Mr. Dollar Ton ( 5495648 ) on Sunday November 02, 2025 @10:57PM (#65768914)

      I'm surprised one would bury this much time debugging a piece of crap instead of cleaning house with a simple vacuum cleaner once every few days.

      I have zero network-enabled, complex firmware-sporting vacuum cleaners and I've never seen them fail.

      Even the old Eastern bloc piece of junk that my grandmother left when she passed away - I still use that one to scare the neighbour's cat when that pest climbs onto my balcony.

      I've also very likely used a lot less time for cleaning than this guy for debugging, and with better results.

      • by joeme1 ( 959209 ) on Sunday November 02, 2025 @11:32PM (#65768980)

        He didnâ(TM)t waste time to fix the vacuum. He spent his time accomplishing a security related task. His goal seems to have been to figure out what the vacuum was sending home and how to keep it from doing so. When he stored it he then had to figure out how to make it work again while not adversely affecting his privacy and security. Now heâ(TM)s sharing his knowledge with all of us so that we donâ(TM)t have the same problem. We can even take these facts and apply them to the other devices we get tempted to attach to our home networks.

      • by rta ( 559125 )

        Even the old Eastern bloc piece of junk that my grandmother left when she passed away - I still use that one to scare the neighbour's cat when that pest climbs onto my balcony.

        why not just say hi to the cat and let it hang out on your balcony if it feels like it? maybe there's a spot with a good view, or nice sun.

        • Re: (Score:3, Informative)

          Because roaming cats are a pest. That particular one comes to my balcony only because birds come to drink water I leave for them during the hot summer days.

      • by thegarbz ( 1787294 ) on Monday November 03, 2025 @10:18AM (#65769698)

        I'm surprised one would bury this much time debugging a piece of crap instead of cleaning house with a simple vacuum cleaner once every few days.

        I'm very surprised people waste their time posting on Slashdot rather than doing more productive hobbies such as learning how hardware works and hacking something for the joy of it, but here we are.

      • I'm surprised one would bury this much time debugging a piece of crap instead of cleaning house with a simple vacuum cleaner once every few days.

        Do you really belong on Slashdot? He didn't hack the damned thing to get clean floors. He hacked it because he was curious about what it was doing (or not doing).

        Have you fallen into 'old man who yells at the clouds' mode?

      • I, for one, am very gratefule that there are people in the world who are passionate enough about to spent that amount of time doing things like this.
        • by Ocker3 ( 1232550 )
          Exactly, finding security gaps in these kind of iOT devices (while damn common) is part of pushing companies to actually make them Kind of secure, up from 'free data/hardware access if you know the default admin password that's published on the internet in plain text'. So Hari is doing good work for the global community.
      • I've also very likely used a lot less time for cleaning than this guy for debugging, and with better results.

        Sometimes it's about the journey. And sometimes it's about a destination that is not the one you see. Have you considered that this person enjoyed the whole process, and enjoys sharing their findings?

    • by haruchai ( 17472 )

      "I am waiting to see what happens when Optimus comes out. First, what they say it will do and then what it will actually do"
      Not hard to figure out.
      Elon said he wants a bigger share of the company because he's afraid that someone will oust him & take control of the "robot army" he intends to build.
      "Robot army" is all you need to know

  • by dfghjk ( 711126 ) on Sunday November 02, 2025 @09:56PM (#65768816)

    "This was clearly a kill command, and after he reversed it and rebooted the appliance, it roared back to life."

    oh yeah, just reverse the kill command!

  • by mschuyler ( 197441 ) on Sunday November 02, 2025 @09:56PM (#65768818) Homepage Journal

    This is like a cop show video that stops in the middle.

  • by vilain ( 127070 ) on Sunday November 02, 2025 @10:03PM (#65768826)

    I've bought some lemons on Amazon and I'm not shy about posting reviews saying things like "It didn't work out of the box. Sent it back." or the lastest "Bought it 4 years ago (laptop fan) and it just stopped working. Don't buy this." Unfortunately, Amazon flagged my account to not allow reviews any longer, so this place is the only place that will see this review.

    Bought a Dyson vacuum some 15 years ago. It's "power head" sweeper stopped working. There were no replacement parts for something this old available from Dyson or after-market. I'll never buy another Dyson product again. I expect a vacuum manufacturer to support their products for at least 20 years. Meile does. So does Electrolux.

    • by caseih ( 160668 ) on Sunday November 02, 2025 @10:08PM (#65768834)

      Funny you should mention Amazon reviews. I just posted a review where I point out that the set I was given and indeed nearly all the Star trek TNG box sets for sale on Amazon are counterfeit and buyers should beware. Amazon flagged it as not conforming to community guidelines. Anytime that might hamper business is apparently against their rules.

    • 15 years is a long time for a manufacturer to stock replacement parts. I understand auto manufacturers are supposed to stock repair parts for cars they sell for 10 years after they stop selling them.

      I think dropping support after 15 years (or even 10 years) is fine. That other brands can offer support for longer periods is nice, but it likely speaks to their extensive re-use of standard parts in subsequent generations of their products.

      • BMW still make parts for motorcycles last sold in 1955, apparently [bmwgroup-classic.com]
        • That are one of the differences between highest and low end brands. But I am in general wondering about the economics of making things last: Would it be profitable if companies had to pay for all externalities, i.e. environment damage, or wouldn't produce cheap and recycle raw materials still be more profitable?
      • by test321 ( 8891681 ) on Monday November 03, 2025 @03:46AM (#65769224)

        Legal minimum is 12 years in EU and I would be very shocked is my vacuum cleaner would be supported for only 12. (I bought it nearly 10 years ago). First comment from my mom when I told her I chose an Electrolux: "It will work for a very long time".

        There is a large amount of e-waste created by perfectly working appliances that are discarded just because some small accessory isn't available anymore. A typical yet shocking example are refrigerator doors and glass shelves.

        To reduce this problem the duration of mandatory support was recently increased to 5-10 years in the EU (depending which appliance), counting after the 2 years legal warranty, making 7-12 years in practice. https://commission.europa.eu/l... [europa.eu]

        • by Gilmoure ( 18428 )

          [Looks at my mom's Electrolux dumb vaccuum from the 1970s, still working]

        • That Electrolux isn't really an Electrolux.

          a couple of decades ago, in one of those weird corporate maneuvers, it sold the name, and now sells its vacuums under another name, while the buyer sells non-electrolux as Electrolux.

          So what she knows of Electrolux from the late 20th and early 21st centuries no longer applies.

          But, yes, they were very good and lasted forever. Also extremely pricey.

      • by TWX ( 665546 )

        15 years is a long time for a manufacturer to stock replacement parts. I understand auto manufacturers are supposed to stock repair parts for cars they sell for 10 years after they stop selling them.

        I think dropping support after 15 years (or even 10 years) is fine. That other brands can offer support for longer periods is nice, but it likely speaks to their extensive re-use of standard parts in subsequent generations of their products.

        And yet I can buy repair parts for a Kirby Classic III...

        https://www.kirby.com/shop/knu... [kirby.com]

    • So why didn't you buy a Meile or Electrolux?

      Our experience in the vacuum cleaners are disposable. If you get 2 years out of it, you're lucky.

      Of course we only buy ones that are $300 or less.

      Seems like wife is constantly buying a new vacuum cleaner.

      • by cruff ( 171569 )
        Wow, not sure what you are doing to your vacuums, but I've had two that easily lasted over 10 years. My current one is 12 years old.
      • Iâ(TM)ve never had a vacuum that lasts for such a short period of time. My current one (a Dyson) has been going 14 years and no reason to believe it will die anyone soon. I got rid of the 12 year old Hoover I had before only because I moved country and it wouldnâ(TM)t work with 220V. What is your wife doing to break so many vacuums, or are they just cheap crap that fails frequently? Youâ(TM)ve spent way more on vacuums than I have.

        • I dunno what she is doing either.

          But I know this much. Her ability to break shit seems unlimited. The list of shit, especially my shit, that she has broken is truly impressive.

          • by Gilmoure ( 18428 )

            Back when I did small company tech support in the '90s, had a customer (design/print shop) who knew their shit; not technologically illiterate by any means and stuff would just break around them. And it totally pissed them off when I would show up, touch a few boxes, restart a system they'd just restarted and- everything would work correctly. Printers that had been powering up into error states would just start up fine.

            Years later, ran across the lady and she was now running a dog sanctuary. She let her hus

          • by Malc ( 1751 )

            LOL. Thanks for the witty reply; I wish /. would let me just react like every other modern app or site.

        • by Targon ( 17348 )

          The quality of products has been going down due to companies and these overpaid CEOs looking to reduce quality to save the company money. Things from 14 years ago did have good quality, a new vacuum won't last as long.

      • by cstacy ( 534252 )

        So why didn't you buy a Meile or Electrolux?

        Our experience in the vacuum cleaners are disposable. If you get 2 years out of it, you're lucky.

        Of course we only buy ones that are $300 or less.

        Seems like wife is constantly buying a new vacuum cleaner.

        "Vaccum cleaner"?
        Is that what she calls it?

      • Don't know what crappy vacuums you buy if you only get 2 years out of it, you do know you can change the bag or clear the container...
      • So why didn't you buy a Meile or Electrolux?

        Because hindsight is the kind of things that idiots don't know exists?

        Our experience in the vacuum cleaners are disposable. If you get 2 years out of it, you're lucky.

        You have bad experience. Try not buying shit. Even my cordless vacuum is going 6 years now on its second battery.

    • by Kokuyo ( 549451 )

      I am very much pro consumer but I think you erxpectations are just unrealistic.

      A laptoo fan breaking after four years... I mean considering how laptopa get manhandled and how much dust and debris they encounter...

      Now if you can't replace the thing because the manufacturer made sure you couldn't, that would be grounds to be annoyed.

    • That's funny, because right now, I can any number of aftermarket add ons to my older cordless Dyson, I mean I can the latest add ons for new models that make mine better.....

      • Yeah he just needs a new power head. I did take apart one of mine once to fix it and they aren't designed to be serviced, nor are there parts. But it is kind of like repairing a motherboard instead of replacing it, it'd be nice to have the repairability scale down that far but it isn't intended by the manufacturer because you can swap it out and keep the larger machine going.
    • I don't believe there are no after market parts for Dyson hoovers. I'll bet you can find some in China...

    • by AmiMoJo ( 196126 )

      You have to choose between the best cleaning and longer term support. It sucks.

      Fortunately there are third parties that support older Dyson hardware. My V6 has a replacement battery from AliExpress, and it's been great for years.

    • I have a shark that needed a replacement part 12 years after I bought it. I was presently surprised to discover an oem part was easily available for a reasonable price. I don't really expect parts to be available for 20 years+ for consumer appliances, but its nice when they are.
  • Anybody who is surprised by this is an idiot.

    • Certainly? It's easy to assume it is, but perhaps there are actual reasons that it might be appropriate to remap the room every so often.

    • by Targon ( 17348 )

      The data collection shouldn't surprise anyone, but having the company do a remote kill of the device because the user blocks data transfer that isn't in the terms of use seems like it should break a number of laws.

  • The man bought a vacuum cleaner that required an internet connection, and that didn't make him suspicious?

    Not so clever I reckon...

    • It's Amazon page doesn't advertise that it requires an internet connection to function. It says you can control it from your phone. It doesn't say that's required nor that it'll stop working when your wide area network is down. Many phone controllable devices work fine when limited to your local network.

      Oddly they promote their use of the SLAM algorithm, something almost every customer has no clue what that is. They need better marketers.

  • Not so smart after all.

  • Run away!
    Never buy any device that requires cloud access

    • At the end of the article this advice is given: Never use your primary WiFi network for IoT devices. I don't need an article to know that. What I think is worthwhile, clearly a lot of effort went into this simply for the sake of investigation, to find EXACTLY what the situation was, after the basic facts were obvious. (Also clearly for a lot of hacking fun!) I would have enjoyed a more technical dive in the article...
  • Step one: Don't buy things that have unnecessary things attached to them.
  • ... a Vacubot yet, even though they're getting cheaper and better to the point of actually being useful.

    No effing way am I going to let some Internet of Trash device load excessive amounts of very personal and private data to some anonymous computer in the cloud. Obviously.

    • by Targon ( 17348 )

      Obviously, there is a difference between collecting data and doing a remote kill of the device if you block the data from going out.

    • ... a Vacubot yet, even though they're getting cheaper and better to the point of actually being useful.

      No effing way am I going to let some Internet of Trash device load excessive amounts of very personal and private data to some anonymous computer in the cloud. Obviously.

      The older vacubots didn't do any of this. I have a Roomba from 2012. It's still going strong and doesn't have *any* telemetry. No idea if you can still buy something similar, I don't know what I'll do when this one finally dies because I don't want any of the new spy vacuums in my house either.

  • I don't need my thermostat, frig, washer, dryer,Ring camera, etc to have to connect to the internet to wrong !! Read too many articles on here and elsewhere where it sends data home or support drops then bricks the device !
  • by djp2204 ( 713741 ) on Monday November 03, 2025 @11:25AM (#65769856)

    All these smart widgets, like smart phones, are designed to monetize you for advertising purposes. Thats it. Your âoesmart fridgeâ is collecting data about your grocery shopping, your smart tv is collecting information about your viewing habits. Your computer and isp are tracking your web habits, as is your favorite vpn provider. Your smart phone is collecting information about where you are going and what you are doing (even at the carrier level). Your car will soon be tracking your movements and driving habits so the data can be sold to car insurers. Itâ(TM)s all about data, ads, and finding new and better ways to drive consumption.

  • This entire story both sucks and blows.

Computer programmers do it byte by byte.

Working...