Even if you press that big red emergency stop button on the mower itself, a hacker can send another command to unlock it, Makris says.

Holy cow. I work in factories, and I know enough about industrial safety to know that would not fly.

copied from my mastodon

Alexa, mow down my enemies and livestream me the audio so I can hear the lamentation of their women.

Did they vibe coded the backend?

An hacker can get:

• GPS position
• Email address
• Video feed
• WiFi password
• Root access to a Linux client in the same WiFi network of the victim which means can change the DNS servers in the router for a mitm Attack if the default password hasn't been changed (and nobody changes that)

And they demonstrated to the journalist..

1. Get a list of every "smart" lawnmower nearby a nuclear plant
2. Check the emails of the owner in LinkedIn or something like that to see who could work at that nuclear plant
3. Have access to his home network and a video feed on a robot that can be remotely moved to other position to check the perimeter

Scary

Makris explains that not only does each Yarbo robot have the same hardcoded root password, but owners can’t defend themselves just by manually setting a better password. Every time Yarbo updates a robot’s firmware, it changes the robot’s root password right back to its default password.

lol

he did it intentionally.

"I’ve made the questionable decision of lying down in the mower’s path — to see just how far Makris, the security researcher who discovered those flaws, is able to push the mower."

Sounds like making dangerous home robots with spinning blades and wireless connectivity is a bad idea

Read without the paywall: https://archive.is/mTp9k

This sounds like a storyline for the next Honey I Shrunk the Kids movie?

And shouldn't it be...em...the Grass Verge?

I'll get my coat.

Flashbacks to Lawnmower Man

I laughed at this.

Don't tell that guy