The smart home trend has been growing, with various internet-connected devices making our lives more convenient. However, there are concerns about the security of these smart gadgets, as demonstrated by security researchers at the Defcon hacking conference. They revealed that Ecovacs smart vacuums and mowers could be hacked to spy on users through their microphones and cameras.
Researchers Dennis Giese and Braelynn found vulnerabilities in the Ecovacs robots that could be exploited remotely via Bluetooth. They discovered that hackers could take control of the robots from up to 425 feet away. Additionally, the robots are connected to the internet via Wi-Fi, allowing hackers to potentially access them from even greater distances.
The security researchers highlighted that robot mowers are more susceptible to hacking than robot vacuums because their Bluetooth connections are always active. This poses a significant privacy risk, as these devices do not have any indicators to show when their cameras or microphones are in use.
In addition to the privacy concerns, the researchers identified other security issues with Ecovacs robots. For example, data stored on Ecovacs’ cloud servers is not deleted when a user deletes their account, leaving sensitive information accessible to potential hackers. Furthermore, the anti-theft mechanism on the robots is poorly implemented, as the PIN is stored in plain text, making it easy for hackers to access.
The security researchers analyzed several Ecovacs robot models, including the Deebot series, Goat G1, Spybot Airbot Z1, and others. Despite reporting these vulnerabilities to Ecovacs, the researchers did not receive a response from the company. This lack of action raises concerns about the security of these popular smart home devices.
As the smart home market continues to expand, it is essential for manufacturers to prioritize user privacy and security. Consumers should be cautious when using internet-connected devices and ensure that they are regularly updated with the latest security patches. By taking proactive measures to protect their privacy, users can enjoy the convenience of smart home technology without compromising their security.
