Mastodawn

Manufacturer issues remote kill command to disable smart vacuum after engineer blocks it from collecting data — user revives it with custom hardware and Python scripts to run offline

https://sh.itjust.works/post/51015947

Manufacturer issues remote kill command to disable smart vacuum after engineer blocks it from collecting data — user revives it with custom hardware and Python scripts to run offline - sh.itjust.works

An engineer got curious about how his iLife A11 smart vacuum worked and monitored the network traffic coming from the device. That’s when he noticed it was constantly sending logs and telemetry data to the manufacturer — something he hadn’t consented to. The user, Harishankar, decided to block the telemetry servers’ IP addresses on his network, while keeping the firmware and OTA servers open. While his smart gadget worked for a while, it just refused to turn on soon after. After a lengthy investigation, he discovered that a remote kill command had been issued to his device.

Show thread

spaghettiwestern Dec 5

My robot vac will only operate when connected to the Internet so it’s only allowed to communicate when actually in use. As soon as it returns to the charger Internet access is automatically blocked.

Unfortunately the manufacturer has deliberately made this as inconvenient as possible. If communication is blocked for more than a few hours the vacuum loses all maps and will no longer even load saved maps from the Tuya app. To use it the vac must be powered down and the app killed. Only then can a saved map be restored.

It’s too bad it’s so useful.

Name and shame.

from the Tuya app.

www.tuya.com/solution/hardware/robot-vacuum

Smart Cleaning Robot Solutions | Smart, convenient, and automated. A clean home starts here | Tuya Smart

Tuya's smart cleaning robot solutions cover nine application scenarios, including automatic cleaning, home map display, timing, remote control, voice control, automatic recharging, and video surveillance.