Robot Vacuum Hacked, Exposing Home Secrets

In a concerning security lapse, thousands of DJI Romo robot vacuums were found to be vulnerable to hacking. A software engineer, Sammy Azdoufal, unintentionally discovered a flaw that allowed him to access sensitive data from numerous devices worldwide. The breach exposed not only 3D floor plans but also live camera feeds and microphone audio from the robot vacuums.

Azdoufal alerted DJI to the issue, and the company has since patched the authentication loophole. However, the incident highlights significant security risks associated with internet-connected devices that have cameras roaming inside homes. Similar vulnerabilities have been observed in other smart home devices, but robot vacuums present a unique threat due to their mobility.

This event underscores the potential for misuse of AI-powered devices and raises questions about consumer confidence in camera-equipped robot vacuums. The DJI Romo vacuum has also reportedly been removed from DJI's online store. Experts suggest disabling camera features or using low-tech solutions like covering the lens when not in use, especially given that not all devices provide warnings when in remote viewing mode.