Yarbo Reverses Course on Robot Mower Security

Yarbo has announced a significant change in its approach to the security vulnerabilities found in its robot lawn mowers. The company will now completely remove the remote backdoor access that previously allowed for potential reprogramming over the internet. This decision comes after security researcher Andreas Makris demonstrated how easily the bladed robots could be hijacked remotely, exposing sensitive user data like email addresses and GPS locations.

Previously, Yarbo had stated its intention to keep a remote backdoor for internal troubleshooting. However, customer feedback and concerns have led to a reversal. Co-founder Kenneth Kohlmann confirmed that remote diagnostic capability will become an opt-in feature. Users will have the explicit choice to install it if they require remote assistance, ensuring they control the security of their devices.

Kohlmann also indicated that the process of removing the remote tunnel will take time. While the necessary files might still be present on the robots' internal storage, they will not be active unless triggered by the user. Furthermore, Yarbo is implementing unique root passwords for each device and has already begun rolling out firmware updates to enhance overall robot security.