this post was submitted on 21 Jul 2026
103 points (97.2% liked)

Technology

86512 readers
3452 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
 

Shark vacuum robots have an unpatched flaw that could let attackers access cameras, WiFi passwords, and home maps, researcher claims.

Researcher Tokay0 says SharkNinja failed to fix the issue more than 90 days after private disclosure.

The flaw involves AWS IoT certificates, with 673,000 exposed SharkNinja devices observed in one AWS region.

you are viewing a single comment's thread
view the rest of the comments
[–] ranzispa@mander.xyz 9 points 1 day ago (1 children)

But... Why does a vacuum cleaner need wifi access?

[–] Zarobi@aussie.zone 9 points 21 hours ago (2 children)

So you can turn it on and access complex settings like map layouts and scheduling from your phone. Not sure how else you would do it. You can implement wifi securely, in this case they didn't

[–] AliasAKA@lemmy.world 2 points 20 hours ago (1 children)

You can have local control over such things, and IOT devices should be locked down to only ever access via LAN anyways.

[–] Zarobi@aussie.zone 2 points 20 hours ago (2 children)

That still needs wifi access though. Internet access is a different story, I can't think of almost anything that needs internet access. Maybe security camera.

Is it easy to isolate a device to LAN only via router? I never figured out how to do it.

[–] AliasAKA@lemmy.world 2 points 20 hours ago* (last edited 20 hours ago)

It can be “easy” depending on your definition of easy. For the average person, no, not easy. For a tech person, maybe, depending on their interests and proficiencies. Easiest is likely using a firewall on the router blocking all outbound and inbound WAN connections (for the MAC address associated with the device, assuming it doesn’t try to rotate MAC addresses or hop on any open WiFi networks around you). Some devices will straight refuse to work if you do this, however. So you have to do research and be careful about which products you buy.

If you want a vacuum, see the valetudo link I posted in another comment. It has some options for this that you can load local only custom firmware (and integrate it with home assistant).

[–] corsicanguppy@lemmy.ca 1 points 20 hours ago

Maybe security camera.

That's the one you want to keep off the Internet the MOST!

Is it easy to isolate a device to LAN only via router?

The easiest thing is to have the InternetOfTrash devices with no configured route; just broadcast and that's it.

[–] comador@lemmy.world 2 points 20 hours ago* (last edited 20 hours ago) (1 children)

Eufy has offline models like the G, L, and X series which come with a remote that you can do 100% of that from, no wifi needed.

[–] Zarobi@aussie.zone 2 points 20 hours ago* (last edited 20 hours ago) (1 children)

Does it let you paint a square in your map layout to not mop there? Or split an incorrectly merged room into two? Or select specific rooms to do more often? I'm sure the remote is great for basic use though, but there's a lot you can't do with it

[–] comador@lemmy.world -2 points 20 hours ago* (last edited 20 hours ago) (1 children)

When you get to that point, you really need to just hire someone and quit fucking around with shitty wifi enabled products.

Edit: Being less obtuse, if you really need such a niche feature, at least block it from having Internet access and restrict it to your LAN as there is sincerely zero reason that cannot be labelled as laziness for needing Internet access on a home appliance.

[–] Zarobi@aussie.zone 3 points 20 hours ago

It's a lot cheaper, at least where I live. It's also way more convenient to just put on the robot vacuum mop thing every few weeks. But you do you man