Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people’s Shark vacuums across the same AWS region: watch the camera, drive the robot, read the map of the house, and take the Wi-Fi password in plaintext.
A researcher publishing under the handle tokay0 put the method online on Monday, having tested it only against vacuums he According to The Hacker News, pull the certificate off the flash of a shark rv2320edus robot vacuum, and you can run root commands on other people’s shark vacuums across the same aws region: watch the camera, drive the robot, read the map of the house, and take the wi-fi password in plaintext.
a researcher publishing under the handle tokay0 put the method online on monday, having tested it only against vacuums he. The development comes amid ongoing regulatory scrutiny in the sector. The Hacker News reports that this marks a significant milestone for the industry. The The Hacker News report provides additional context on the implications for market participants and regulatory frameworks moving forward.
