Manufacturer Disables Smart Vacuum After Data Collection Blocked

An engineer, Harishankar, investigated his iLife A11 smart vacuum’s network traffic and found it was sending telemetry data to the manufacturer without consent. After blocking the telemetry servers, the vacuum failed to turn on, prompting him to disassemble it. He discovered vulnerabilities in its software, including an unprotected Android Debug Bridge and a hidden kill command that bricked the device. Ultimately, he reversed the command, restoring functionality, but revealed serious privacy concerns with the device’s data collection practices.

Want More Context? 🔎