Yarbo says it will intentionally remove the rear door on its lawn mowers


Company behind the lawnmower that ran me over he has changed his words. Yarbo now plans to remove backdoor access that would allow malicious actors to reprogram the bot online. Yarbo customers will be able to decide if this is implemented, co-founder Kenneth Kohlmann promises Seaside.

Yarbo was was promised earlier on Friday that it will address many security issues, closing loopholes that allow security researcher Andreas Makris to hack into any bladed robots on the other side of the world, and reveal email addresses and GPS locations. But when it came to the big shots, Yarbo stood up for the moment. The company said it would maintain a backdoor so “authorized internal staff” could support remote devices – only with more security.

Yarbo customers don’t have to decide if their robots have a back door ever? When we asked last week, the company initially said the answer was no. “Completely removing remote diagnosis capabilities would reduce our ability to help customers address security, connectivity, and service issues quickly, especially if physical check-ins are not possible,” spokespeople Showan Hou and Maggie Zhou told us on Saturday.. The company said it is still considering solutions as well strength allow users to log out.

But by Monday, when Kohlmann called me from the airport, the company had decided to move forward. The company is producing choose to enter which you can install if you need remote support. “In the future there should be no remote back door unless the user chooses to log in,” he says Seaside.

Above: my first video about the Yarbo robotic lawnmower.

Kohlmann warns that it will take time to remove the tunnel, and the files needed to install the new version may still be technically installed on each robot’s internal storage. “It could be a script that sits on the machine and doesn’t do anything unless the user activates it,” he says. “If the user activates it, then it installs a temporary tunnel once.”

You might want to try uploading your script file to Yarbo tech support before going there, he says. If that’s not enough to diagnose the problem, you can also set up a remote interface.

It’s hard to tell if Yarbo keeps his promise to remove random remote access, because he’s already shutting down his bots (as they should!) following our story. Kohlmann says that every device will soon have to have a unique password, which Yarbo cannot provide to users; firmware updates have already started for the first 1,000 machines and are coming to additional waves of robots.

But Kohlmann says the company is now in contact with Makris, and it’s possible that a security researcher will be able to confirm the changes.



Source link

اترك ردّاً

لن يتم نشر عنوان بريدك الإلكتروني. الحقول الإلزامية مشار إليها بـ *