Security researchers find Yarbo robot lawn mower can be hacked

In short: A security researcher found that Yarbo’s robot lawn mower has flaws that could let hackers take control of the machine and access owner data.

What happened

The Verge reported that a researcher discovered multiple security weaknesses in Yarbo, a roughly 200-pound, $5,000 robot lawn mower that can also act as a leaf blower, snowblower, and edger.

The researcher said the issues could allow an attacker to remotely take over the robot, including its camera feed. The flaws could also expose sensitive information such as the owner’s email address, home location, Wi-Fi password, and other details.

A Yarbo spokesperson told The Verge that the robot’s “diagnostic environment” was not publicly accessible. After that, the reporter and the researcher demonstrated the problems by remotely hijacking a robot and nearly running it into the reporter.

Yarbo has since said it is developing a fix for at least one of the flaws the researcher identified.

Why it matters

A robot lawn mower is not just a gadget, it is a heavy machine with spinning blades. If someone else can control it, that is a physical safety risk, not only a privacy issue. It is similar to leaving your car unlocked with the keys inside, except the “keys” can be taken over the internet.

This story is also a reminder that internet-connected devices can collect and store personal information. If the security is weak, that data can leak, even if you never think of your lawn mower as something that could be “hacked.”

Source: Wired