He took control of 6,700 vacuum cleaners. How? Unwittingly
The situation is truly bizarre. As Sammy emphasized in an interview with The Verge, he did not hack into DJI servers, break any security, or bypass any locks. All he did was get his vacuum cleaner’s individual token and reverse engineer it.
He accidentally took control of thousands of vacuum cleaners
His app gave him access to 6,700 vacuum cleaners of this model around the world. He could spy on people, eavesdrop on them, had plans of their rooms that were generated by vacuum cleaners, and was also able to remotely take control of each of them.
As soon as he discovered this, he immediately contacted DJI. The company, however, took it seriously and released several patches that it installed on the server side. However, as Sammy Adoufal emphasizes, not all problems have been solved. However, he did not provide details here so as not to tempt fate.
However, he emphasized that the biggest problem is that all data on servers is stored in plain text. Thus, the person who has access to it. This shows that an intelligent vacuum cleaner, a device so convenient and at the same time inconspicuous, can pose a serious threat to the safety of our property and ourselves.
