Security News > 2020 > March > Ironpie robot vacuum can suck up your privacy

According to its maker, Trifo, the Ironpie home surveillance robot vacuum isn't just your dust bunnies' worst nightmare.

It's true, the artificial intelligence -enhanced internet of things robot vacuum can indeed be connected to the internet via Wi-Fi, can be controlled remotely for vacuuming, and can remotely stream out video showing its surroundings, given that - like other IoT gadgets - it comes equipped with a video camera.

Via MQTT, attackers could get at data such as the SSID of Wi-Fi network to which the vacuum is connected, plus the vacuum's IP address, MAC address and more.

That means, for example, that attackers could remotely access an Ironpie robot vacuum in a corporate office, record confidential conversations, and use its AI capabilities to make a map of the room, Checkmarx says.

It's one way that can help to keep robot vacuums hard at work sucking up crumbs, not your privacy.

News URL

https://nakedsecurity.sophos.com/2020/03/02/ironpie-robot-vacuum-can-suck-up-your-privacy/