Security News > 2021 > November > The self-driving smart suitcase… that the person behind you can hijack!
Why drag your carry-on luggage behind you when you can simply strap on a Bluetooth wristband and let the luggage follow you through the airport, steering its way around obstacles, thus saving you the hassle of dragging round all the extra weight that the suitcase needs, in the form of batteries and motors, to drag itself around for you?
If you don't get around to installing the app and pairing it with your own suitcase.
Then anyone else can pair with it instead, even if you've instructed it to follow behind you.
By following your suitcase as it follows you, a suitacasejacker could pair their phone with your luggage and simply drive it off, without ever laying a hand on it, thanks to a hardwired pairing code.
PTP also discovered that the suitcase firmware doesn't seem to be digitally signed, which could allow rogue firmware updates, and that the company hasn't yet managed to get its app into Google's Play Store, forcing you to sideload it instead. What to do? If you can't resist this self-driving suitcase, make sure you pair it with your own phone as well as with your wristband, so that fellow airport travellers can't trivially hijack it.
As PTP points out, picking a random password and putting a printout inside the suitcase before delivery would be a simple place to start.