Hacking a Robot Vacuum
Someone tries to remote control his own DJI Romo vacuum, and ends up controlling 7,000 of them from all around the world.
The IoT is horribly insecure, but we already knew that.
Comments
Just Like My St00p1d Neighbor • March 19, 2026 8:09 AM
Just like my neighbor who moved into da hood to spy on me, ended up being meticulously and UNapologetically spied upon, house bugged, vehicle bugged, the whole 9…
These dirty cops in liberal Boise Idaho are a THREAT TO JUSTICE, TRUTH, AND THE AMERICAN WAY. Along with their criminal mayor.
And then you have a NERVE to come on this blog, and report every comment that exposes your LIES AND CORRUPTION, U FKN MUDDY SLIME, and sign your name with a “…”
Typical islamic terrorist attacks.
How do you justify NOT BEING ABLE TO SPY ON ME?
Only in 1deh0 r u allowed to run an IP theft site and be on the payroll of we duh $h33p13.
ONLY IN 1deh0.
Balkan GARBAGE!
Clive Robinson • March 19, 2026 10:10 AM
@ Bruce, ALL,
With regards,
“The IoT is horribly insecure, but we already knew that.”
It’s not what “we already knew” it’s about what the many others don’t know that really matters.
The reality is that “vibe coding” is heading toward IoT devices near you any time soon… And with them spread far and wide, security will be even worse for everyone…
I guess the real question will be,
“How long before the Internet is unusable, due to the proliferation of junk code on junk hardware?”
Rontea • March 19, 2026 10:59 AM
This isn’t some edge case—it’s the predictable result of shipping connected products with minimal authentication, insecure communication protocols, and no meaningful patching strategy.
The industry keeps racing to connect everything to the Internet, from vacuums to refrigerators, and the result is a global network of vulnerable devices waiting to be abused. We’ve known this for years, and yet the market rewards speed and low cost over security. Until manufacturers are held accountable—and until regulation enforces baseline security standards—these kinds of hacks will only get worse.
Bernie • March 19, 2026 11:17 AM
Some correct me if I’m wrong.
The article’s sub-headline-thing reads, “The immediate threat may be fixed, but this raises serious questions.” What serious questions does it raise (that haven’t already been raised long enough ago)? Or am I reading too much into that sentence? Is it more clickbait than anything?
Subscribe to comments on this entry
Leave a comment
Sidebar photo of Bruce Schneier by Joe MacInnis.
Wow • March 19, 2026 6:01 AM
Pretty impressive screwup for a company like DJI. Interesting read! Somehow I’m first