{
    "version": "https://jsonfeed.org/version/1",
    "title": "eay.cc",
    "description": "Weblog von Stefan Grund",
    "home_page_url": "https://eay.cc",
    "feed_url": "https://eay.cc/2026/the-dji-romo-robovac-had-security-so-poor-this-man-remotely-accessed-thousands-of-them/feed/json",
    "icon": "https://eay.cc/apple-touch-icon.png",
    "favicon": "https://eay.cc/favicon.ico",
    "author": {
        "name": "Stefan Grund",
        "url": "https://stefangrund.de/",
        "avatar": "https://stefangrund.de/avatar.jpg"
    },
    "items": [
        {
            "id": "41267",
            "_type": "link",
            "url": "https://eay.cc/2026/the-dji-romo-robovac-had-security-so-poor-this-man-remotely-accessed-thousands-of-them/",
            "title": "The DJI Romo robovac had security so poor, this man remotely accessed thousands of them",
            "content_html": "<p><a href=\"https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt\" title=\"The DJI Romo robovac had security so poor, this man remotely accessed thousands of them\">Link \u2192</a></p><p>&#8222;Sch\u00f6ne&#8220; Geschichte, die <a href=\"https://bsky.app/profile/seanhollister.bsky.social\">Sean Hollister</a> bei The Verge festgehalten hat: Ein Entwickler aus Barcelona wollte seinen neuen Saug- und Wischroboter von DJI per PS5-Controller steuerbar machen und zog Claude Code zur Hilfe. Nach wenigem Vibe-Coding stellt der Entwickler fest, dass er nicht nur Zugriff auf seinen <a href=\"https://store.dji.com/de/product/dji-romo-p-water-tank-version\">DJI Romo</a> hat, sondern auf tausende Ger\u00e4te \u00fcberall auf der Welt. Inklusive Batteriespeicher von DJI, die n\u00e4mlich alle mit kaum abgesicherten MQTT-Servern vom Hersteller sprechen. <a href=\"https://youtu.be/Lfm7CUG8gSE?\">Die PS5-Steuerung funktioniert</a>  \u2013 und Fernzugriff auf Kamera (!) und Mikrofon (!) des Saugroboters gab&#8217;s kostenlos obendrauf.</p>\n<p>Wtf. Und warum haben Saugroboter \u00fcberhaupt Mikrofone verbaut?<span hidden class=\"__iawmlf-post-loop-links\" data-iawmlf-links=\"[{&quot;id&quot;:10850,&quot;href&quot;:&quot;https:\\/\\/bsky.app\\/profile\\/seanhollister.bsky.social&quot;,&quot;archived_href&quot;:&quot;http:\\/\\/web-wp.archive.org\\/web\\/20260211200702\\/https:\\/\\/bsky.app\\/profile\\/seanhollister.bsky.social&quot;,&quot;redirect_href&quot;:&quot;&quot;,&quot;checks&quot;:[{&quot;date&quot;:&quot;2026-02-14 22:04:45&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-02-17 22:11:19&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-02-21 00:36:16&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-02-24 02:06:05&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-02-27 14:43:19&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-03-03 06:41:24&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-03-06 23:53:27&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-03-12 18:10:33&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-03-16 17:02:10&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-03-21 13:39:13&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-03-25 19:08:58&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-03-28 23:48:23&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-04-03 19:10:06&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-04-08 00:37:07&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-04-11 15:16:50&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-04-14 21:05:26&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-04-18 22:13:54&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-04-24 16:05:31&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-04-29 23:28:06&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-05-04 23:30:37&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-05-14 03:25:44&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-05-17 12:12:55&quot;,&quot;http_code&quot;:200},{&quot;date&quot;:&quot;2026-05-20 17:50:54&quot;,&quot;http_code&quot;:200}],&quot;broken&quot;:false,&quot;last_checked&quot;:{&quot;date&quot;:&quot;2026-05-20 17:50:54&quot;,&quot;http_code&quot;:200},&quot;process&quot;:&quot;done&quot;},{&quot;id&quot;:10851,&quot;href&quot;:&quot;https:\\/\\/store.dji.com\\/de\\/product\\/dji-romo-p-water-tank-version&quot;,&quot;archived_href&quot;:&quot;&quot;,&quot;redirect_href&quot;:&quot;https:\\/\\/store.dji.com\\/product\\/dji-romo-p-water-tank-version&quot;,&quot;checks&quot;:[],&quot;broken&quot;:false,&quot;last_checked&quot;:null,&quot;process&quot;:&quot;done&quot;},{&quot;id&quot;:10852,&quot;href&quot;:&quot;https:\\/\\/youtu.be\\/Lfm7CUG8gSE?&quot;,&quot;archived_href&quot;:&quot;&quot;,&quot;redirect_href&quot;:&quot;https:\\/\\/www.youtube.com\\/watch?v=Lfm7CUG8gSE\\u0026feature=youtu.be&quot;,&quot;checks&quot;:[],&quot;broken&quot;:false,&quot;last_checked&quot;:null,&quot;process&quot;:&quot;done&quot;}]\"></span></p>\n<img decoding=\"async\" src=\"https://eay.cc/wordpress/count.php?url=https%3A%2F%2Feay.cc%2F2026%2Fthe-dji-romo-robovac-had-security-so-poor-this-man-remotely-accessed-thousands-of-them%2F\" style=\"border:0;\" width=\"1\" height=\"1\" alt=\"\" />",
            "date_published": "2026-02-14T21:03:57+00:00",
            "date_modified": "2026-02-14T21:05:14+00:00",
            "author": {
                "name": "Stefan"
            },
            "tags": [
                "claude",
                "dji",
                "k\u00fcnstliche intelligenz",
                "roboter",
                "sicherheit"
            ],
            "_short_url": "https://eay.li/3zd",
            "_syndication": [
                "https://bsky.app/profile/eay.social/post/3metzu2it3e2g",
                "https://eay.social/@eay/116071244668959495"
            ],
            "external_url": "https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt"
        }
    ]
}