Security Risks with Yarbo Robot Mowers and Measures to Protect Your Network

Security Flaws in Robot Mowers

Robot mowers, like those from Yarbo, have raised concerns due to security risks identified in a recent independent report by researcher Andreas Makris. These machines, designed to make lawn maintenance easier, have vulnerabilities that may allow remote access, live camera monitoring, and Wi-Fi credential theft.

The report affects around 6,000 Yarbo robots, highlighting issues with remote access setups, persistent connections, and hardcoded passwords.

Yarbo’s Response and Security Measures

Following the report, Yarbo acknowledged the issues and began implementing security fixes. They admitted to flaws in remote diagnostics and credential management systems, promising improvements.

Risks Associated with Connected Smart Devices

Smart devices, including robot mowers, require internet access for functionality. This need poses a risk if remote access controls are improperly configured. The Yarbo report shows potential risks such as using the device as a network entry point for attackers.

Camera and Wi-Fi Concerns

Yarbo robots often carry multiple camera feeds. If compromised, attackers could view areas around your property. Moreover, retrieval of Wi-Fi credentials from these robots threatens other networked devices.

Yarbo’s Security Fixes and Future Plans

Yarbo retired fleet-level root credentials and revoked shared remote-access credentials following the report. They’re rebuilding credential management for individualized access per device.

Connection Transparency and Privacy Questions

The report points to data connections with Yarbo’s parent company and other platforms. Yarbo promised increased transparency regarding what data is exchanged and for what purpose.

Protecting Your Network

• Place your robot mower on a guest network instead of the main home Wi-Fi.
• If worried, change your main Wi-Fi password to something unique and secure.
• Review devices connected to your router regularly and remove any unfamiliar ones.
• Use router settings to isolate guest devices from accessing the entire network.
• Demand specific answers from Yarbo about ongoing diagnostic access and control mechanisms.
• Keep the robot updated but remain cautious about network exposure.

For more information and updates, Yarbo’s Security Center provides ongoing details.

Conclusion

While smart yard tools offer convenience, they should also guarantee security and transparency. Ensure any smart device, including Yarbo robots, is adequately isolated from your main network. You should clearly understand who can access your devices and have control over these settings.