{"id":787070,"date":"2026-02-25T02:09:17","date_gmt":"2026-02-25T02:09:17","guid":{"rendered":"https:\/\/www.europesays.com\/uk\/787070\/"},"modified":"2026-02-25T02:09:17","modified_gmt":"2026-02-25T02:09:17","slug":"the-accidental-hacker-how-one-man-gained-control-of-7000-robots-homes","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/uk\/787070\/","title":{"rendered":"The accidental hacker: how one man gained control of 7,000 robots | Homes"},"content":{"rendered":"

Name:<\/strong> The accidental hacker.<\/p>\n

Age:<\/strong> It doesn\u2019t matter how old Sammy Azdoufal is. What he did is what\u2019s important here, and what he did is very much of the age.<\/p>\n

And what did <\/strong>Azdoufal do?<\/strong> He hooked up his DJI Romo vacuum cleaner to his PS5 controller.<\/p>\n

Why?<\/strong> Because, he told the New York-based tech news publication the Verge, it sounded fun.<\/p>\n

OK, each to their own<\/strong>. And how did he do this?<\/strong> He used an AI coding assistant, Claude Code, to reverse-engineer how the home robot vacuum communicated with DJI\u2019s remote cloud servers \u2026<\/p>\n

Whoa, you\u2019re losing me. <\/strong>I\u2019m losing myself too, to be honest. Look, Azdoufal is a software engineer, he\u2019s the head of AI strategy at a holiday rental company, he knows how to do this stuff. But what\u2019s interesting is what happened next \u2026<\/p>\n

What happened next? Presumably he lay on the sofa, directing his vacuum cleaner with his joystick<\/strong> \u2013 which does actually sound fun, even if it slightly negates the whole point of a robot<\/strong>. <\/strong>He found that not only could he control his own robot, but that he had gained access to data from other robot vacuum cleaners.<\/p>\n

What kind of data?<\/strong> Live camera feeds, microphone audio, maps from nearly 7,000 devices across 24 countries.<\/p>\n

Tinker Tailor <\/strong>Cleaner <\/strong>Spy!<\/strong> Albeit an unwitting one. But yes, Azdoufal had discovered a backend security bug that could mean whole swarms of web-connected vacuum cleaners\/surveillance devices spying on their owners without them even knowing.<\/p>\n

Incredible! What did he do with such power? <\/strong>As I said, he took his findings to the Verge<\/a>. One of its reporters gave Azdoufal the serial number of a DJI Romo vacuum he\u2019d just been testing for review; within minutes Azdoufal could see it cleaning the reporter\u2019s living room, that it had 80% battery life remaining, and had it generate and transmit a floor plan of the house.<\/p>\n

That\u2019s terrifying. Is there a chance that more nefarious actors than Azdoufal could <\/strong>be using these robot vacuum cleaners to spy on us<\/strong>? <\/strong>The <\/strong>Chinese company DJI – Shenzhen Da-Jiang Innovations Sciences and Technologies Ltd \u2013 initially told the Verge the problem \u201cwas resolved\u201d, but according to Azdoufal, DJI hadn\u2019t fixed all the vulnerabilities he\u2019d found. Since the Verge published its report, DJI has also been in touch with Popular Science to say the issue had been \u201cresolved\u201d<\/a>. <\/strong><\/p>\n

Of course they did.<\/strong> But this incident certainly highlights some of the warnings and fears surrounding smart home devices and robots and how they could become a target for hackers. Or perhaps already are \u2026<\/p>\n

Do say: <\/strong>\u201cYeah, I know you\u2019ve got eyes and a creepy smile, but I\u2019m sticking with you, Henry<\/a>. Because you can\u2019t actually see \u2026. Can you?\u201d<\/p>\n

Don\u2019t say: <\/strong>\u201cYou missed a bit in the corner \u2013 yes, you there, in Taipei. And we\u2019re watching \u2026\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"Name: The accidental hacker. Age: It doesn\u2019t matter how old Sammy Azdoufal is. What he did is what\u2019s…\n","protected":false},"author":2,"featured_media":787071,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[7],"tags":[53,16,15],"class_list":["post-787070","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-technology","tag-uk","tag-united-kingdom"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@uk\/116128839397107447","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/posts\/787070","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/comments?post=787070"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/posts\/787070\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/media\/787071"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/media?parent=787070"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/categories?post=787070"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/tags?post=787070"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}