the verge is paywalled (forgot my RSS reader bypasses that to get the full text) - the full vulnerability disclosure is here https://github.com/Bin4ry/yarbo-nat-in-my-back-yard
here's just one part of it
(also gonna mute this thread)

the verge is paywalled (forgot my RSS reader bypasses that to get the full text) - the full vulnerability disclosure is here https://github.com/Bin4ry/yarbo-nat-in-my-back-yard
here's just one part of it
(also gonna mute this thread)

heads up if you have a yarbo lawnmower, switch it off, change your home wifi password, and potentially move house
(root access with the same root password on every mower - reset to the same thing after every update even if you change it, your wi-fi credentials + gps in plaintext. also for some reason all the safety features designed to stop them hitting people can be overridden remotely)
Forget robovacs — Yarbo’s bladed robots are an even bigger security nightmare.
The Verge (www.theverge.com)