5 ms·
The recent drama around the unitree robot being effectively a beachhead on network has made me much more wary of connecting anything. Think I’ll stick to tasmot
by Havoc 2y ago
The recent drama around the unitree robot being effectively a beachhead on network has made me much more wary of connecting anything. Think I’ll stick to tasmota and zigbee going forward
- simonjgreen 2y agoCan you tell me more about the Unitree drama?
- walterbell 2y agohttps://news.ycombinator.com/item?id=43604706 https://news.ycombinator.com/item?id=43604706 Upon gaining access to the CloudSail API, which they did using a recovered API key, they could: List all connected devices and their IP addresses Establish remote tunnels to those devices Access the robot dog’s web interface with no authentication Use the robot’s cameras for live surveillance Log in via SSH using default credentials (pi/123) Move laterally within internal networks to which the robot is connected