Shark vacuum robots have an unpatched flaw that could let attackers access cameras, WiFi passwords, and home maps, researcher claims.
Researcher Tokay0 says SharkNinja failed to fix the issue more than 90 days after private disclosure.
The flaw involves AWS IoT certificates, with 673,000 exposed SharkNinja devices observed in one AWS region.
That still needs wifi access though. Internet access is a different story, I can’t think of almost anything that needs internet access. Maybe security camera.
Is it easy to isolate a device to LAN only via router? I never figured out how to do it.
It can be “easy” depending on your definition of easy. For the average person, no, not easy. For a tech person, maybe, depending on their interests and proficiencies. Easiest is likely using a firewall on the router blocking all outbound and inbound WAN connections (for the MAC address associated with the device, assuming it doesn’t try to rotate MAC addresses or hop on any open WiFi networks around you). Some devices will straight refuse to work if you do this, however. So you have to do research and be careful about which products you buy.
If you want a vacuum, see the valetudo link I posted in another comment. It has some options for this that you can load local only custom firmware (and integrate it with home assistant).
That’s the one you want to keep off the Internet the MOST!
The easiest thing is to have the InternetOfTrash devices with no configured route; just broadcast and that’s it.
I know people who like being able to see their camera remotely. For example ,if someone is trespassing on their farmland, or business. I don’t use this feature personally, but I can see why people might want it