DEF CON 31: Robot vacuums may be doing more than they claim

This article recaps a DEF CON 31 talk by Dennis Giese on the privacy and security risks of robot vacuums, emphasizing how vendor claims (e.g., “no cloud data,” “optical sensors”) can conflict with actual behaviors like remote camera streaming and image capture. The presenter explored rooting devices (without disassembly) to disable data sharing and return control to owners, while noting that certifications from respected labs may not reflect real-world practices. The piece urges thorough pre-purchase research and advocates coordinated vulnerability disclosure to avoid unpatched exposures.