#sharkninja — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #sharkninja, aggregated by home.social.
-
This week in food: New coffee spots, dining destinations, 8.8 deal and more
-
#SharkNinja und die #IoT Sicherheit. 😨
Um was geht es?
♦️ Shark vacuum robots have an unpatched flaw that could let attackers access cameras, WiFi passwords, and home maps, researcher claims.
♦️ Researcher Tokay0 says SharkNinja failed to fix the issue more than 90 days after private disclosure.
♦️ The flaw involves AWS IoT certificates, with 673,000 exposed SharkNinja devices observed in one AWS region.
♦️ Attackers need physical device access first, limiting the risk mainly to technically skilled people with a Shark device.
Was ist das #security Problem?
"The problem lies with an unpatched AWS Internet of Things (IoT) policy flaw within the Shark vacuums. The researcher discovered the problem after disassembling a Shark RV2320EDUS robot vacuum.!
Wie viele Geräte sind betroffen?
"At the same time, over 1.5 million unique SharkNinja devices were observed in the same AWS region. If a similar proportion of affected devices existed across all 39 AWS Cloud regions, the number of exposed devices could reach into the millions."
Das ist der Grund warum #IoT immer einen sehr guten Schutz haben sollten. Die Anbieter handeln aus meiner Sicht grob fahrlässig wenn sie keine Abhilfe schaffen. 🔥
Ob die #EU einmal zeigen könnte, so geht es nicht? Eine angemessen hohe Strafe dürfte die Sicherheit deutlich verbessern. 🙂
Noch besser, keinen #IoT-Mist kaufen der die Sicherheit untergräbt. 👍
https://cybernews.com/security/sharkninja-vacuum-security-flaw-researcher/
-
Manche Hersteller kennen kein Verantwortungsbewußtsein
Der Umgang des Herstellers mit dem Fund ist der eigentlich unangenehme Teil. Nach der Zeitleiste des Forschers lief der erste Kontakt zu SharkNinja am 1. März, die Details folgten am 11. März, der Empfang wurde am 12. März bestätigt. Ende April hieß es, der Bericht sei „in Prüfung“. Anfang Juli stellte das Unternehmen einen Abschluss bis zum 10. Juli in Aussicht – und meldete sich dann nicht. Am 13. Juli machte tokay0 die Lücke öffentlich; einen Patch oder eine Stellungnahme gab es zu diesem Zeitpunkt nicht. Nach dem Bericht soll SharkNinja die Schwere heruntergespielt und infrage gestellt haben, ob überhaupt „eine CVE angemessen“ sei. Eine CVE-Nummer ist bis heute nicht vergeben.
https://www.blogspan.net/shark-saugroboter-luecke-kamera-wlan/
-
Excitement in the Ross household as I head out to pick up a #SharkNinja Blender from Argos.
https://ninjakitchen.co.uk/product/ninja-detect-power-blender-processor-pro-tb401uk-zidTB401UK
I foresee blended food meals for the next few weeks.
This purchase was partially speeded up by my trying to blend broccoli (unsuccessfully!) in an old smoothie maker late last week to make broccoli falafel.
-
Apparently they should have named it the "Burn Ninja"
CPSC: "...SharkNinja has received 106 reports of burn injuries, including more than 50 reports of second- or third-degree burns to the face or body, with 26 lawsuits filed....."
-
Props to #Sharkninja's #customerService.
The power cord of the vacuum got ruined so they sent a new pod without charging us.
We were struggling with the cord being on the wrong side of the vacuum compared to their older models, it takes an adjustment. It's also incredibly stiff and doesn't flex well. They sent us a wireless one in place of the corded model without charge.
Then, a separate item (but placed as part of the original order) hadn't arrived, but the courier had marked the wrong thing as delivered in the first place causing all sorts of confusion.
A few explanatory emails, boom. They've sent out a replacement for the lost item. NO fuss, no quibble.
That's the sort of customer service I can get behind. -
SharkNinja unveils the PowerDetect NeverTouch Pro, a robot vacuum that lifts over carpets and never gets stuck. Hassle-free cleaning for up to 30 days. #SharkNinja
https://gadgetbond.com/sharkninja-nevertouch-pro-robot-vacuum-mop-ifa-2024/