Yarbo says it will remove the intentional tailgate from its robotic lawnmower

The company is behind The robotic lawnmower that ran me over She changed her tune. Yarbo now plans to completely remove remote backdoor access that could have allowed bad actors to reprogram the bot online. Yarbo customers will be able to decide whether to install this feature in the first place, co-founder Kenneth Coleman promises. Edge.

It was growing I already promised on Friday It will address many security issues head-on, closing loopholes that allow security researcher Andreas Makris to easily hijack any white bots from the other side of the world, while also revealing email addresses and GPS locations. But when it came to the most troubling weakness, Yarbaugh stopped at that point. The company said it will keep the remote backdoor open so that “authorized internal company employees” can help troubleshoot devices remotely — only now with more protection around it.

Shouldn’t Yarbo’s customers decide whether their bots have a persistent backdoor or not? Absolutely? When we asked last week, the company initially suggested the answer was no. “Completely removing the ability for remote diagnostics would reduce our ability to help customers quickly resolve safety, communication and service issues, especially in cases where physical inspection is impractical,” speakers Xuan Hu and Maggie Zhou told us on Saturday.. The company suggested that it is still studying solutions may Allow users to unsubscribe.

But by Monday, when Coleman called me from the airport, the company decided to go a step further. The company makes it Subscribe A feature that you can only install if you want remote assistance. “In the future, there should be no remote backdoor unless the user decides to opt in,” he says. Edge.

_{Above: My original video about the Yarbo robotic lawn mower.}

Coleman warns that removing the tunnel will take some time, and it is technically possible to upload the files required to install a new version to each bot’s internal storage. “It’s more likely to be a setup script that sits on the device and doesn’t do anything unless the user runs it,” he says. “If the user turns it on, it installs a one-time temporary tunnel.”

It is suggested that you perhaps try uploading your log file to Yarbo technical support before going that far. If that’s not enough to diagnose the problem, you can optionally install a remote access feature as well.

It may be difficult to know whether Yarbo will follow through on its promise to eliminate remote access tunneling by default, as it is already securing its bots (as it should!) following our story. Coleman says each device should soon have a unique root password, one that Yarbo won’t provide to end users; Firmware updates have already been rolled out to the first 1,000 devices, and are coming to additional waves of bots.

But Coleman says the company is now in contact with Macris, and it’s possible that a security researcher could verify the validity of the changes.