TL;DR
Yarbo has committed to removing its remote backdoor from its robot lawn mowers, making it an opt-in feature for users. The company aims to enhance security and user control following security researcher concerns.
Yarbo has announced it will remove the default remote backdoor from its robot lawn mowers, allowing users to opt-in if they wish to enable remote access. The company’s decision follows security concerns raised by researchers and public scrutiny over potential vulnerabilities.
Initially, Yarbo had kept a remote backdoor open for authorized company personnel to assist with troubleshooting, which security researcher Andreas Makris demonstrated could be exploited by malicious actors. After public pressure and internal deliberation, Yarbo now plans to make this feature optional, rather than enabled by default, co-founder Kenneth Kohlmann told The Verge.
Kohlmann explained that the remote backdoor will be an opt-in feature, meaning users must explicitly choose to activate it. The company indicated that the process might involve a setup script that remains dormant until triggered by the user, who could then permit temporary remote access for troubleshooting purposes.
Why It Matters
This development is significant because it addresses security vulnerabilities that could allow unauthorized access to Yarbo’s robotic lawn mowers. Giving users control over remote access enhances privacy and safety, which is critical as smart home devices become more prevalent. The move also reflects a broader industry trend toward transparency and user empowerment in IoT security.
YARBO Upgraded Robot Lawn Mower Pro with Modular Design for Large Yards
- Suitable for Large Properties: Ideal for homes, golf courses, and resorts
- Modular Design: Easy to customize and maintain
- Strong Cutting System: Efficiently cuts thick, wet, overgrown grass
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Background
Yarbo’s robot lawn mower had previously been criticized after a security researcher demonstrated how it could be hijacked remotely, exposing user data and control. The company initially responded by promising to patch security flaws but kept the remote backdoor active for support purposes. This controversy follows a series of security concerns across IoT devices, prompting companies to reconsider default remote access features.
“In the future there should be no remote backdoor unless the user decides to opt-in.”
— Kenneth Kohlmann, Yarbo co-founder
“Completely removing remote diagnostic capability would reduce our ability to help customers resolve safety, connectivity, and service issues quickly.”
— Yarbo spokesperson (initial response)
YARDCARE V100 Robot Lawn Mower with HD Vision Navigation, Smart Obstacle Detection, Collision Sensors, Adjustable Cutting Height, Low-Noise Operation—Perfect for Small Lawns up to 1,600 sq ft.
- Visual Navigation with AI: Detects obstacles and distinguishes grass
- Obstacle Detection: Identifies up to 150 obstacles
- Automatic Path Adjustment: Adjusts route after collisions
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
What Remains Unclear
It remains unclear how thoroughly Yarbo will implement the removal of the backdoor, whether the setup scripts will be entirely dormant or simply disabled by default, and if all existing devices will receive the necessary firmware updates to enforce these changes. The extent to which security researcher Andreas Makris will be able to validate the effectiveness of these modifications is also still pending.
LEBOSBO V3 Robotic Lawn Mower with AI Vision Obstacle Avoidance, Smart APP Control, Low-Noise Operation, Adjustable Cutting Height, No-Go Zones, Ideal Robot Lawn Mower for Lawns Up to 1600 Sq.Ft
- AI Vision Obstacle Detection: Detects obstacles for safe mowing
- Custom No-Go Zones: Includes 32FT magnetic strip for zone setup
- Smart App Control: Remotely schedule and monitor via mobile app
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
What’s Next
Yarbo plans to roll out firmware updates to its entire fleet, including the first 1,000 devices already updated, with subsequent waves to follow. The company is also in contact with Andreas Makris, who may validate whether the security vulnerabilities have been effectively addressed. Customers will be able to decide whether to enable remote access after these updates are implemented.
ANTHBOT M5 Robot Lawn Mower 1/8 Acre, Dual Vision+Full-Band RTK Robotic Lawnmower, No Perimeter Wire, App Control Obstacle Avoidance, 45% Slope, Cutting Height, Multi-Zone Mapping
- Dual Vision and RTK Technology: Centimeter-level precision with dual cameras
- Complete Package Includes: Lawn mower, cover, base, blades, RTK station
- Handles 45% Slopes: Suitable for steep residential yards
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Will Yarbo completely eliminate the remote backdoor from all devices?
Yarbo has announced plans to make the remote backdoor an opt-in feature, meaning it will be disabled by default and only enabled if the user chooses to do so. The company is working to roll out firmware updates to enforce this change across its devices.
How will users enable or disable remote access on their Yarbo lawn mower?
The company indicated that remote access will be controlled via a setup script that users can trigger. If enabled, it will provide temporary, one-time access for troubleshooting purposes. The exact process will be clarified in upcoming firmware instructions.
Does this mean Yarbo’s security issues are fully resolved?
While Yarbo has committed to removing the default backdoor and improving security, it is not yet confirmed whether all vulnerabilities have been fully addressed. The company is working with security researcher Andreas Makris to validate the changes.
When will the firmware updates be available for all Yarbo devices?
The initial firmware updates have already been rolled out to the first 1,000 devices, with additional updates expected in the coming weeks for other units.
