It has been reported that a security researcher accidentally found a way to hack and take over all Xiaomi pet feeders located across the world. In a series of messages published on her private Telegram channel last week, the researcher said she identified vulnerabilities in the backend API and firmware of Xiaomi FurryTail smart pet feeders. She said that while looking at a device she bought from AliExpress for only $80, she found that the API allowed her to see all other FurryTail devices active located across the world. In total, she found 10,950 devices, on which the researcher claimed she could have changed feeding schedules without needing a password.
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.