Jibo, the $899 'Social Robot', Tells Owners in Farewell Address That Its VC Overlords Have Remote-Killswitched It (boingboing.net)
Reader AmiMoJo writes: Jibo was a "social robot" startup that burned through $76 million in venture capital and crowdfunding before having its assets were sold to SQN Venture Partners late last year. Earlier this week, reporter Dylan J Martin tweeted a video of a $899 Jibo robot bidding its owner farewell, announcing that the new owners of his servers were planning to killswitch it; the robot thanked him "very very much" for having it around, and asked that "someday, when robots are more advanced than today, and everyone has them in their homes, you can tell yours that I said 'hello.'" Then, the Jibo performed a melancholy dance.
The entire project was bs from the very beginning, no surprises whatsoever here.
Or, you could tell your future-self to have your new robot hack Jibo to refer to a virtual server spun up ad-hoc by the new unit instead of the long-dead remote servers. PRESTO, your new robot has 2 avitars instead of one. ( ok, one has a lot less capacity than the other. But a hack that was set up with a long-game of years is always worth doing)
___ I don't respond to Anonymous Cowards, and I Never Mod them UP.
In the CLOUD!
#naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
This JIBO just looks like an animated Alexa, that piece of hardware only stupid people buy.
It really is an internet of shit. Not everything needs to be connected to "the cloud". I actively avoid cloud based devices because I cant truly own them. Why would anyone spend close to $1k on something that could stop working at any time?
If there is the ability for a company to turn it off remotely, it should not be a surprise when that ability is used.
Can it be hacked and Linux installed? Can it run Mycroft? Can I pick one up on ebay for ~$50 soon???
--- Keep the choice with the user..
In my severance package. Duh.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
sounds better than some random dude at a company only looking at how much profit curing you would generate
The mechanics were cute but apparently the assistant part were lacking.
TERRIBLE $900 Party Trick – Jibo Review : https://www.youtube.com/watch?...
L'Idiot
Everyone eventually has their own proprietary-software-abandoned/fucked-me experience. Some peoples' experiences are delayed, some people have it quick. Some people lose $20, some lose $200, some lose $2000. Some people get attached and then angry at the loss; some people shrug and let it go. Some people need simply a larger quantity of lessons than others.
It took me a couple decades, from about 1980 to somewhere around 1999-2002, before I finally had enough, so I'm not going to mock the people who threw away $900, I guess. But I would ask 'em, "Is that enough yet? Or do you wanna go for another round of abuse?" Whatever floats your boat, man.
As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
If personal responsibility can be measured in dollars, the poor are justified in committing armed robbery.
Do you have JTAG cables or a even hardware programmer?
You are aware of the Slashdot demographic? For a good number of people here, the answer to those questions may very well be 'Yes'.
Have gnu, will travel.
Will this work? Like I said though, if the Jibo costs more than $50, it's not worth my time to tinker.
--- Keep the choice with the user..
Robocide
Table-ized A.I.
Welcome to the world of single-payer health care, where all health care decisions are made by a government-controlled group.
Just don't call it a "Death Panel".
No, you call it the NHS. Despite its current issues it works quite well thankyouverymuch.
Wanna buy a shirt?
https://www.redbubble.com/people/stealthfinger/shop?asc=u
You've got a UID under a million, so your post is understandable. Unfortunately, I have some bad news for you....
IIRC, it was BSD Unix that was put on a toaster. I saw it at a West Coast Computer Faire. I thought it an impressive example of total worthlessness...of course, that was long before the IOT.
I think we've pushed this "anyone can grow up to be president" thing too far.
First, sniff the robot's wifi traffic using Mallory transparent MITM proxy ( https://github.com/intrepidusg... ). Note that there might be better intercepting wifi proxies available now... possibly, based upon other platforms like ESP32, ESP8266, or RasPi. I really haven't kept up with it. I just remember that at the time I did it, using Mallory with a desktop PC and PCIe wifi card seemed like the obvious choice.
The last time I used Mallory (~5 years ago), it was somewhat straightforward to set up (with slightly above-average Linux experience)... AS LONG AS you used a wifi card with a supported chipset:
* It HAS to be a PCIe wifi interface, because the host PC needs realtime access to the bare-metal wifi hardware that USB just isn't suited for.
* Not all wifi chipsets have binary Linux kernel modules available that support the features necessary to fully implement a wireless access point. I think I remember that most/all Atheros-based cards were suitable, but only a select few Realtek-based cards were... and then, with major disclaimers and caveats. This situation might have gotten better OR worse over the past 5 years. I haven't kept up with it.
* Use EXTREME caution before buying a Linksys or Netgear interface card, based upon web reviews saying that it uses some specific (and supported) Atheros chip. Both companies have a really nasty habit of using Atheros chips for their first generation of a product, racking up glowing 5-star reviews and people praising it as the greatest product the company has ever made... then quietly redesigning later versions to use cheaper, less flexible chipsets. Sometimes, without even bothering to change the UPC... occasionally, without even mentioning on the packaging that it's a later revision. You might be better off skipping the brand-name card, and just hunting on eBay for a generic card that identifies its chipset by name. Generally speaking, Linux doesn't care about the brand or model number of the card... it only cares about the chip used to implement it. In theory, two cards built around the same chip COULD be wired up differently... but 99 times out of 100, companies in China that make generic cards just take the chipset vendor's reference design and copy it verbatim.
Anyway, once you have Mallory up and running, it looks just like a wireless access point. Connect the robot to it just like you'd connect the robot to a normal access point, and have Mallory begin capturing traffic WITHOUT decrypting it.
At this point, you'll know two things:
1. The hostname it's connecting to for its web service calls, and the protocol it's using.
2. Whether or not it's encrypting its traffic. If it's encrypted, you'll basically see a CONNECT followed by garbage. If it's NOT encrypted, you'll probably see straightforward http GET or POST requests in the log.
If it's NOT encrypting the traffic at all, you're in luck. Jump ahead to step 4.
3. Enable Mallory's decryption, and restart the robot so it will attempt to connect to its home server like it did before. If you're EXTREMELY lucky, it'll decrypt the traffic without a hitch. If you're unlucky, the robot will either hang, or give an error that's ultimately caused by an invalid TLS certificate.
If the Robot's software was written properly, it won't make it past this point, and you'll basically be out of luck absent some as-yet undiscovered exploit. HOWEVER, it's quite possible that it MIGHT just ignore the certificate error. There's literally a metric shit-ton of bad example code on StackOverflow and elsewhere that gives the impression that it's OK for apps to just ignore certificate errors, and I'd say that in the real world, probably 60-80% of "secure" devices that "use https" will completely IGNORE certificate errors. Why? Certificates are a royal pain in the ass to deal with during development, because the debugging needs of developers are more or less perpendicular to the demands made by robust security. More often tha
Comment removed based on user account deletion
Comment removed based on user account deletion
It's true, but a sadder trend seems to be the growing anti-intellectualism of that hostility. In the 90s you could be pretty sure that a random Slashdotter probably knew how to use a screwdriver, and might very well have a JTAG programmer on their desk. Today Slashdot is more of a political arguing forum, and technical contributions are mocked as pedantic or irrelevant.