TL;DR
Yarbo has committed to removing the default remote backdoor in its robot lawn mower, making it an optional feature for users. The company aims to improve security following concerns raised by a security researcher.
Yarbo has announced it will remove the default remote backdoor in its robot lawn mower, allowing customers to choose whether to enable remote access. This change follows security concerns raised by a researcher and aims to improve device security and user control.
Yarbo, the maker of a popular robot lawn mower, initially kept a remote backdoor in its devices for troubleshooting purposes. After scrutiny from security researcher Andreas Makris, who demonstrated how easily the backdoor could be exploited, Yarbo committed to addressing security vulnerabilities. The company previously indicated the backdoor would remain but with enhanced protections, and it suggested customers could opt out. However, by early March 2024, Yarbo announced it would make remote access an opt-in feature, allowing users to decide whether to enable it. The company plans to implement a setup script that can temporarily activate the backdoor if the user chooses, but it will not be enabled by default. Yarbo also stated that future firmware updates will include unique root passwords for each device, further securing the system. The company is currently in contact with security researcher Makris, who may validate the effectiveness of these changes.
Why It Matters
This development is significant because it addresses ongoing security concerns about internet-connected devices, especially those with potential vulnerabilities that could be exploited remotely. Making remote access optional enhances user control and reduces the risk of unauthorized reprogramming or hacking, which is critical for consumer trust and safety in smart home devices.
2026 New Robot Lawn Mower with App Control – Features Adjustable Cutting Height, Auto-Charging, Obstacle Detection and Brushless Motor for Lawns Up to 1/8 Acre, Gray
Smart App Control & High-Efficiency Brushless Motor: With the YARDCARE app, you can effortlessly manage your mowing schedule,…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Background
The controversy around Yarbo’s remote backdoor began after security researcher Andreas Makris demonstrated how easily the device could be hijacked remotely, exposing sensitive data like email addresses and GPS locations. Yarbo initially responded by promising to fix security flaws but kept the backdoor for troubleshooting purposes. The situation gained attention in early 2024, prompting the company to reconsider its approach and ultimately decide to make remote access an opt-in feature. Firmware updates and security measures, including unique root passwords, are already being rolled out to improve device security.
“In the future there should be no remote backdoor unless the user decides to opt-in.”
— Kenneth Kohlmann, Yarbo co-founder
“It would most likely be a setup script that sits on the machine and doesn’t do anything unless the user triggers it.”
— Kenneth Kohlmann, Yarbo co-founder
YARBO Robot Lawn Mower Pro with Modular Design for Large Yard up to 6 Acres, Perimeter Wire Free APP Control Robotic Lawnmower with 0.8"-4.0" Cutting Height, AI Vision & RTK for Navigation
Powerful Dual Motor: Equipped with dual 300W high-performance motors, it delivers up to 2500W peak power for stronger…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
What Remains Unclear
It is still unclear how quickly all Yarbo devices will receive the firmware updates with the new security measures, and whether the company’s promise to remove the backdoor by default will be fully implemented across all models. The effectiveness of these changes will also depend on validation by security experts like Andreas Makris.
2026 New Robot Lawn Mower with App Control – Features Adjustable Cutting Height, Auto-Charging, Obstacle Detection and Brushless Motor for Lawns Up to 1/8 Acre, Gray
Smart App Control & High-Efficiency Brushless Motor: With the YARDCARE app, you can effortlessly manage your mowing schedule,…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
What’s Next
Yarbo will continue rolling out firmware updates to existing devices, with a focus on enabling users to opt-in or out of remote access. The company expects to finalize and confirm the removal of the backdoor feature in the coming months, pending validation from security researchers and ongoing security improvements.
2026 New Robot Lawn Mower with App Control – Features Adjustable Cutting Height, Auto-Charging, Obstacle Detection and Brushless Motor for Lawns Up to 1/8 Acre, Gray
Smart App Control & High-Efficiency Brushless Motor: With the YARDCARE app, you can effortlessly manage your mowing schedule,…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Will all Yarbo robot lawn mowers have remote backdoor access removed?
Yarbo has announced plans to make remote backdoor access an optional feature that users can enable or disable, with the default set to disabled. The rollout of updates is ongoing.
Can I still get remote help with my Yarbo mower after these changes?
Yes, but only if you choose to enable the remote access feature through the setup script. It will no longer be enabled by default.
When will the firmware updates be available for all devices?
Yarbo has begun rolling out updates to the first 1,000 devices, with plans to extend to additional units in the coming months. Exact timelines depend on device model and region.
How will Yarbo ensure the security of its devices moving forward?
The company is implementing unique root passwords for each device and plans to validate its security improvements with external researchers like Andreas Makris.
