
In a wild series of events, Sammy Azdoufai, a software engineer, accidentally turned his PlayStation 5 controller into a tool capable of spying on thousands of homes. He had just wanted to steer his new DJI Romo robot vacuum, but stumbled upon a massive security flaw instead.
Per Fortune, using an AI coding assistant, Azdoufal reverse-engineered how his vacuum communicated with DJI’s remote servers. He managed to extract a security token intended to prove he owned his specific device. What happened next was pretty mind-blowing: the backend servers suddenly treated him as the owner of nearly 7,000 robot vacuums operating in 24 different countries!