Security Research | Roborock S6 | Reset Persistence demo
11th July 2022
Security research performed as part of my UNSW Computer Engineering thesis (https://featherbear.cc/UNSW-CSE-Thesis)
I probably should have explained in more detail what the line `z5206677::0:0:,,,:/root/bin/bash` does...
The ':' character separates the different fields of the account entry.
z5206677 - username of the system
(lack of x) - no password
0 - user id
0 - group id
,,, - comments (empty)
/root - home directory
/bin/bash - login shell
It basically creates a root account (i.e. UID=0, GID=0) that requires no password - effectively giving us a backdoor
---
Also, no, changing the sounds is not a dangerous thing(ish). Other things are probably more dangerous.