expired
[Certified Refurbished] Roborock S7 MaxV Ultra $740, Q5+ $306, Q5 $213
$306
$650
52% off
eBay
Missed This Deal? Get alerts when similar deals are posted.
eBayDeal Details
Refurbished Roborock vacuums
15% off coupon SAVEONGIFTS
15% off coupon SAVEONGIFTS
- S7 MaxV Ultra [ebay.com]: $740 after 15% off coupon
- Q5+ Self-emptying Vaccum [ebay.com]: $306 after 15% off coupon
- Q7 Max+ self-emptying vaccum: $417 after 15% off coupon
- Q5 Vaccum [ebay.com]: $213 after 15% off coupon
Community Notes
About the Poster
Deal Details
Community Notes
About the Poster
Refurbished Roborock vacuums
15% off coupon SAVEONGIFTS
15% off coupon SAVEONGIFTS
- S7 MaxV Ultra [ebay.com]: $740 after 15% off coupon
- Q5+ Self-emptying Vaccum [ebay.com]: $306 after 15% off coupon
- Q7 Max+ self-emptying vaccum: $417 after 15% off coupon
- Q5 Vaccum [ebay.com]: $213 after 15% off coupon
Community Voting
Deal
Score
+11
Good Deal
Bad Deal
Join The Conversation
Share your experience with the Slickdeals community
Share information with the community. Please follow our Community Guidelines and be kind!
41 Comments
Sign up for a Slickdeals account to remove this ad.
S7 MaxV Ultra was $736 when it made front page not too long ago. https://slickdeals.net/f/16994833-roborock-robot-vacuums-refurbished-s7-maxv-ultra-736-q7-max-368-q5-176-more-free-s-h?
Our community has rated this post as helpful. If you agree, why not thank
Sign up for a Slickdeals account to remove this ad.
"In external communication, which is much more relevant for attacks, three out of four test candidates in the test lab demonstrated decent defensive behavior. Not only Dyson and iRobot but also the Kobold from Vorwerk rely on TLS encryption for communication in its secure version 1.2 with connected cloud services and for data exchange between cloud and app. On the Roborock, however, the testers encountered partially unencrypted wireless transmission. That is because the Xiaomi vacuum cleaner also uses partially unencrypted UDP connections for external communication. This traffic can be intercepted and manipulated, e.g. within the scope of a man-in-the-middle attack. In addition, there were potential vulnerabilities in TLS-encrypted connections. Due to insufficient verification of certificates on encrypted connections, the testers were able to manipulate data streams and read their contents.
It should be noted that Roborock, like all other Xiaomi smart home products, is controlled from a central app. This means that attackers may not only gain access to the robot vacuum but also to more critical smart home components from the manufacturer. These may include smoke detectors, window/door contacts or IP cameras. For example, this would open up the potential to sabotage the fire alarm in an apartment, spy on residents by a camera or shut down the burglar alarm. Controlling all smart home components from one app is indeed extremely convenient, yet this applies not only to users but also to attackers. The Chinese smart home giant should therefore endeavor to eliminate the existing security gaps in data communications, especially because it is expected that another heavyweight in the smart home market will open its rapidly growing product range for the Xiaomi network…"
I did buy the S7 Max Ultra before this one. Returned it due to getting caught on items in my house. This one has a real camera and it makes a big difference. Highly recommend this refurbished one over a non "V" one.
"In external communication, which is much more relevant for attacks, three out of four test candidates in the test lab demonstrated decent defensive behavior. Not only Dyson and iRobot but also the Kobold from Vorwerk rely on TLS encryption for communication in its secure version 1.2 with connected cloud services and for data exchange between cloud and app. On the Roborock, however, the testers encountered partially unencrypted wireless transmission. That is because the Xiaomi vacuum cleaner also uses partially unencrypted UDP connections for external communication. This traffic can be intercepted and manipulated, e.g. within the scope of a man-in-the-middle attack. In addition, there were potential vulnerabilities in TLS-encrypted connections. Due to insufficient verification of certificates on encrypted connections, the testers were able to manipulate data streams and read their contents.
It should be noted that Roborock, like all other Xiaomi smart home products, is controlled from a central app. This means that attackers may not only gain access to the robot vacuum but also to more critical smart home components from the manufacturer. These may include smoke detectors, window/door contacts or IP cameras. For example, this would open up the potential to sabotage the fire alarm in an apartment, spy on residents by a camera or shut down the burglar alarm. Controlling all smart home components from one app is indeed extremely convenient, yet this applies not only to users but also to attackers. The Chinese smart home giant should therefore endeavor to eliminate the existing security gaps in data communications, especially because it is expected that another heavyweight in the smart home market will open its rapidly growing product range for the Xiaomi network…"
Guess I'm waiting for something better.
Are you sure it wasn't for the S7 Max Ultra? (without the V)
Has anyone tried updated S/N for the SquareTrade Allstate warranty plan? Since they keep sending me replacement units, the listed S/N for the warranty plan is now different…so something else trying to work through right now.
Sign up for a Slickdeals account to remove this ad.
Are you sure it wasn't for the S7 Max Ultra? (without the V)
Join The Conversation
Share your experience with the Slickdeals community
Share information with the community. Please follow our Community Guidelines and be kind!