Dennis Giese
Ecovacs X1 Remote Live Video PIN bypass (applies also to X2, Z1, Z2, Goat G1 and others)
BLE RCE Ecovacs Goat G1 details (reverse shell via unauthenticated BLE)
BLE RCE Ecovacs Goat G1 lawnmower (code execution as root via unauthenticated BLE)
[37c3]Ecovacs Home: Live video ap(p)ocalypse demo
(broken) DEFCON 31 "Vacuum robot security and privacy - prevent your robot from sucking your data"
Roborock S6/T6 Teardown: Many screws away from getting root... (Part 1 of the rooting process)
Roborock S6/T6 Technical information and rooting (Part 2)
Ecovacs DEEBOT 900 teardown (with some technical info but without comments)
Rooted Xiaomi M1S vacuum robot camera perspective
DEF CON 26 - Dennis Giese - Having fun with IoT: Reverse Engineering and Hacking of Xiaomi IoT