Sammy Azdoufal told The Verge he wasn't trying to hack anyone else's robot vacuum. It was merely a fun project for the software engineer, who alerted DJI about its massive authentication slip-up — while sharing how little work it took to access the ins and outs of a Romo owner's home.
While the initial Sabela prototype is designed for a single-user local environment, the architecture is intentionally decoupled to allow for multi-tenant scaling. Transitioning Sabela to a multi-user service involves moving from a singleton state model to a session-orchestration model.
，这一点在同城约会中也有详细论述
第四十二条 船长在航行中死亡或者因故不能执行职务时，应当由驾驶员中职务最高的人代理船长职务；在下一个港口开航前，船舶所有人、船舶经营人或者船舶管理人应当指派新船长接任。
Network egress control — compute isolation means nothing if the sandbox can freely phone home. Options range from disabling networking entirely, to running an allowlist proxy (like Squid) that blocks DNS resolution inside the sandbox and forces all traffic through a domain-level allowlist, to dropping CAP_NET_RAW so the sandbox cannot bypass DNS with raw sockets.