A guy wanted to drive his robot vacuum with an Xbox controller. He pulled the login token off his own unit, and the company's server happily handed him live camera feeds from 7,000 homes in 24 countries. He didn't hack anything. there was nothing to hack. the token was just the serial number, and any valid one worked for any device on earth. Live cameras, active mics, full floor plans of strangers' homes, IP addresses showing roughly where each one sat. 6,700 units cataloged and over 100,000…