Event

Eiliko toy cloud service left unprotected, conversations on about 68,000 devices accessible

1 reports · 1 sources

The Verge reporter Sean Hollister and security researcher Sammy Azdoufal found that the cloud service for Energize Lab's Eiliko robot toy was completely unprotected, with conversation records from about 68,000 online devices worldwide accessible, including more than 31,000 children's profiles in the United States. The issue involves device conversation content and user profiles stored in the cloud; testing by the researcher and reporter showed that these data could be obtained without authentication.