Hackable sex toys?

Image of open lock with key overlayed with circuit board.

I wrote a few weeks ago about the wevibe4 and that company’s intrusions into the sex lives of its customers.  I thought that recording data about when and for how long people were having sex with a particular sex toy was about as bad as it got, but it turns out that I was wrong. It is actually possible to scrape the barrel even lower than that. Another company, Svakom, created a cross between a dildo and a selfie stick and started to sell it a couple of years ago.  In fact, it is still on the market and being sold!  This delightful product, in addition to having a camera, is also wifi accessible and can be synced with Facetime.

So, you can be sure that a company selling a wifi enabled sex toy that is actually able to video the insides of people’s bodies would be really very secure, right? Actually, no. Hilariously named “Pen Test Partners – penetration testing and security services” found some serious security holes. They concluded:

If we could get a user to connect their device to their home Wi-Fi, we (or any website loaded within the user’s home network, in a JavaScript drive-by) could siphon all video data, Wi-Fi passwords, and a list of local networks off it and send it somewhere unsolicited.

So this device doesn’t just send data back to some central location, it can be used to actually steal the passwords from your network and send video’s of your most intimate moments to strangers on the internet.  This kind of security gap is, frankly, unforgivable for a company marketing this kind of product. My conclusion? Avoiding wifi or Bluetooth products for intimate activity is the way forward.

 

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s