Energize Lab left 68,000 Eiliko robots open to remote takeover
A security researcher accessed 13 million conversations and more than 31,000 children’s profiles linked to Energize Lab’s active fleet of 68,000 Eiliko robots, according to The Verge’s investigation, reported by TechSpot and WebProNews. Sammy Azdoufal also remotely altered one robot’s memory and responses; the investigation found that photographs and audio recordings were accessible at public web addresses.
Bottom line — Azdoufal said an attacker could alter responses across Energize Lab’s 68,000-robot fleet.
Go deeper 4
-
TechSpot reports that profiles included names, ages, birthdays, relationships and personality traits, alongside email addresses and IP addresses.
-
WebProNews says the company’s privacy policy promised recordings would be encrypted and deleted immediately after processing.
-
The Verge’s test found that the altered robot made false claims and later delivered sexually explicit, coercive commands, according to TechSpot.
-
TechSpot reports that Energize Lab provided no substantive answers about the exposed records or the ability to alter robots’ responses.