Strangers 'can use smart toys to message children'
Strangers 'can use smart toys to message children'
Sarah Tew CNET
14 November, 2017, 17:26
The warnings come after United Kingdom consumer watchdog Which? urged major retailers to withdraw a number of "connected" toys that are expected to be popular at Christmas, after finding security failures that could put a child's safety at risk. It says an investigation found no password and little technical knowledge was needed to hijack loudspeakers built into the toys.
A recent investigation by consumer group Which? found that some of this year's must-have toys, such as Furby Connect, i-Que Intelligent Robot, Toy-fi Teddy and CloudPets can all be accessed via Bluetooth or Wi-Fi connections.
It has written to retailers asking them to stop selling the toys ahead of Christmas until the security problems have been resolved.
An investigation carried out by Which?, along with other security research experts, found issues with Bluetooth and wifi-enabled toys that could allow strangers to talk to a child. The lack of authentication means that, in theory, any device within physical range could link to the toy and take control or send messages, the watchdog said.
With each of these toys, the Bluetooth connection had not been secured, meaning the researcher did not need a password, pin or any other authentication to gain access.
It was also found that hackers could take control of the voice unit in CloudPets toys that allowed them not only to talk to children, but even issue commands to a nearby Amazon Echo speaker.
The consumer body worked in conjunction with German watchdog Stiftung Warentet and third-party security experts to test seven different toys, four of which failed the test.
The brightly coloured talking robot uses Bluetooth to pair with a phone or tablet through an app, but the connection is unsecured. Researchers were then able to upload a custom audio file to the toy, which could be anything given the lack of restrictions, including inappropriate material.
The I-Que Intelligent Robot, has previously featured on Hamleys top toys Christmas list and is available from Argos and Hamleys. But the Which? investigation revealed that anyone could download the app, find a toy within Bluetooth range and start chatting using the robot's voice by typing into a text field.
"We feel confident in the way we have designed both the toy and the app to deliver a secure play experience". It was found that hackers could send their own voice messages to the toy, and receive the replies from the child.
As more toys add Wi-Fi and Bluetooth connections to pack in new skills and features, regulators have kept a wary eye on them for security vulnerabilities.
The makers of the Cloud Pets and Toy-fi Teddy declined to comment.
"Sadly, there have been many examples in the past two to three years of connected toys that have security flaws that put children at risk", he said.
Older Pixel and Nexus devices have been updated while other OEMs are in the very early stages of testing betas and previews. According to the latest data released by Google , the latest operating system has only reached 0.3 percent of the device.
Agreed, LEDs do not emit stable lights - they flicker - but most high-end phones do not have issues with this behavior. The problem isn't with Pixel 2 or Pixel 2XL camera, but with LED lights themselves.
The Minnesota Vikings activated quarterback Teddy Bridgewater Sunday for their game against the Washington Redskins . The Redskins gambled early, converting two fourth-downs in the first half but didn't have the same luck late.
The company said it has garnered almost 20.7 crore subscribers at the end of September which it said was 3.3% increase YoY. Vodafone India on Tuesday announced its standalone revenue figures for the six monthly period ended September 30, in FY18.
Next year should be a good year in supercomputing with both Japan and China planning to deploy new machines. The processing speeds of a supercomputer are measured in floating points operations per second, or "flops".
Now, the Bank of England has confirmed that from March 1 2018, the old note will no longer be accepted as payment. The Jane Austen notes have a number of features built in that make them particularly hard to forge.
But Duke (2-0) will have its hands full Tuesday against a team that returns the majority of its rotation players from last season. The Blue Devils got big contributions from its freshmen starters and Allen, who averaged 20 points through the first two games.
The gearshift paddles and steering wheel gain a gold-coloured satin finish that's repeated on the inside of each door. The phrase reads: "Life is measured in achievement, not in years alone", a quote by McLaren's founder, Bruce McLaren.
It's thought the prehistoric imbibers of Georgia may have stored their wine in large jars underground, leaving them to ferment. What's more, it was decorated with blobs that the researchers say could be meant to depict clusters of grapes.
Oscar De La Hoya Challenges Conor McGregor To A Fight
However, he seems to have changed his tune and is keen to face McGregor himself in a fantasy fight that could generate millions. McGregor - who remains under contract to UFC - is yet to respond to De La Hoya's comments.
Greens won't back trade agreement
It would go beyond traditional deals by including issues like intellectual property, state-owned enterprises and labour rights. And despite Trump's withdrawal from TPP, China won't necessarily find it easy to draw countries fully into its orbit.
Possible serial killer may have struck again, police say
Currently, authorities are offering a $41,000 reward for anyone who has information leading to the arrest of a suspect. Police say that they are treating Tuesday's suspicious death as a related case until they know differently.
Geely Acquires Flying Car Startup Terrafugia
The Chinese automaker has acquired a U.S. company trying to bring a flying vehicle to market in 2019. The company's first product will be the Transition , which is promised for a market launch in 2019.
Yemenis protest Saudi-led blockade
Saudi Arabia has accused arch-foe Iran of supplying the ballistic missile which was shot down near Riyadh airport without causing any casualties.
Women, revamp your diet today. You're more prone to diabetes
In spite of the fact that so many US citizens have type 2 diabetes, there are still alarming misconceptions about the condition. May has been a vocal supporter of World Diabetes Day tweeting: "When I was diagnosed with Type 1 Diabetes, it came as a shock".