Mattel's "Hello Barbie," which allows children to engage in conversation with the iconic doll, suffered at launch from serious security issues, according to analysis by experts at Bluebox Labs. Much like how Siri and Google Now work, the doll would send recorded speech to the cloud, where the audio is analyzed and a response determined, which is sent back to the doll for playback.
But Bluebox's analysis, published Friday, shows that this process was vulnerable at several points. The app, for instance, would connect to any Wi-Fi network with the word "Barbie" in the name, regardless of whether that connection was secure or not — putting transmitted data at risk. The servers that stored and analyzed speech were vulnerable to phony security certificates as well, Bluebox reported, and had not patched the widespread "POODLE" bug that affects secure connections.
Credits:
https://www.google.com/url?sa=t&source=web&rct=j&url=http://www.nbcnews.com/tech/gadgets/hello-barbie-goodbye-privacy-expert-says-connected-doll-has-security-n474446&ved=0ahUKEwj5vJL7xcXJAhXs64MKHVURAWsQqG8ISTAB&usg=AFQjCNHG-OwS2Tn1vjAYw5vCGFmZAXVUmw&sig2=8Yy8YOeuiNWiEbyixVtZxQ
No comments:
Post a Comment