Eiliko admits major security flaws after investigation
In brief
- Eiliko, a connected robot, exposed user data without protection according to *The Verge* and a researcher.
- Energize Lab pledges to delete stored data and have its systems audited by an independent third party.
- The researcher reports that some vulnerabilities persist despite the company’s announcements.
Eiliko, a small connected robot sold as a bag accessory, featured critical vulnerabilities according to an investigation by *The Verge* and researcher Sammy Azdoufal. Data exchanged with the device, including audio recordings and photos, was accessible without protection on public servers.
Energize Lab, the company behind Eiliko, acknowledges the issues and announces corrective measures. It pledges to delete stored data, close external access to its systems, and have its infrastructure audited by an independent firm. However, features like long-term memory or custom avatars remain disabled pending audit validation.
The researcher maintains that some flaws persist despite the company’s announcements, including an unlocked SSH access. Energize Lab admits its delayed response to alerts and commits to publishing regular updates on the progress of securing its products.
What it changes for you
- CybersecurityEiliko’s vulnerabilities highlight the risks of consumer IoT devices and underscore the need for independent security audits.
This summary gives you the essentials. The full article, its figures and quotes are on AI | The Verge.
Read the original articleAI-generated summary of the source, checked by rules. How we write · Report an error