One Hack Of A Valentine: When Iot Gets Under Your Skin

hardware news vulnerability

Smart sex toys are really no fun if hacked…

Red lock with a heart

Just in time for Valentine’s Day, Mozilla launched a “Product Privacy Special” – a collection of romantic IoT products that might spice up your bedroom experience. We are very honored to have our research on the Vibratissimo Panty Buster included! It is good to see that other security-concious companies such as Mozilla see the importance of security and privacy in consumer products.

Vibratissimo Panty Buster

Smart sex toys are really no fun if hacked, and their independent security review confirmed the security problems documented by the SEC Consult Vulnerability Lab, last year. It seems, a lot of the vulnerabilities are still not fixed (as of October 2018): “Even a negative evaluation from SEC Consult and the ensuing presence of concerns in the press did not appear to result in any changes to the lacking security practices at the compound. Cure53 could not identify any visible improvements being implemented.”

Werner Schober also gave a “pleasurable” talk at the 35th Chaos Communication Congress about vulnerabilities in Smart Sex Toys. Take a look at the recording, those 32 minutes will literally blow your mind: Internet of Dongs at the CCC on Youtube.

“Internet of Dongs” was one of the best talks of #35C3, hands down—absolutely delightful and hilarious, and a great pleasure to host!

Feel free to read all about our Internet of Dongs related security research on the SEC Consult Blog and stay up to date on more advisories on Twitter.

We wish you a happy Valentine’s Day!