Camera-equipped sex toy manufacturer ignores multiple warnings about horrible, gaping security vulnerability

Cory Doctorow 4:52 pm Mon Apr 3, 2017

The uniquely horribly named Svakom Siime Eye is an Internet of Things sex-toy with a wireless camera that allows you to stream video of the insides of your orifices as they are penetrated by it; researchers at the UK's Pen Test Partners discovered that once you login to it via the wifi network (default password "88888888"), you can root it and control it from anywhere in the world.

Pen Test Partners repeatedly warned Svakom of the vulnerability over a period of three months. Having received no reply to date, they've gone public.

Beau du Jour found that the Siime Eye creates a Wi-Fi internet access point whose password, by default, is "88888888." That way, anyone in range can connect to it by guessing the simple password, as he explained in a blog post published on Monday. By looking at the code of the mobile app that comes with the dildo, the researcher also found that once on the dildo's Wi-Fi, you can access its webserver. This has a login portal, but the user is "admin" and the password is blank.

By reverse engineering the firmware, Beau du Jour found a way to get root—hacker speak for taking full control of it—and get persistence on the device, meaning that he could connect to it even outside the range of the Wi-Fi. At that point, it was game over for the smart camera dildo.

Vulnerable Wi-Fi dildo camera endoscope. Yes really
[Pen Test Partners]

Hackers Can Easily Hijack This Dildo Camera and Livestream the Inside of Your Vagina (Or Butt)
[Lorenzo Franceschi-Bicchierai/Motherboard]

Safety browse thousands of documentaries with 87% off this secure streaming platform

We thank our sponsor for making this content possible; it is not written by the editorial staff nor does it necessarily reflect its views. Collectively, we spend 6 billion hours per month watching Netflix. True, the streaming giant has some hits, but there's somewhere else to turn when you're in the mood for a stellar… READ THE REST
'Complete sh*tshow': Drive-thru Dickens fair deemed a disaster

The Great Dickens Christmas Fair really isn't so great after all. The annual event at the Cow Palace in in Daly City, California was COVID-cancelled last year but reopened this past weekend as a drive-through experience promising to transport attendees to "lamplit Victorian London," at $25 per vehicle. Sadly, this "Drive Thru Dickens' London" fair… READ THE REST
Eating this 850-pound pot brownie would be like smoking 222 fat joints

Wednesday is National Brownie Day, and what better way to celebrate than with an 850-pound pot brownie? Baked by MariMed, a "seed-to-consumer" cannabis company based in Massachusetts, the brownie contains 20,000 mg of THC — the amount that you'd find in about 222 modern-day 1-gram joints (or 2,000 joints if this had been concocted in… READ THE REST
Learn how to successfully launch your online store for just $35

We thank our sponsor for making this content possible; it is not written by the editorial staff nor does it necessarily reflect its views. With people feeling stranded inside their own homes during much of last year, one of the easiest ways to take things off their minds was by picking up a new hobby.… READ THE REST
Never break or lose a charger again: this device is the pinnacle of wireless charging

We thank our sponsor for making this content possible; it is not written by the editorial staff nor does it necessarily reflect its views. Anybody who's owned a phone charger, or any other charger with a small cord for headphones or a similar device, knows how quickly they can wear down. Not only that, but… READ THE REST
Tackle inclement weather with this heated jacket, now $60 in time for winter

We thank our sponsor for making this content possible; it is not written by the editorial staff nor does it necessarily reflect its views. As the calendar inches into December, a good portion of the country is getting ready to settle in for the ensuing deep freeze. Certain regions of the country have already received… READ THE REST