Camera-equipped sex toy manufacturer ignores multiple warnings about horrible, gaping security vulnerability

Cory Doctorow 4:52 pm Mon Apr 3, 2017

The uniquely horribly named Svakom Siime Eye is an Internet of Things sex-toy with a wireless camera that allows you to stream video of the insides of your orifices as they are penetrated by it; researchers at the UK's Pen Test Partners discovered that once you login to it via the wifi network (default password "88888888"), you can root it and control it from anywhere in the world.

Pen Test Partners repeatedly warned Svakom of the vulnerability over a period of three months. Having received no reply to date, they've gone public.

Beau du Jour found that the Siime Eye creates a Wi-Fi internet access point whose password, by default, is "88888888." That way, anyone in range can connect to it by guessing the simple password, as he explained in a blog post published on Monday. By looking at the code of the mobile app that comes with the dildo, the researcher also found that once on the dildo's Wi-Fi, you can access its webserver. This has a login portal, but the user is "admin" and the password is blank.

By reverse engineering the firmware, Beau du Jour found a way to get root—hacker speak for taking full control of it—and get persistence on the device, meaning that he could connect to it even outside the range of the Wi-Fi. At that point, it was game over for the smart camera dildo.

Vulnerable Wi-Fi dildo camera endoscope. Yes really
[Pen Test Partners]

Hackers Can Easily Hijack This Dildo Camera and Livestream the Inside of Your Vagina (Or Butt)
[Lorenzo Franceschi-Bicchierai/Motherboard]

Police apprehend a horse-drawn buggy whose driver passed out drunk

It sounded like the first officer to check on this inebriated buggy pilot was willing to let the horse take him home, but things didn't quite work out that way. One can likely drink quite a bit and still successfully allow a horse to take itself home, but passing completely out is clearly not recommended.… READ THE REST
Musk's tweeting fails to make his sexual assault settlement disappear

Running his mouth when he shouldn't, especially not before his revenge lawyers are hired, Elon "Pedo Guy" Musk continues to run to Twitter with immaterial hand wavery. That Musk considers eating nuts and fruit fasting is not a factor, nor are his personal airplane's details: the woman who collected $250k worked for "the Space X… READ THE REST
Pastor Greg Locke no longer has tax-exempt status after hateful rant against democrats

A couple of weeks ago, Pastor Greg Locke of the Global Vision Bible Church told his congregants, "You cannot be a Christian and vote Democrat in this nation." "I'm to the place right now [that] if you vote Democrat, I don't even want you around this church. You can get out!" the hate peddler, who… READ THE REST
Teach yourself how to play guitar with the Jamstik trainer

We thank our sponsor for making this content possible; it is not written by the editorial staff nor does it necessarily reflect its views. Has learning how to play the guitar been on your bucket list? Learning how to play guitar should be simple, fun, and accessible, but with the average guitar costing $600 — lessons not included, you might… READ THE REST
Make room for important and large files with Prism Drive cloud storage

We thank our sponsor for making this content possible; it is not written by the editorial staff nor does it necessarily reflect its views. With most of our daily activities happening online, no one will ever complain about having too much storage space. On the contrary, it's frustrating when you run out of storage or have… READ THE REST
This 13-in-1 media hub brings your favorite content to the big screen

We thank our sponsor for making this content possible; it is not written by the editorial staff nor does it necessarily reflect its views. We're sure our parents had a wild time back in the day without modern media, and to some degree, we wish we could be a little less plugged in. But then we… READ THE REST