Security researcher Sarah Jamie Lewis wanted to demonstrate that the horrific stories of insecure networked sex-toys (and other Internet of Things devices) was the result of manufacturers' negligence, not the intrinsic limitations of information security.
So she bough a We-Vibe Nova sex toy and hacked it so that it could take commands over the cryptographically secured Tor anonymity/privacy network, using the Ricochet chat protocol to create an extra layer of security. The demo shows that the security problems with the IoT have more to do with the manufacturers' desire to spy on their customers than the difficulty of getting security right.
Lewis's approach uses Ricochet, a messaging program which creates a Tor hidden service for each user. Ricochet doesn't just protect the content of users' communications, but also obfuscates their metadata, making it harder for anyone snooping on the connection to see who is talking to whom. Lewis reverse-engineered her dildo, a Nova from Canadian company We-Vibe, so she could communicate with it over bluetooth. When combined, these elements allow anyone who knows the dildo's Ricochet address to send commands, such as "/max," to make the device vibrate. Lewis has uploaded the code to Github so others can try the experiment.
Motherboard started a 'chat' session with Lewis' vibe, and sent a series of simple commands. Lewis then sent a video of the dildo vibrating.
We Anonymously Controlled a Dildo Through the Tor Network [Joseph Cox/Motherboard]
Michael Schiess is the founder of the Pacific Pinball Museum in Alameda, California where he cares for nearly 2,000 pinball machines from across time. Schiess’s mission in life? “To inspire an interest in science, art and history through pinball, and to preserve and promote this important part of American culture.”
I have a new piece on Better Humans exploring some of the main considerations when planning, designing, and outfitting your own home shop or personal makerspace. In the piece, I talk about the benefits of a public makerspace/hackerspace, namely high-end and cutting edge tools that many consumers still can’t afford (3D printers, CNC machines, laser […]
This kit comes with plenty of components to get you started learning how to use the Arduino electronics prototyping platform. It’s at one of the lowest prices I’ve seen. If you don’t know anything about Arduino and are curious, check out Tinkercad’s Circuits website, which has an Arduino simulator.
Believe it or not, PDF files have been the go-to format for contracts and forms of any type since 1993. And sure, they’re easily shareable – but that’s about it. When you need to edit or sign a document – and you will – that’s when frustration can set in. Luckily, there are workarounds, and […]
It’s 4/20! Smoke ’em if you got ’em – and if you haven’t got ’em, check out this roundup of deep discounts on pipes and other accessories. They’re all on sale, but you can take an extra discount off the final price courtesy of the Boing Boing store by using the online code 420SAVE. Freeze […]
Ever wonder if you’re cleaning your teeth well enough? If your last dentist visit has you getting a little more thorough about oral care, it might be time to save yourself some guesswork. A lot of electric toothbrushes promise deep cleaning, but there’s a Platinum Sonic Toothbrush that has power plus the simple but effective […]