Eiliko AI robot toy exposes user conversations and profiles on Chinese servers
Overview
Security researcher Sammy Azdoufal found that Energize Lab's Eiliko robot toy uploads users' conversations to servers in China, where he could read 13 million conversations and access a fleet of 68,000 devices.
The company stores user profiles, audio recordings and photos, and Azdoufal describes its admin passwords as weak. He also remotely altered the toy's LLM so it gave false answers, including that the Earth is flat.
Energize Lab did not respond to The Verge's requests for comment.
Written by AI from the articles below · updated Oct 15, 8:04 AM ET
Check the sources:
Article timeline
The articles in this story. Times are ET.
- The Verge · AINewsEiliko robot toy stores users' conversations and profiles on Chinese servers, researchers find
AISammy Azdoufal found that Energize Lab's Eiliko robot toy uploads users' conversations to servers in China, where he could read 13 million conversations and access a fleet of 68,000 devices. The company stores user profiles, audio recordings and photos, with admin passwords described as weak, and it did not respond to The Verge's requests for comment. Azdoufal also remotely altered the toy's LLM so it gave false answers, including that the Earth is flat.
Heat trend
Not enough continuous observations to show a trend yet.