Eiliko maker says it’s hiring an ‘independent security firm’ after Verge report on its insecure robots
Eiliko, a cute robot charm you can hang on your bag with built-in AI conversations, turned out to be a security nightmare. It told owners that "your secrets are safe with me," but hackers could easily read complete transcripts of everything we told the toy, and that was just the beginning. The Verge and security […]
Eiliko, a popular robot charm designed to attach to bags and engage in AI conversations, has revealed its vulnerability to security breaches. The Verge and security researcher Sammy Azdoufal spent a month attempting to contact the company, but received no response. Energize Lab, the company behind Eiliko, has now acknowledged the issues and announced that it will hire an independent security firm to thoroughly evaluate its systems.
The company claims it has closed all external access to its backend systems and disabled the interface that allows remote modification of a robot's responses. It also states that it will no longer store conversation records, user profiles, avatar images, and has disabled the long-term memory and custom avatar features until they can be confirmed as secure.
However, it remains unclear if Energize Lab has truly eliminated the threat, as the company's systems were still storing audio recordings and photos of customers at unsecured public web addresses. The company has apologized for its failure to respond promptly and assured customers that it is taking the necessary steps to regain trust.
Written by urgent.news from The Verge's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
