Archive for the ‘ESET’ Category

SexTech: Characteristics of Smart Sex Toys (ESET White Paper)

Monday, March 15th, 2021

Did you know that sex toys could be connected to the Internet, to a smartphone or to another sex toy? Along with the technology that makes sex toys smart, vulnerabilities are introduced that could endanger the user’s data, privacy and even safety!

Architecture of a smart sex toy.

Architecture of a smart sex toy.

With the emergence of the IoT, many manufacturers have entered the sexual pleasure market by integrating the ability to control devices through mobile apps as well as adding web-based interconnectivity.

There are currently numerous different apps available, each of which offers the ability to control a wide range of models.

In terms of their architecture, most of these devices can be controlled via Bluetooth Low Energy (BLE) from an app installed on a smartphone.

The main advantages of this protocol are that it has very low power requirements, communications are within an acceptable range, there is interoperability among chipset manufacturers, and it all comes in a very compact size.

As a result, a lot of smart devices for the home, health, car, and even sex toy fields, use BLE between the device and the app that controls it.

Like Bluetooth, BLE operates on the 2.4 GHz ISM band.

However, unlike standard Bluetooth, BLE stays in sleep mode all the time, except when a connection is initiated.

Also, the actual connection times themselves are just a few milliseconds, unlike Bluetooth, which takes more than 100 milliseconds.

(more…)

SexTech: The Evolution of Sex Toys (ESET White Paper)

Sunday, March 14th, 2021

ESET has published a White Paper on their study on the potential security and safety flaws of connected sex toys. The title of the report is “Sex in the Digital Era – How secure are smart sex toys?” and here is an excerpt on the evolution of sex toys.

“Sex in the Digital Era - How secure are smart sex toys?” is an ESET Research White Paper published by Denise Giusto and Cecilia Pastorino.

“Sex in the Digital Era – How secure are smart sex toys?” is an ESET Research White Paper published by Denise Giusto and Cecilia Pastorino.

As IoT (Internet of Things) devices continue to seep into our homes and offer an increasingly wide range of features, new concerns are beginning to arise about the security of the data processed by these devices.

Though they have been subject to countless security breaches leading to the exposure of people’s login details, financial information, and geographical location, among others, there are few kinds of data with more potential to harm users, if published, than those relating to their sexual behavior.

With new models of smart toys for adults entering the market all the time, we might imagine that progress is being made in strengthening the mechanisms to ensure good practices in the processing of user information.

However, our research shows that we are a long way from being able to live out our sexuality through digital media without exposing ourselves to the risk of cyberattack.

Today, these findings are more relevant than ever, since we are seeing a rapid rise in sex toy sales as a reflection of the current health situation around the world and the social distancing measures related to COVID-19.

Though many experts have devoted time to identifying and reporting security flaws within this industry, with every passing year these devices incorporate an ever wider range of features: Group chats, multimedia messages, videoconferencing, synchronisation with lists of songs or audio books, and much more.

Each time their code is re-engineered, some vulnerabilities are corrected, new vulnerabilities may be created, and many more remain unchanged in the updated versions.

Read about the evolution of sex toys below.

(more…)

Study: ESET Research into Security of Smart Sex Toys

Saturday, March 13th, 2021

Vulnerabilities in smart sex toys could leave users at risk of data breaches and attacks, both cyber and physical, according to a new white paper from global cybersecurity experts at ESET.

The We-Vibe Jive (left) and Lovense Max (right) analysed in the study.

The We-Vibe Jive (left) and Lovense Max (right) analysed in the study.

The “Sex in the Digital Era – How secure are smart sex toys?” report explores the potential security and safety flaws of connected sex toys and includes an in-depth analysis of two popular devices.

Amidst ongoing social restrictions due to the pandemic, sales of sex toys has risen rapidly, and associated cybersecurity concerns mustn’t be overlooked.

As newer, technologically advanced models of sex toys enter the marketplace, incorporating mobile apps, messaging, video chat, and web-based interconnectivity, devices become more appealing and exploitable to cybercriminals.

The consequences of data breaches in this sphere can be particularly disastrous when the information leaked concerns sexual orientation, sexual behaviors, and intimate photos.

(more…)