Pages

Friday, 3 March 2017

Data from connected CloudPets teddy bears leaked and ransomed, exposing kids' voice messages

Data from connected CloudPets teddy bears leaked and ransomed, exposing kids' voice messages:

By: Troy Hunt

From the article:

[…] put yourself in the shoes of the average parent, that is one who’s technically literate enough to know the wifi password but not savvy enough to understand how the “magic” of daddy talking to the kids through the bear (and vice versa) actually works. They don’t necessarily realise that every one of those recordings – those intimate, heartfelt, extremely personal recordings – between a parent and their child is stored as an audio file on the web. They certainly wouldn’t realise that in CloudPets’ case, that data was stored in a MongoDB that was in a publicly facing network segment without any authentication required and had been indexed by Shodan (a popular search engine for finding connected things).

Read more: full text

Via: Ars Technica


http://ift.tt/2mSlHC4
http://ift.tt/2mktk7p

No comments:

Post a Comment