Similarly,
Lovense, giant connected sextoys, not:
Adobe Stock, Lovense
A connected sex toys is faced with safety flaws that reveals the email addresses of its users. Meanwhile,
Tech – Sextoys a little too connected. Moreover, This Monday, July 28, a cybersecurity researcher denounced major safety flaws at Lovense, a Sexpoys based in Singapore. In addition, On his blog. Therefore, the researcher nicknamed Bobdahacker explained that he had discovered major bugs allowing hackers to find the personal email addresses of users of the Lovense application, but also to take control of their accounts thanks to these emails.
As reminded TechCrunchwhich has spotted history. Moreover, if these flaws are also lovense, giant connected sextoys, not serious it is because they threaten personal data of more than 20 million users around the world. The company is indeed one of the pioneers in the sector. and one of the first to integrate Chatgpt into its sex toys with an option allowing users to generate erotic stories.
“This is particularly serious for cam-girls who share their user names publicly but obviously do not want. their personal email addresses to be revealed”specifies Bobdahacker on his blog. The latter explains that anyone using software to analyze application data could come across email addresses.
A company hanging out – Lovense, giant connected sextoys, not
Once the addresses were found. it only took a few steps to Bobdahacker to associate these addresses with their corresponding user names – which TechCrunch was able to check by creating an account. “The whole process took about 30 seconds by username manually. and with the script lovense, giant connected sextoys, not that we did to automate it, it took less than a second”confirms the researcher.
Worse. the researcher quickly discovered that with these email addresses, he could create authentication tokens and therefore connect to any account. According to TechCrunchthis would allow a hacker to control accounts remotely as if it were the owner – a. concern that would concern all people with a sex toy.
At the end of March. Bobdahacker therefore informed Loves of these flaws, which, according to him, would have already been identified in 2023 by another researcher. The company confirmed the existence of the faults, and Bobdahacker affected a reward of $ 3,000. But after several weeks of tense exchanges about the bugs which had still not been entirely resolved. Lovense demanded a period of 14 months to be able to repair everything, pushing the researcher to denounce them publicly.
“We lovense, giant connected sextoys, not have also evaluated a faster repair of one month. However, this would force all users to make updates immediately (…) We have not chosen this approach, preferring a more stable and practical solution for users ”added Lovense to justify herself. For Bobdahacker, it’s the drop too. “When you find the same critical bugs twice. two years of intervals, and that the company says that it is” repaired “twice … It is not incompetence. It is negligence “he concludes on his blog, warning all users of the application.
Further reading: A French error on most panels of commercial parking in Lebourgneuf – “Apple declares the end of dependence”: this plan at 470 million euros to emancipate from rare Chinese earths and upset the high-tech industry – Alstom: carried by its rise in power in Germany, Alstom accelerates its growth and climbs on the stock market – Without warning, nike liquids its stocks with 5 offers at irresistible prices – Behind the bad reputation, a several million windfall for Corsica.
