Energize Lab hires security firm after flaws expose robot users’ data
Eiliko maker Energize Lab says it has confirmed security flaws in its AI robot charm and is hiring an independent security firm to review its systems. The response follows reporting that exposed owners’ private conversations and other data, after the company had not answered questions for more than a month.
Energize Lab says it has shut external access to its backend, changed access credentials, disabled remote changes to robot responses and taken long-term memory and custom avatars offline. It also says it will delete stored transcripts, user profiles and avatar images. However, the report found that audio recordings and photos were still accessible at unprotected public web addresses, while a researcher retained SSH access and said transcripts and robot behaviour could still potentially be accessed or changed.
In short
- Energize Lab says it is hiring an independent security firm.
- It says it has disabled several features and will delete stored data.
- The report found recordings, photos and robot access remained exposed.
Explained simply
Energize Lab makes Eiliko, a small AI-powered robot designed to interact with its owner. To respond, the robot can process conversations and other personal information, such as user profiles, photos and custom avatar images.
The story concerns how that information was stored and who could access it. Security flaws can put private data at risk and may also allow someone to interfere with a device’s responses or settings.
The key players are Energize Lab, which makes the robot, its users, whose information may be involved, and independent security specialists who assess computer systems for weaknesses. The issue matters because people need to know how connected devices handle personal data and whether security steps protect it.
Read the full article at the source →
Originally published by The Verge as “Eiliko maker says it’s hiring an ‘’independent security firm’ after Verge report on its insecure robots”.