TechTheDay

Any device that’s part of the Internet of Things (IoT) is always connected to the Internet unless, of course, if it is turned off or isn’t connected to any network that leads to the Internet. Having always-online devices is fine. A lot of people depend on such devices, which make our lives a lot easier. In the future, you would be able to access the computer inside your car, your coffee-maker, the lights in your house, and even the lock on your doors with a portable communication device similar to the smartphones we use today.

But of course, such items pose a risk since each device has a direct route to the outside world. It doesn’t matter whether you’re from Manila or from Gibraltar, people will be able to get to you if you’re connected to the Internet. And even if the devices or service you’re using is “secured” you really can’t tell if it actually is. A good example of such device is your smartphone. It is a communication device that has a microphone and a camera and it can connect to the internet via WiFi or data. Once intruders gain access to your phone they could swipe contact details and other personal information, like browsing history, what apps you use or even files in it.

What You Sound Like

Those things that intruders can steal from your phone should scare you, especially when you use your phone for something really personal like, for example, using sex toys.

Just last week a sex toy company’s app was discovered to have been recording the sounds in the phone’s surrounding during the usage of the app, which remote controls a vibrator made by the company. The company Lovense has admitted that their app was recording when a Reddit user posted about the app’s peculiar behavior. The user, lovense2, who claims to be the company’s representative, posted a reply to the thread:

“Regarding the sound file in question, it has already been confirmed that this is a minor bug – a temporary file that is created when someone uses the Sound Control feature,” lovense2 claimed. “Your concern is completely understandable. But rest assured, no information or data is sent to our servers.”

Lovense also added that the file, tempSoundPlay.3gp, was supposed to be deleted AFTER the user was finished using the app. The user went on to claim that their programmers did confirm that this behavior is a bug and promised to fix it. The site, internetofdon.gs, reported having tested the app and found that the file was never used except when the app was recording. There were no attempts to send it off somewhere. They were also able to confirm that the file was being created, however, and it is used to control the vibrator. The louder, the stronger the vibrations.

The article states that the user shouldn’t have posted on Reddit and instead should have sent an email to the company, but who knows how many eons will it take for lazy companies to address the issue if we didn’t make a mountain out of this (probably even never).

Keeping Things Secret By Being Open

Being vigilant at all times and demanding security from the companies, especially those that make the devices and services that are connected to the Internet, is the right and duty of every person. Especially when it is a device you purchased or a service you paid for. No one is saying that the IoT devices have no merits and should be abandoned entirely, but we must all admit that they all pose risks. Risks that we don’t like and should be fixed. And to do so we must make it known to everyone: the companies and other users.

To the developers and their loyal fans, don’t get so highly defensive when someone points out a hole in your systems. The people that points these out do so for the benefit of everyone’s security, not to shame a company or to spread hate and rumor. You must be open to accepting criticism and even a bit of harassment, especially from those who actually buy your products. As the age-old saying goes: the customer is always right. You don’t want your blunders to make it into the news? Then test your systems well.