Advertisement

Connected toys have 'worrying' security issues

From BBC - November 13, 2017

Consumer watchdog Which? has called on retailers to stop selling some popular toys it says have "proven" security issues.

Those toys include Furby Connect, the i-Que robot, Cloudpets and Toy-fi Teddy.

Which? found that there was no authentication required between the toys and the devices they could link with via Bluetooth.

Two of the manufacturers said they took security very seriously.

Sloppy security

The lack of authentication meant that, in theory, any device within physical range could link to the toy and take control or send messages, the watchdog said.

"Connected toys are becoming increasingly popular, but as our investigation shows, anyone considering buying one should apply a level of caution," said Alex Neill, managing director of home products and services at Which?

"Safety and security should be the absolute priority with any toy. If that ca not be guaranteed, then the products should not be sold."

Hasbro, which makes the Furby Connect, said in a statement that it believed the results of the tests carried out for Which? had been achieved in very specific conditions.

"A tremendous amount of engineering would be required to reverse-engineer the product as well as to create new firmware," it said.

Advertisement

Continue reading at BBC »