Don't Feed Them After Midnight: Reverse-Engineering the Furby Connect
1–10 of 29 posts
Re: Don't Feed Them After Midnight: Reverse-Engineering the Furby Connect
#2Company response is so typical, it hurts to read.
Re: Don't Feed Them After Midnight: Reverse-Engineering the Furby Connect
#3Company response is "Yeah, that's way too hard, nobody can do that".
Re: Don't Feed Them After Midnight: Reverse-Engineering the Furby Connect
#4Company response is so typical, it hurts to read.
Why? As long as it doesn't have a microphone/camera then this sounds like a positive.
Re: Don't Feed Them After Midnight: Reverse-Engineering the Furby Connect
#5"while the FURBY CONNECT toy is in a "woke" state"
I couldn't help but chuckle at this.
Re: Don't Feed Them After Midnight: Reverse-Engineering the Furby Connect
#6Why don't they just enable basic Bluetooth security features instead of saying that it's too hard to exploit and leaving it at that?
Excellent write-up though.
Re: Don't Feed Them After Midnight: Reverse-Engineering the Furby Connect
#7All it takes is a single goatse to appear on one child's furby's eyes or on a demo unit in a shop and the brand is ruined. I think they need to reconsider that response.
Re: Don't Feed Them After Midnight: Reverse-Engineering the Furby Connect
#8Re: Don't Feed Them After Midnight: Reverse-Engineering the Furby Connect
#9All it takes is a single goatse to appear on one child's furby's eyes or on a demo unit in a shop and the brand is ruined. I think they need to reconsider that response.
Perhaps you're unaware that an earlier edition of this product had a bug that made the device randomly speak with a terrifying satanic voice. My niece experienced it first hand
Re: Don't Feed Them After Midnight: Reverse-Engineering the Furby Connect
#10Why don't they just enable basic Bluetooth security features instead of saying that it's too hard to exploit and leaving it at that? Excellent write-up though.
Because they probably paid some contractor to design it and requesting this as an update would be expensive. Most likely some director doesn't think it's worth the money. Furthermore, the security team / one random guy who is now told to handle security duties after they got that e-mail most likely has an IT background and thinks reverse engineering embedded systems is impossibly difficult.
It would only be done if the press started publishing clickbait involving "THIS TOY IS WATCHING YOUR CHILDREN!!" as most IoT security not done by the top companies is entirely reactive.
Just a guess though. Never worked for Hasbo.