Live data from Hacker News

Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

blog.mgdproductions.com

91–100 of 265 posts

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#91

Earlier quoted context omitted.

This might come as a weird take but I'm less concerned about the Chinese logging my private information than an American company. What's China going to do? It's a far away country I don't live in and don't care about. If they got an American court order they would probably use it as toilet paper. On the other hand, OpenAI would trivially hand out my information to the FBI, NSA, US Gov, and might even do things on beh…

> What's China going to do? It's a far away country I don't live in and don't care about. Extortion is one thing. That's how spy agencies have operated for millennia to gather HUMINT. The Russians, the ultimate masters, even have a word for it: kompromat . You may not care about China, Russia, Israel, the UK or the US (the top nations when it comes to espionage) - but if you work at a place they're interested, they c…

> The other thing is, China has been known to operate overseas against targets

Here in boring New Zealand, the Chinese government has had anti-China protestors beaten in new zealand. They have stalked and broken into the office and home of an academic, expert in China. They have a dubious relationship with both the main political parties (including having an ex-Chinese spy elected as an MP).

It’s an uncomfortable situation and we are possibly the least strategically useful country in the world.

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#93

Cool post. One thing that rubbed me the wrong way: Their response was better than 98% of other companies when it comes to reporting vulnerabilities. Very welcoming and most of all they showed interest and addressed the issues. OP however seemed to show disdain and even combativeness towards them... which is a shame. And of course the usual sinophobia (e.g. everything Chinese is spying on you). Overall simple security…

It’s not sinophobia to point out an obvious pattern. It’s like saying talking about how terrorism (the kind that will actually affect you) is solely an Islamic issue, and then calling that islamophobic. It’s okay to recognize patterns my man.

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#94

Earlier quoted context omitted.

This might come as a weird take but I'm less concerned about the Chinese logging my private information than an American company. What's China going to do? It's a far away country I don't live in and don't care about. If they got an American court order they would probably use it as toilet paper. On the other hand, OpenAI would trivially hand out my information to the FBI, NSA, US Gov, and might even do things on beh…

That's rather naive, considering China has a international police unit, that is stationed in several countries https://en.wikipedia.org/wiki/Chinese_police_overseas_servic...

Right, but the vast majority of people living in the USA as citizens have threat models that rightly do not include "Being disappeared by China"

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#95

Cool post. One thing that rubbed me the wrong way: Their response was better than 98% of other companies when it comes to reporting vulnerabilities. Very welcoming and most of all they showed interest and addressed the issues. OP however seemed to show disdain and even combativeness towards them... which is a shame. And of course the usual sinophobia (e.g. everything Chinese is spying on you). Overall simple security…

Nipponophobia is low because Japan didn’t successfully weaponize technology to make a social credit score police state for minority groups.

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#97

Earlier quoted context omitted.

This might come as a weird take but I'm less concerned about the Chinese logging my private information than an American company. What's China going to do? It's a far away country I don't live in and don't care about. If they got an American court order they would probably use it as toilet paper. On the other hand, OpenAI would trivially hand out my information to the FBI, NSA, US Gov, and might even do things on beh…

That's rather naive, considering China has a international police unit, that is stationed in several countries https://en.wikipedia.org/wiki/Chinese_police_overseas_servic...

I recently learned that the New York City Police Department has international presence as well. Not sure if it directly compares, but... what a world we live in.

https://www.nycpolicefoundation.org/ourwork/advance/countert...

https://www.nyc.gov/site/nypd/bureaus/investigative/intellig...

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#98
Absolutely wild. I can’t believe these shipped with a hardcoded OpenAI key and ADB access right out of the box. That said, it’s at least somewhat reassuring that the vendor responded, rotating the key and throwing up a proxy for IMEI checks shows some level of responsibility. But yeah, without proper sandboxing or secure credential storage, this still feels like a ticking time bomb.

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#99

Earlier quoted context omitted.

I agree they could have worked more closely with the team, but the chat logging is actually pretty concerning. It's not sinophobia when they're logging _everything_ you say. (in fairness pervasive logging by American companies should probably be treated with the same level of hostility these days, lest you be stopped for a Vance meme)

This might come as a weird take but I'm less concerned about the Chinese logging my private information than an American company. What's China going to do? It's a far away country I don't live in and don't care about. If they got an American court order they would probably use it as toilet paper. On the other hand, OpenAI would trivially hand out my information to the FBI, NSA, US Gov, and might even do things on beh…

China has a policy of chilling free speech in the west with political pressure.

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#100

Cool post. One thing that rubbed me the wrong way: Their response was better than 98% of other companies when it comes to reporting vulnerabilities. Very welcoming and most of all they showed interest and addressed the issues. OP however seemed to show disdain and even combativeness towards them... which is a shame. And of course the usual sinophobia (e.g. everything Chinese is spying on you). Overall simple security…

Same here. Also once it turned out to be an android device in debug mode the rest of the article was less interesting. Evil maid stuff
Post reply on HN