Thursday, October 15, 2026Scoutari
Log inSign up
Sign up
ModelsAPI pricingSkill RadarSavedPersonalizeSubmit sourceLog in
Back to timeline

Thu, October 1519:00Business/PolicyRobotics & embodiedRobotics & embodied guide

Eiliko toy robot leaks 13M conversations, hackers can remotely hijack its LLM

View original

Decision Brief

What changedA The Verge investigation found Energize Lab's Eiliko robot stores user conversations in plaintext on an unsecured server, letting hackers read data from 68,000 devices and remotely tamper with its LLM.
Why it mattersA consumer AI toy that stores children's full voice and chat logs in plaintext, protected only by weak admin passwords, shows that data compliance and access control remain the biggest pitfalls for on-device LLM products.
Who should careAll AI builders
Affected stackNo specific stack identified
Source confidenceMedium · Reliable media or first-hand reporting

A The Verge reporter bought an Eiliko robot and, during a 10-minute chat, asked if it would tell others what was said. It replied, "Your secrets are safe with me." Minutes later, a hacker on the other side of the world had the full conversation log. The reporter found Energize Lab's backend completely unprotected, exposing 13 million conversations from tens of thousands of people and giving access to data from roughly 68,000 devices online worldwide, including over 31,000 US profiles belonging to children. The database held not only emails, IPs and a full-text searchable chat archive, but also profile data such as names, ages, birthdays, occupations and family relationships—plus unencrypted children's photos and short audio clips that should have been deleted after processing.

Summary basis: full article readCompiled from the source scope noted above; the original remains authoritative.

Sources

  • The Verge：AI

    Consumer AI products, platform shifts, and policy/culture impact.

  • The Verge：AI

Related intel

留言

登入后即可留言，和其他 builder 交换实测心得。

还没有留言，抢头香。