A security flaw in an Internet-connected male chastity device could allow hackers to remotely lock it — leaving users trapped, researchers have said.
The Cellmate, produced by Chinese firm Qiui, is a cover that clamps on the base of the male genitals with a hardened steel ring, and does not have a physical key or manual override.
The locking mechanism is controlled with a smartphone app via Bluetooth — marketed as both an anti-cheating and a submission sex play device — but security researchers have found multiple flaws that leave it vulnerable to hacking.
“We discovered that remote attackers could prevent the Bluetooth lock from being opened, permanently locking the user in the device. There is no physical unlock,” British security firm Pen Test Partners (PTP) said on Tuesday. “An angle grinder or other suitable heavy tool would be required to cut the wearer free.”
The firm also found other security flaws in the Cellmate — listed for US$189 on Qiui’s Web site — that could expose sensitive user information such as names, telephone numbers, birthdays and location data.
“It wouldn’t take an attacker more than a couple of days to exfiltrate the entire user database and use it for blackmail or phishing,” PTP’s Alex Lomas wrote in the report on the device.
“A number of countries have oppressive laws that may expose users of these types of devices to unwarranted interest from law enforcement and bigots,” Lomas wrote.
Qiui did not immediately respond to a request for comment.
PTP said it reached out to Qiui in April, identifying the flaws.
Qiui fixed most of the issues by updating the software, but left the older version active and its users still vulnerable, PTP said, adding that other researchers had found similar issues.
Such smart sex toys and devices are among the wave of new “Internet of things” products and appliances introduced in the past few years that are online and capable of being operated remotely.
Their connectivity has also made them vulnerable to security breaches and privacy violations.
The Canadian maker of a smart vibrator agreed to a multimillion-dollar settlement in 2017 after it was sued for collecting sensitive user information, though it did not admit any wrongdoing.
Auschwitz survivor Eva Schloss, the stepsister of teenage diarist Anne Frank and a tireless educator about the horrors of the Holocaust, has died. She was 96. The Anne Frank Trust UK, of which Schloss was honorary president, said she died on Saturday in London, where she lived. Britain’s King Charles III said he was “privileged and proud” to have known Schloss, who cofounded the charitable trust to help young people challenge prejudice. “The horrors that she endured as a young woman are impossible to comprehend and yet she devoted the rest of her life to overcoming hatred and prejudice, promoting kindness, courage, understanding
‘DISRESPECTFUL’: Katie Miller, the wife of Trump’s most influential adviser, drew ire by posting an image of Greenland in the colors of the US flag, captioning it ‘SOON’ US President Donald Trump on Sunday doubled down on his claim that Greenland should become part of the US, despite calls by the Danish prime minister to stop “threatening” the territory. Washington’s military intervention in Venezuela has reignited fears for Greenland, which Trump has repeatedly said he wants to annex, given its strategic location in the arctic. While aboard Air Force One en route to Washington, Trump reiterated the goal. “We need Greenland from the standpoint of national security, and Denmark is not going to be able to do it,” he said in response to a reporter’s question. “We’ll worry about Greenland in
Tens of thousands of Filipino Catholics yesterday twirled white cloths and chanted “Viva, viva,” as a centuries-old statue of Jesus Christ was paraded through the streets of Manila in the nation’s biggest annual religious event. The day-long procession began before dawn, with barefoot volunteers pulling the heavy carriage through narrow streets where the devout waited in hopes of touching the icon, believed to hold miraculous powers. Thousands of police were deployed to manage crowds that officials believe could number in the millions by the time the statue reaches its home in central Manila’s Quiapo church around midnight. More than 800 people had sought
PERILOUS JOURNEY: Over just a matter of days last month, about 1,600 Afghans who were at risk of perishing due to the cold weather were rescued in the mountains Habibullah set off from his home in western Afghanistan determined to find work in Iran, only for the 15-year-old to freeze to death while walking across the mountainous frontier. “He was forced to go, to bring food for the family,” his mother, Mah Jan, said at her mud home in Ghunjan village. “We have no food to eat, we have no clothes to wear. The house in which I live has no electricity, no water. I have no proper window, nothing to burn for heating,” she added, clutching a photograph of her son. Habibullah was one of at least 18 migrants who died