HACKED BUTT PLUG CAN BE CONTROLLED 'FROM ANYWHERE'

[link to www.newsweek.com]


Researchers have discovered a serious security flaw with a Bluetooth-enabled butt plug that allows hackers to remotely take control of the vibrating sex toy.

Italian security researcher Giovanni Mellini published his findings in a blogpost on Tuesday, October 18, describing how he was able to send a vibrate command to a Hush butt plug from his laptop.

The Hush device, manufactured by Lovense, is designed to be a “long-distance love toy” and is described by the sex toy startup as “the world’s first teledildonic butt plug” that can be "controlled from anywhere."


Mellini said the idea to hack a butt plug started as a joke between a friend but decided to follow through after wanting to explore the security of the Bluetooth Low Energy (BLE) protocol.

“This caught my attention after researchers told us that a lot of sex toys use this protocol to allow remote control that is insecure by design,” Mellini explained in his blog.

The BLE protocol vulnerability was first discovered by another security researcher called Simone Margaritelli, who wrote a scanner that Mellini used in the butt plug hack. Margaritelli described BLE in a separate blogpost as “a cheap and very insecure version of Bluetooth, in which you have…. no built-in protocol security.”

The device is one of dozens of sex toys that manufacturers have launched in recent years that can connect to smartphones and computers via WiFi and Bluetooth in order to allow users to control them remotely and download software updates.

However, security experts warn that these companies too often treat cybersecurity as an afterthought.