15

As I understand the issues, there are two particular points in which the Cayla doll differs from similar allowed toys: The doll has a light indicating when it is sending - but that can be switched off remotely (smart phone app). In addition, lack of bluetooth pairing security (no button press, no PIN) means that it is rather easy for 3rd parties to take ...


11

For the My Friend Cayla toy, you can use it without an Internet connection. The FAQ states: Do I need an internet connection to play with Cayla? An internet connection will be required to download the free app which unlocks all of the fun things which Cayla can do. Some functions, such as searching for information on the internet (famous people, ...


10

it's not exactly hidden; the device is advertised as 'smart' and connected to the Internet. Okay but if you're not the one who bought it, you may not be aware that it is recording your speech and sending it to the internet! Just buy one and give it as a gift to someone you wish to spy on; they'll think it's just a doll. Hence, it very much is a hidden ...


8

The news in Germany where reporting that under german laws the doll is considered as hidden espionage device as it looks like a normal toy without any electronical parts to people who do not know about the functions of it, altough it is able to record and send data. This falls under "§ 90 Missbrauch von Sende- oder sonstigen Telekommunikationsanlagen" of ...


6

One of the key issues with My Friend Cayla is that the audio files it sends are not saved securely. Ken Munro has carried out extensive analysis on this (and many other IoT devices) and points out that the audio files are available on the Internet, with poor access controls! So not only is everything your child says going to a server somewhere, others can ...


Only top voted, non community-wiki answers of a minimum length are eligible