Eiliko robot maker to bring in outside security firm after insecure systems exposed
Customer recordings and photos were still reachable at public addresses when the company replied, and some features remain offline until a review is complete.
Energize Lab, the maker of the Eiliko AI robot charm, has said it will hire an independent security firm to review its systems after a Verge report and researcher findings exposed serious flaws. The company says it has closed external access to its backend, rotated credentials, disabled remote editing of robot responses, and taken the long-term memory and custom avatar features offline. It also says it will delete stored conversation records, user profiles and avatar images, and that those features will not return until the review confirms they are secure. The Verge reports, however, that as of the company's reply, customer audio recordings and photos were still stored at public web addresses without protection, and researcher Sammy Azdoufal says he still has SSH access to the robots. The company's response came only after more than a month of unanswered inquiries.
Why it matters
For owners of the Eiliko robot charm, the company's pledge to review its systems is the first concrete step after weeks of unanswered questions, but the reported gaps show that private recordings and photos were still exposed at the time of its reply. Until the independent review confirms the systems are secure, the long-term memory and custom avatar features stay switched off. The episode shows how a connected device can leave personal audio and images accessible when backend protections are missing, and how a company's response to outside researchers can lag behind the exposure itself.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.
Sources
- The Verge