US EditionLovense Adult Toy App Leaks Private User Email Addresses - What We Know, and How to Stay Safe if You're Affected
GLOBAL, JUL 29 – A zero-day flaw in Lovense’s app exposes emails by username, risking millions of users including adult content creators, with no full fix after four months, researchers say.
- Lovense, an internet-connected sex toy brand with at least 20 million users, has significant security flaws in its app, allowing exposure of private information, as discovered by a researcher known as BobDaHacker.
- BobDaHacker notified Lovense about the bugs, but the company stated it would take 14 months to fix an issue, leaving users’ emails vulnerable for over a year.
- KrisTech304 revealed that Lovense paid a $350 bug bounty for similar vulnerabilities and claimed the flaw had been fixed, yet was able to replicate the issue again.
- Lovense advised users that their email could be accessed if someone knows their username and recommended considering the use of a throwaway email for security.
11 Articles
11 Articles
Lovense was told its sex toy app leaked users’ emails and didn’t fix it
Lovense, the maker of internet-connected sex toys, left user emails exposed for months — even after it became aware of the vulnerability. In a blog post spotted by TechCrunch and Bleeping Computer, security researcher BobDaHacker found that they could “turn any username into their email address,” which they could then use to take over someone’s account. Though BobDaHacker initially disclosed this vulnerability to Lovense in March, the researcher…
The company had been warned twice of its negligence, but the safety flaws have still not been fully repaired.
Sex toy maker Lovense caught leaking users' email addresses and exposing accounts to takeovers
A security researcher went public after the sex toy maker asked for more than a year to fix the vulnerabilities, which leak users' private email addresses and allow for accounts to be hijacked.
Coverage Details
Bias Distribution
- 50% of the sources lean Left, 50% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
