Buying Internet Connected Toys This Season? Be Prepared For Security Flaws
By: Jim Stickley and Tina Davis
December 17, 2019
Are you buying internet connected toys this season? Well, if so, be aware that there could be some serious security flaws associated with them right out of the box. The UK based consumer association Which? revealed it had found “serious security flaws” in some children’s smart toys on the market and being sold at small and large retailers alike, as well as online.
Along with cybersecurity specialists, the company issued some concerns about some connected toys. They believe they lack basic cybersecurity features making them vulnerable to attacks. Major concerns were with regard to unsecure connections between the toys and the servers they connect to.
There are some tips to help when buying and using smart toys, regardless of the timeframe:
- Read the description of the toy carefully in the shop or preferably in advance online. Find out what the toy actually does and how your child is expected to interact with it.
- Do research online to see if there have been any security concerns previously raised about the toy before making the purchase, but definitely before giving it to your child. If there are any concerns, reconsider purchasing that toy.
- When setting up smart toys or any IoT (Internet of Things) device, be sure to find out if there are any updates to the software or firmware that may be included with it and apply them before allowing the child to use the toy.
- If you do buy a smart toy, submit only the minimal amount of personal data required when setting up an account, especially if it involves information about your child. Enter only what is necessary for the toy to function properly.
- Create strong passwords to ensure any accounts are properly protected. Always use unique passwords for all accounts. (see below)
- Keep an eye on your child when they’re playing with the smart toy, particularly if it can send or receive messages. Know what the toy is doing and asking for.
- When the toy, is not being used, make sure to turn it off completely.
This year is not the first year there have been concerns over IoT toys. In the past, there were concerns with the doll Cayla and the manufacturer V-Tech has had a few issues. This investigation again highlights the importance for manufacturers of such toys and devices to take every step to ensure their products are secure. But more importantly, it stresses the importance for consumers to do their own research and ensure their children and their conversations and information are not at risk.