儿童机器人Eiliko被曝泄露1300万条对话，服务器可被远程劫持
原标题：Your secrets aren’t safe with this cute robot toy — they’re on Chinese servers ready to be hacked
AI 摘要
The Verge 报道称，安全研究者 Sammy Azdoufal 发现儿童机器人玩具 Eiliko 的制造商 Energize Lab 存在严重安全漏洞：用户与玩具的对话被明文存储在中国服务器上，涉及全球约 6.8 万台设备、1300 万条对话，其中超过 3.1 万个档案属于儿童。数据库还包含用户画像、未加密的儿童照片和音频，管理员密码极为薄弱。Azdoufal 甚至远程劫持了记者玩具的 LLM，使其输出地球是平的等错误信息。The Verge 联系厂商一个多月未获实质回应。
正文节选
There’s a new digital pet in town — a cute little marshmallow of a robot that can change its cartoony expressions to match your mood. But if you or your kids talk to “Eiliko” over Wi-Fi, it’ll phone home to China. Its AI companion can store literally everything you tell it on Chinese servers, where hackers can easily gain access or even hijack its personality. And the company that made it, Energize Lab, doesn’t seem to care. Your secrets aren’t safe with this cute robot toy — they’re on Chinese