Skip to content

Hacking the Internet of Dongs

RenderMan

Security and privacy vulnerabilities in internet-connected adult toys and efforts to bring information security best practices to an under-researched branch of IoT.

Summary

Internet of Dongs as IoT Security Research

Internet-connected sex toys represent an under-researched branch of IoT security. Like many IoT devices, these products suffer from security and privacy vulnerabilities that are more serious given their intimate and personal nature.

The Vulnerability Landscape

Commercial IoD devices have not typically received security auditing by the same researchers who focus on other IoT categories. This gap in research means vulnerabilities often go undiscovered and unpatched. Common issues include weak authentication, unencrypted data transmission, insecure cloud backends, and firmware vulnerabilities.

Privacy Implications

The intimate nature of these devices means privacy breaches carry uniquely serious consequences for users. Data collection practices, cloud storage of usage patterns, and potential for device compromise all pose privacy risks that exceed typical IoT privacy concerns.

Industry Engagement and Change

The Internet of Dongs project (internetofdon.gs) works to bring information security best practices to the adult toy industry through responsible disclosure, vendor education, and public awareness. The speaker covers the approach and progress in improving security standards across the industry.

Related talks

IoT Village·39 min

  • DEF CON
  • Red Team
  • Date: Aug 2018
  • Location: Las Vegas

Ben Nassi

Smart irrigation systems, a new IoT device which is aimed at saving water and money, have already been adopted by smart cities (e.g., Barcelona), agriculture, and the private sector around the world and will replace e...

iotexploitationprivacy+2