{"id":150119,"date":"2015-12-26T15:00:44","date_gmt":"2015-12-26T13:00:44","guid":{"rendered":"http:\/\/mybroadband.co.za\/news\/?p=150119"},"modified":"2015-12-26T14:09:18","modified_gmt":"2015-12-26T12:09:18","slug":"hello-barbie-hello-hackers","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/150119-hello-barbie-hello-hackers.html","title":{"rendered":"Hello Barbie, hello hackers"},"content":{"rendered":"<p>Mattel\u2019s latest doll connects to the internet via Wi-Fi and uses interactive voice response (IVR) to effectively converse with children. When the doll\u2019s belt button is pushed, conversations are recorded and uploaded to servers operated by Mattel\u2019s partner, <a href=\"https:\/\/www.toytalk.com\/about\/\">ToyTalk<\/a>.<\/p>\n<p>Hello Barbie tries to engage with children in intelligible and free-flowing conversation by asking and responding to questions, as well as being able to learn about its users over time.<\/p>\n<p>As <a href=\"http:\/\/shop.mattel.com\/product\/index.jsp?productId=65561726\">Mattel\u2019s website<\/a> says:<\/p>\n<blockquote><p>Just like a real friend, Hello Barbie doll listens and adapts to the user\u2019s likes and dislikes.<\/p><\/blockquote>\n<p><iframe loading=\"lazy\" src=\"https:\/\/www.youtube.com\/embed\/zVaVaf8QqWc?wmode=transparent&amp;start=0\" width=\"440\" height=\"260\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<h3 class=\"my-4\">But is Barbie the friend she promises to be?<\/h3>\n<p>Some might welcome Hello Barbie and similar talking dolls, such as <a href=\"http:\/\/myfriendcayla.co.uk\/\">My Friend Cayla<\/a>, as a fun and novel development in smart toys that will keep children occupied. Others have expressed concerns, such as the <a href=\"http:\/\/www.commercialfreechildhood.org\/action\/hell-no-barbie-8-reasons-leave-hello-barbie-shelf\">#HellNoBarbie<\/a> from the <a href=\"http:\/\/www.commercialfreechildhood.org\/\">Campaign for a Commercial-Free Childhood<\/a>.<\/p>\n<p>As one reporter found, Hello Barbie prompts those conversing with her to <a href=\"http:\/\/www.theguardian.com\/lifeandstyle\/2015\/dec\/04\/hello-barbie-talking-doll-mattel-toytalk-fashion\">divulge information<\/a> about themselves, but when the focus is on her she quickly changes the subject to invariably gender-normative subjects and fashion.<\/p>\n<blockquote><p>Hello Barbie: Let\u2019s get serious and talk about something really important: fashion.<\/p><\/blockquote>\n<p>She mines children for personal details but gives little in return, other than vacuous compliments and fashion advice. Her friend credentials come further into question as she routinely discloses all the information gathered to ToyTalk who operate the speech processing services for Hello Barbie.<\/p>\n<h3 class=\"my-4\">What\u2019s in the privacy statement?<\/h3>\n<p>As with many products, the detail that really matters is in the fine print; in this instance ToyTalk\u2019s Hello Barbie <a href=\"https:\/\/www.toytalk.com\/hellobarbie\/privacy\/\">privacy statement<\/a>, so there are a few important points to consider before wrapping her up and putting her under the Christmas tree.<\/p>\n<p>ToyTalk outlines that it may:<\/p>\n<blockquote><p>[\u2026] use, store, process, convert, transcribe, analyze or review Recordings in order to provide, maintain, analyze and improve the functioning of the Services, to develop, test or improve speech recognition technology and artificial intelligence algorithms, or for other research and development and data analysis purposes.<\/p><\/blockquote>\n<p>Essentially it can use the information gathered from the child, or anyone who converses with Hello Barbie, for any purpose that it chooses under the vague wording \u201cdata analysis purposes\u201d.<\/p>\n<p>ToyTalk will also share recordings with unknown \u201cvendors, consultants, and other service providers\u201d as well as \u201cresponding to lawful subpoenas, warrants, or court orders\u201d.<\/p>\n<p>Has Hello Barbie become a sophisticated surveillance device masquerading as an innocuous child\u2019s toy?<\/p>\n<p>In England, the draft <a href=\"https:\/\/www.gov.uk\/government\/uploads\/system\/uploads\/attachment_data\/file\/473770\/Draft_Investigatory_Powers_Bill.pdf\">Investigatory Powers Bill<\/a> introduces \u201cequipment interference\u201d, which allows security and intelligence agencies to interfere with electronic equipment in order to obtain data, such as communications, from a device. This would mean that government agencies could lawfully take over children\u2019s toys and use them to monitor suspects.<\/p>\n<p>These data collection practices are significant, as they reach much deeper than marketing practices that collect information about children\u2019s likes and preferences. In conversing with toys, such as Hello Barbie, children reveal their innermost thoughts and private play conversations, details of which are intended for no one else to hear.<\/p>\n<p>Once a child has developed a friendship with Hello Barbie, it might not be so easy to take her away.<\/p>\n<h3 class=\"my-4\">Security risks<\/h3>\n<p>ToyTalk does recognise that \u201cno security measures are perfect\u201d and that no method of data transmission can ever be \u201cguaranteed against any interception or other type of misuse\u201d.<\/p>\n<p>Just last month the toy maker <a href=\"https:\/\/www.vtech.com\/en\/press_release\/2015\/faq-about-data-breach-on-vtech-learning-lodge\/\">VTech reported 11.6 million accounts were compromised in a cyberattack<\/a>, including those of 6.3 million children. Photos of children and parents, audio files, chat logs and the name, gender and birth date of children were accessed by the hackers.<\/p>\n<p>It\u2019s not just toys that are at risk. There are ongoing reports of <a href=\"http:\/\/ieeexplore.ieee.org\/stamp\/stamp.jsp?arnumber=7270426\">baby monitors<\/a> being hacked so that outsiders can view live footage of children (and family), talk to the infant and even control the camera remotely.<\/p>\n<p>Smart toys are going to be tempting propositions for hackers, with some already proving that they could make <a href=\"http:\/\/www.pentestpartners.com\/blog\/making-childrens-toys-swear\/\">My Friend Cayla swear<\/a>, to more usual targets such as hacking credit card details.<\/p>\n<p>Barbie has also been in hot water before. The <a href=\"http:\/\/service.mattel.com\/us\/TechnicalProductDetail.aspx?prodno=R4807&amp;siteid=27&amp;catid1=508\">Barbie Video Girl<\/a> has a camera lens embedded in the doll\u2019s chest disguised as a pendant which prompted the <a href=\"http:\/\/blogs.wsj.com\/digits\/2010\/12\/08\/fbi-video-barbie-could-hold-evidence-in-child-abuse-cases\/\">FBI to issue a warning<\/a> that it could be used to make child pornography.<\/p>\n<p>The Internet of Things provides direct access to children and their spaces through an increasing array of products and gizmos. Such security breaches not only act as a stark reminder of the vulnerability of children\u2019s high-tech toys, but also lead us to reflect on other risks the trend in so-called smart toys might be introducing into children\u2019s lives.<\/p>\n<h3 class=\"my-4\">An invasion of play<\/h3>\n<p>But Hello Barbie doesn\u2019t just reveal a child\u2019s private conversations to large corporations, and potentially law enforcement agencies. She also tells tales much closer to home: to parents.<\/p>\n<p>A smartphone app enables parents to listen to the conversations between their child and their Hello Barbie. They can also receive alerts when new recordings become available, and can access and review the audio files.<\/p>\n<p>Anyone with access to the parent account can also choose to share recordings and other content via Facebook, Twitter or YouTube. While some may see this as a novel feature, it is important to consider the potential loss of privacy to the child.<\/p>\n<p>Play is an important part of the way children learn about the world. A key part of this is the opportunity for private spaces to engage in creative play without concerns about adults intruding.<\/p>\n<p>It looks like Hello Barbie\u2019s dream to be a fashion-setter might just come true as she pioneers a new trend for smart and connected toys. In turn, the child loses out on both a trusted toy and on the spaces where they can lose themselves in other worlds without worrying about who\u2019s listening in.<\/p>\n<ul>\n<li><a href=\"http:\/\/theconversation.com\/profiles\/emmeline-taylor-211727\">Emmeline Taylor<\/a>, Senior Lecturer in Criminology, <em><a href=\"http:\/\/theconversation.com\/institutions\/australian-national-university\">Australian National University<\/a><\/em> and <a href=\"http:\/\/theconversation.com\/profiles\/katina-michael-9456\">Katina Michael<\/a>, Associate Professor, School of Information Systems and Technology, <em><a href=\"http:\/\/theconversation.com\/institutions\/university-of-wollongong\">University of Wollongong<\/a><\/em><\/li>\n<li>This article was originally published on <a href=\"http:\/\/theconversation.com\">The Conversation<\/a>. Read the <a href=\"https:\/\/theconversation.com\/hello-barbie-hello-hackers-accessing-personal-data-will-be-childs-play-52082\">original article<\/a>.<\/li>\n<\/ul>\n<h3 class=\"my-4\">More on\u00a0security<\/h3>\n<p><strong><a href=\"http:\/\/mybroadband.co.za\/news\/security\/149547-cybersecurity-policy-framework-for-south-africa-finally-published.html\">Cybersecurity Policy Framework for South Africa finally published<\/a><\/strong><\/p>\n<p><a href=\"http:\/\/mybroadband.co.za\/news\/government\/146807-cybercrime-and-cybersecurity-bill-stop-the-anc-government-from-breaking-the-internet.html\"><strong>Cybercrime and cybersecurity bill \u2013 stop the ANC government from breaking the Internet<\/strong><\/a><\/p>\n<p><a href=\"http:\/\/mybroadband.co.za\/news\/internet\/142980-scary-new-internet-censorship-law-for-south-africa.html\"><strong>Scary new Internet censorship law for South Africa<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>It looks like Hello Barbie\u2019s dream to be a fashion-setter might just come true as she pioneers a new trend for smart and connected toys<\/p>\n","protected":false},"author":340972,"featured_media":150121,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[34569,199,35,34571],"class_list":["post-150119","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-barbie","tag-hackers","tag-headline","tag-hello-barbie"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/150119"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/340972"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=150119"}],"version-history":[{"count":0,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/150119\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/150121"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=150119"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=150119"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=150119"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}