Eiliko maker says it's hiring an "independent security firm" after Verge report on its insecure robots

Energize Lab, maker of the Eiliko AI robot charm, has finally responded to a Verge report exposing severe security flaws, including easy access to conversation transcripts and unsecured storage of audio and photos. The company stated it has closed external access to backend systems, disabled remote modification of robot responses, taken long-term memory and custom avatar features offline, and will delete stored conversation records, user profiles, and avatar images. It also plans to hire an independent security firm to review its systems, with features returning only after security is confirmed. However, security researcher Sammy Azdoufal says he still has SSH access and can read transcripts and modify behavior, and unsecured public web addresses still host customer data, contradicting the company's claims. Energize Lab acknowledged its failure to respond earlier and pledged to earn back trust through actions.

(Source：The Verge)