Jailbreaking RabbitOS: Uncovering Secret Logs, and GPL Violations (www.da.vidbuchanan.co.uk)
from lemmyreader@lemmy.ml to privacy@lemmy.ml on 18 Jul 2024 11:32
https://lemmy.ml/post/18121105

cross-posted from: infosec.pub/post/14981035

But as I and others looked closer, and thought about it more deeply, things became concerning.

These logs include:

Your precise GPS locations (which are also sent to their servers).
Your WiFi network name.
The IDs of nearby cell towers (even with no SIM card inserted, also sent to their servers).
Your internet-facing IP address.
The user token used by the device to authenticate with Rabbit's back-end API.
Base64-encoded MP3s of everything the Rabbit has ever spoken to you (and the text transcript thereof).

#privacy

threaded - newest

dotslashme@infosec.pub on 18 Jul 2024 16:37 next collapse

Very informative and a interesting read!

[deleted] on 19 Jul 2024 06:44 collapse
.
ExtremeDullard@lemmy.sdf.org on 19 Jul 2024 06:47 collapse

AI product violates your privacy. What a shocker… I would have been surprised if it didn’t.

Actually I’m surprised when any product respects privacy these days, not just AI products. But AI in particular owes its very existence to corporate surveillance and runs on privacy violation. It just comes with the beast.