00:02We looked at a couple of pairs of these glasses, a $60 pair and a $110 pair, and we got
00:08some
00:08cyber security researchers to really put them through their paces, and I think everyone
00:13was surprised at just how many security flaws turned up.
00:17You know, we're very used to hearing about these glasses as a privacy risk more generally
00:23because you don't always know when they're filming, and so people have understandable
00:28concerns there, but this really shows that there are privacy risks for the wearer as
00:35well as anyone standing in front of the glasses.
00:37So in particular, you know, one of the more striking findings, and there were more than
00:40a dozen, but one of the more striking findings in terms of the security context here is that
00:46it was possible to hijack the glasses and be able to download images and videos stored
00:55on there and just, you know, generally use them just using Bluetooth.
01:00So no fancy equipment required, no passwords, and that really shouldn't be possible.
01:07It's not possible in most consumer tech.
01:10So that was a particularly surprising finding.
01:13There are also flaws, you know, security risks on the website associated with the app for
01:21these glasses where it was possible to, based on the device ID, look up any user's full email
01:31and their date of birth and some other data about them as well.
01:34So that's just two examples.
01:36But yes, we spoke to David Kreese.
01:39He was the lead researcher on this research, who did the security testing for us.
01:47So you purchase these glasses, you hook them up to your phone, and you start using them.
01:51The second that these disconnect from your phone, another person with the same app on
01:56their phone can log into the glasses without a password, there is no password, and just click
02:02download and get all of your photos and videos that are still in the glasses.
02:06Like if they did any form of security audit whatsoever on any part of this, they would
02:11see the cascading failure that this is.
02:15Everything is wrong.
02:16The application is wrong, the website is wrong, and the glasses are wrong.
02:19Yeah, so even if the glasses are working perfectly and there is no hacker hovering nearby in Bluetooth
02:24range trying to get at your stuff, there's a question of just how they're designed.
02:29And how they're designed is to send all your queries to an AI companion that's built into
02:38the glasses to China.
02:39So what testing reveals and what we can really just observe from these glasses is that the
02:46AI companion really relies, at least in part, on sovereign Chinese AI models.
02:56There's nothing illegal about a company or a product sending data to China, but it really
03:01needs to be disclosed to people and it doesn't seem to have been disclosed here.
03:07I couldn't find anything specific about China in the privacy policy and there were no kind
03:11of prompts along the way in using the glasses.
03:13And people really let this technology, and it's being pitched to people, to be used in
03:18the most intimate parts of their lives.
03:20The Press
03:20The Press
03:21The Press
03:22You
Comments