Engadget: Connected teddy bears leaked kids’ voices online

Oh good grief. From Engadget: Connected teddy bears leaked kids’ voices online. “Security researchers have discovered that Spiral Toys’ internet-savvy teddy bears, CloudPets, stored kids’ voice messages to their parents (not to mention names and birthdays) in an insecure, misconfigured database that anyone could access online. While the passwords for the toys’ accounts (over 821,000 of them) were stored in a cryptographic hash, there was no password strength limit — it was trivial to crack many accounts and download voice data at will. And it gets worse.”