{"id":83643,"date":"2020-10-07T14:00:00","date_gmt":"2020-10-07T11:00:00","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/smart-chastity-devices-security-flaw-let-hackers-permanently-seal-users-up-researchers-warn\/"},"modified":"2020-10-07T14:00:00","modified_gmt":"2020-10-07T11:00:00","slug":"smart-chastity-devices-security-flaw-let-hackers-permanently-seal-users-up-researchers-warn","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/smart-chastity-devices-security-flaw-let-hackers-permanently-seal-users-up-researchers-warn\/","title":{"rendered":"#Smart chastity device\u2019s security flaw let hackers \u2018permanently\u2019 seal users up, researchers warn"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a3df343e0277\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6a3df343e0277\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/smart-chastity-devices-security-flaw-let-hackers-permanently-seal-users-up-researchers-warn\/#%E2%80%98If_youre_locked_in_theres_no_way_out\" >&#8216;If you\u2019re locked in there\u2019s no way out.&#8217;<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/buradabiliyorum.com\/en\/smart-chastity-devices-security-flaw-let-hackers-permanently-seal-users-up-researchers-warn\/#More_NSFW_on_the_Daily_Dot\" >More NSFW on the Daily Dot<\/a><\/li><\/ul><\/nav><\/div>\n<p>&#8220;<strong>#Smart chastity device\u2019s security flaw let hackers \u2018permanently\u2019 seal users up, researchers warn<br \/>\n<\/strong>&#8221;<\/p>\n<h3 class=\"article-sub-head\"><span class=\"ez-toc-section\" id=\"%E2%80%98If_youre_locked_in_theres_no_way_out\"><\/span>&#8216;If you\u2019re locked in there\u2019s no way out.&#8217;<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><\/p>\n<div class=\"article-content-wrapper\">\n<p>A word of caution for chastity kink fans: Unless you\u2019re willing to have your cock and balls \u201cpermanently\u201d locked up by a total stranger, you may want to avoid the <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/www.qiui.store\/product-page\/cellmate-chastity-cage\">Qiui Cellmate Chastity Cage<\/a>. The sex tech device\u2019s security flaws reportedly granted hackers the ability to nonconsensually lock up users\u2019 genitals remotely.<\/p>\n<p>The Cellmate is an Internet-of-Things <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/www.vice.com\/en\/article\/8qgp53\/why-these-guys-put-their-dicks-in-cages\">chastity cage<\/a>, a miniature device that locks users\u2019 penises in a form-fitting jail. The device is used as part of a <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/www.kinkweekly.com\/article-baadmaster\/three-levels-chastity\/\">chastity kink<\/a>, which is a Domination-and-submission fetish for preventing a sexual partner from experiencing sexual pleasure.<\/p>\n<p>In theory, the Cellmate lets the dominant play partner lock and unlock their submissive cage-wearer via Qiui\u2019s mobile <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/download-scripts-themes-apps\/\" data-internallinksmanager029f6b8e52c=\"9\" title=\"Download Scripts &amp; Themes &amp; Apps\" target=\"_blank\" rel=\"noopener\">app<\/a>. But cybersecurity organization <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/www.pentestpartners.com\/security-blog\/smart-male-chastity-lock-cock-up\/?=october-5-2020\">Pen Test Partners<\/a> published a blog report on Tuesday revealing the smart chastity device\u2019s app has flaws. A <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/watch-movies-tv-seriess\/\" data-internallinksmanager029f6b8e52c=\"8\" title=\"Watch Movies &amp; TV Series\" target=\"_blank\" rel=\"noopener\">series<\/a> of weak authentication features granted unauthorized third-party users access to any given user\u2019s name, phone number, birthday, linked devices, unencrypted password, and GPS location. Hackers could then use this information to remotely lock any user into chastity, forcing them to wear the Qiui Cellmate for as long as the hacker desired.<\/p>\n<p>\u201cIt wouldn\u2019t take an attacker more than a couple of days to exfiltrate the entire user database and use it for blackmail or phishing,\u201d Pen Test Partners warned in its report. \u201cThere is no emergency override function either, so if you\u2019re locked in there\u2019s no way out.\u201d<\/p>\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><noscript><img decoding=\"async\" src=\"https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-911x512.png\" alt=\"Qiui Chastity Cage Sex Tech\" class=\"wp-image-886010\" srcset=\"https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-911x512.png 911w, https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-711x400.png 711w, https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-768x432.png 768w, https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-78x44.png 78w, https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-297x167.png 297w, https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-623x350.png 623w, https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech.png 980w\" sizes=\"(max-width: 911px) 100vw, 911px\"><\/noscript><img decoding=\"async\" src=\"https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-911x512.png\" alt=\"Qiui Chastity Cage Sex Tech\" class=\"lazyload wp-image-886010\" srcset=\"https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-911x512.png 911w, https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-711x400.png 711w, https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-768x432.png 768w, https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-78x44.png 78w, https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-297x167.png 297w, https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech-623x350.png 623w, https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Cage-Sex-Tech.png 980w\" data-sizes=\"(max-width: 911px) 100vw, 911px\"><figcaption class=\"dd-article-img-credit\"><span class=\"dd-article-leadart-image-credit\"><br \/>\n    <span class=\"dd-article-leadart-image-credit-segment\"><br \/>\n                    <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/www.qiui.store\/product-page\/cellmate-chastity-cage\">Qiui<\/a><br \/>\n                <\/span><\/span><\/figcaption><\/figure>\n<\/div>\n<p>Unfortunately, Pen Test Partners found the Cellmate wasn\u2019t easy to unlock by hand, forcing users to slice into the device or pry open its circuit board and direct voltage to the lock\u2019s motor. In most cases, a locked-out user would have to run to the emergency room to safely remove the device.<\/p>\n<p>\u201cA number of countries have oppressive laws that may expose users of these types of devices to unwarranted interest from law enforcement and bigots.\u201d Pen Test Partners said in its post. \u201cFurther, users are likely to want to keep their private lives private. They should expect privacy by default and security by design.\u201d<\/p>\n<p>Pen Test Partners contacted Qiui with its findings in May, and while the company took steps to fix the app\u2019s security flaws, not all of the issues were patched. After Qiui became uncooperative with concerned researchers, Pen Test Partners published its findings. It remains unclear if any hackers successfully locked any users into chastity, although some users reported Qiui\u2019s app \u201chad bugs that would cause the device to stay locked,\u201d essentially forcing the wearer into chastity, <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/techcrunch.com\/2020\/10\/06\/qiui-smart-chastity-sex-toy-security-flaw\/\">TechCrunch<\/a> reported.<\/p>\n<p>\u201cWe had particular problems during the disclosure process, as we would usually ask the vendor to take down a leaky API whilst re<a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">media<\/a>tion was being implemented,\u201d Pen Test Partners wrote in its post. \u201cHowever, anyone currently using the device when the API was taken offline would also be permanently locked in!\u201d<\/p>\n<p>Qiui\u2019s security flaws are deeply troubling to chastity kinksters and sex tech experts. <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/twitter.com\/buttplugio\/status\/1313516512347529216\">Kyle \u201cqDot\u201d Machulis<\/a>, the programmer behind the open-source sex toy programming library <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/buttplug.io\/\">Buttplug<\/a>, criticized Qiui for its irresponsible sex tech designs. Machulis said Qiui\u2019s self-described \u201cbasement team\u201d should not have built a BDSM-based device if it could not \u201cbuild security up front.\u201d<\/p>\n<p>\u201cEdge play is hard enough person to person,\u201d Machulis tweeted. \u201cAdding tech possibly adds the developments of 1000s of developers and engineers who most likely weren\u2019t thinking of your interests.\u201d<\/p>\n<p><a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/twitter.com\/RileyTheRedFox\">Riley Crawford<\/a>, a chastity kinkster alarmed by the Qiui Cellmate\u2019s flaws, similarly stressed that the kink requires strong safety measures and communication skills between its practitioners and therefore cannot be treated lightly by sex tech designers.<\/p>\n<p>\u201cOne of the main ethical and consent concerns you have to know when you\u2019re getting into [chastity] (with another partner, at least) is that focus on safety and comfort of the person being caged is paramount, adherence to standard kink safety practices is a definite must, safewords become extra necessary in play where the caged individual is being degraded (as a lot of chastity play tends to lean into), as well as making sure both people in said scene trust each other enough to both hold their play partner\u2019s keys and also be caged,\u201d Crawford told the Daily Dot. \u201cThe fact that the company\u2019s response was shockingly poor sort of proves the unreliability of the device \u2026 They\u2019ve actively allowed others to intrude onto scenes or lifestyle choices by two consenting parties, as well as the fact there was no other safety mechanism to get it off, is absurd.\u201d<\/p>\n<p>Similar privacy issues have plagued sex tech in the past. Popular sex toy creator We-Vibe was subject to a data collection lawsuit in 2016, which ultimately led the company to pay $4 million for unsolicitedly collecting information on its toys\u2019 users. <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/blog.mozilla.org\/blog\/2019\/02\/06\/does-your-sex-toy-use-encryption\/\">The Mozilla Foundation<\/a>, the developers behind the Mozilla Firefox web browser, has regularly sounded the alarm on major privacy violations among sex tech designers, including <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/foundation.mozilla.org\/en\/privacynotincluded\/products\/je-joue-nuo\/\">Je Joue<\/a> and <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/foundation.mozilla.org\/en\/privacynotincluded\/products\/we-vibe-sync\/\">We-Vibe<\/a>. The Qiui Cellmate is just the latest in a much lengthier history plaguing a growing sex industry.<\/p>\n<p>\u201cIt\u2019s a pretty big blunder on the producer\u2019s part, and if someone bought one of the cages or even just read any of the articles, it\u2019d probably be enough to give them a somewhat negative view of the kink,\u201d Crawford said. \u201cI think it\u2019ll affect how people view [chastity] from an outside view too, especially in the age where there\u2019s huge leaps and bounds in tech specifically related to kink and sex.\u201d<\/p>\n<p>The Daily Dot reached out to Qiui and the Pen Test Partners for comment.<\/p>\n<hr class=\"wp-block-separator\">\n<h3><span class=\"ez-toc-section\" id=\"More_NSFW_on_the_Daily_Dot\"><\/span>More NSFW on the Daily Dot<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<figure class=\"wp-block-table is-style-stripes\">\n<table>\n<tbody>\n<tr>\n<td>17 feminist porn sites for erotic empowerment<\/td>\n<\/tr>\n<tr>\n<td>The best sites for ethical, fair trade porn<\/td>\n<\/tr>\n<tr>\n<td>Sex in quarantine? Expert advises BDSM during coronavirus pandemic<\/td>\n<\/tr>\n<tr>\n<td>Distressed? Meet Dominatrix Simulator\u2019s \u2018therapeutic\u2019 dominatrix session<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure><\/div>\n<p><\/p>\n<div class=\"dd-article-leadart-image-credit\">\n<p>                                                                                                <span class=\"dd-article-leadart-image-credit-segment\"><br \/>\n                                        <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/www.qiui.store\/product-page\/cellmate-chastity-cage\">Qiui<\/a><br \/>\n                                    <\/span><\/p>\n<p>                                                                                            <span class=\"dd-article-leadart-image-credit-segment\">(Fair Use)<\/span><br \/>\n                                                                <span class=\"dd-article-leadart-image-credit-segment\"><br \/>\n                                    <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/dailydot.com\/author\/ana-valens\">Ana Valens<\/a><br \/>\n                                <\/span><\/p><\/div>\n<p><span class=\"dd-article-leadart-image-credit\"><br \/>\n    <span class=\"dd-article-leadart-image-credit-segment\"><br \/>\n                    <a rel=\"nofollow noopener noreferrer\" target=\"_blank\" href=\"https:\/\/www.qiui.store\/product-page\/cellmate-chastity-cage\">Qiui<\/a><br \/>\n                <\/span><\/span><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<blockquote>\n<p style=\"text-align: center;\">For forums sites go to <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/forum.buradabiliyorum.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Forum.BuradaBiliyorum.Com<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more Like this articles, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/social-media\/\" target=\"_blank\" rel=\"noopener noreferrer\">Social Media category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/www.dailydot.com\/irl\/chastity-device-hackers-sex-tech\/\" target=\"_blank\" rel=\"noopener noreferrer\">Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8220;#Smart chastity device\u2019s security flaw let hackers \u2018permanently\u2019 seal users up, researchers warn &#8221; &#8216;If you\u2019re locked in there\u2019s no way out.&#8217; A word of caution for chastity kink fans: Unless you\u2019re willing to have your cock and balls \u201cpermanently\u201d locked up by a total stranger, you may want to avoid the Qiui Cellmate Chastity&#8230;<\/p>\n","protected":false},"author":1,"featured_media":83644,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.dailydot.com\/wp-content\/uploads\/2020\/10\/Qiui-Chastity-Device-Sex-Tech-Toy.jpg","fifu_image_alt":"","footnotes":""},"categories":[17],"tags":[],"class_list":["post-83643","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-social-mediaa"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/83643","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=83643"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/83643\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/83644"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=83643"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=83643"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=83643"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}