"All [Rabbit] R1 responses ever given can be downloaded," according to an R1 research group called Rabbitude.
Rabbit and its R1 AI device has already been dunked on for being nothing more than an Android app wrapped up in a hardware gadget, but something much more alarming is afoot.
SEE ALSO:I tested Rabbit R1 vs. Meta AI: The winning AI assistant will surprise youThe report (via The Verge) said Rabbitude gained access to the codebase and discovered API keys were hardwired into its code. That means anyone with these keys could "read every response every r1 has ever given, including ones containing personal information, brick all r1s, alter the responses of all r1s [and] replace every r1’s voice." The investigation discovered that these API keys are what provided access to ElevenLabs and Azure for text-to-speech generation, Yelp for reviews, and Google Maps for location data.
What's worse, Rabbitude said it identified the security flaw on May 16 and that Rabbit was aware of the issue. But "the API keys continue to be valid as of writing," on June 25. Continued access to the API keys means bad actors could potentially access sensitive data, crash the entire rabbitOS system, and add custom text.
The following day (June 26) Rabbit issued a statement on its Discord server saying that the four API keys Rabbitude identified have been revoked. "As of right now, we are not aware of any customer data being leaked or any compromise to our systems," said the company.
But the plot thickens. Rabbitude also found a fifth API key that was hardwired in the code, but not publicly disclosed in its investigation. This one is called sendgrid, which provides access to all emails to the r1.rabbit.tech subdomain. At the time Rabbitude published its follow-up report, the sendgrid API key was still active. Access to this API key meant Rabbitude could access additional user information within the R1's spreadsheet functions and even send emails from rabbit.tech email addresses.
If you were already skeptical of the R1's half-baked capabilities that Mashable Tech Editor Kimberly Gedeon blamed on "rushed innovation, disillusionment, and impetuousness" in her review, this might be your sign that Rabbit is at best, not worth the money, and at worst, incapable of keeping your data private.
TopicsArtificial IntelligencePrivacy
(责任编辑：知識)
Satisfy your Olympics withdrawals with Nike's latest app
This Indian company is promising a $7 Android smartphoneGreat Barrier Reef brought to politicians' doorstep in artful protestThis isn't a spaceship, it's a MaseratiCat gets stuck in the most awkward position everSingapore gets world's first driverless taxis
SINGAPORE -- The world's first self-driving taxis started picking up passengers in Singapore on Thur
...[详细]Great Barrier Reef brought to politicians' doorstep in artful protest
If you can't beat 'em, erect a coral reef on their doorstep. That's what Greenpeace activists in Aus
...[详细]Variety's email hacked, fake messages sent to readers
The hacking group responsible for breaking into the social media accounts of a number of high-profil
...[详细]Singaporean jewellery line doubles as mosquito repellent
In Chinese culture, the green gemstone jade is commonly used to ward off evil spirits. With a "Yu Ah
...[详细]Olympic security asks female Iranian fan to drop protest sign
Olympic security personnel questioned a female Iranian volleyball fan Saturday when she showed up fo
...[详细]LinkedIn launches LinkedIn Lite, opens Placements service for students in India
Tech companies are increasingly realizing that if they want to make their services more accessible t
...[详细]Why does Apple hate wires so much? Here's one wild guess.
Apple has done it again: The company launched a key product sans a feature literally no one wanted t
...[详细]Giant pandas are no longer 'endangered,' but eastern gorillas face extinction
Giant pandas, break out your best bamboo. You're no longer considered an endangered species.。The Int
...[详细]Nate Parker is finally thinking about the woman who accused him of rape
Nate Parker is getting a crash course in male privilege after, in his own words, not thinking about
...[详细]Trump praises Mexicans in surreal speech that sounds nothing like what he's said before
Donald Trump has now gone from demonizing Mexico to commending the country in little more than a yea
...[详细]Balloon fanatic Tim Kaine is also, of course, very good at harmonica
Young student is 'embarrased and harrased' by school for wearing leggings