Eiliko

Eiliko is a cute robot charm that can be hung on a backpack, featuring a built-in AI conversation function.

Eiliko hiring an independent security company is only the first step; how it subsequently fixes the vulnerabilities and rebuilds user trust is the key.

The official statement did not disclose the name of the specific security company or the investigation details.

Eiliko once promised users that "your secrets are safe with me," but the facts are otherwise.

According to The Verge, Eiliko has serious security vulnerabilities, and hackers can easily read the complete conversation records between users and the toy.

The negative pattern in the Eiliko case is upload by default, share by default, cross-border by default, with users needing to actively opt out to obtain basic privacy protection.

Eiliko AI smart toys have systematic privacy flaws at the architectural level: the lack of local processing capability forces sensitive data to be uploaded to the cloud, encryption protocols are insufficiently strong, and cross-border data flows lack explicit user consent.

A single privacy incident is enough to destroy a brand's entire reputation among its core user base.

Eiliko most likely uses only transport-layer encryption (such as HTTPS), or even no encryption at all, and the data is stored in plaintext on the server.

Eiliko's communications are unencrypted or insufficiently encrypted, and there are serious access control flaws on the server side.

Eiliko is a children's robot toy, and its communication data is stored on servers located in China.

From the Eiliko case, the problem is not the technology itself, but transparency.

Consumer AI toys like Eiliko generally adopt a 'thin client + cloud large model' architecture, where the device itself is only responsible for picking up sound, playback and expression driving, while speech recognition (ASR), natural language understanding (NLU) and speech synthesis (TTS) are all done on remote servers.

Eiliko stores data on servers in China, and the data's 'storage location' determines the applicable jurisdiction, law enforcement access authority, and the path of accountability after a data breach.

Eiliko is an AI robot toy shaped like a marshmallow that responds to emotions through cartoon expressions, focused on emotional companionship and interaction, and after connecting to Wi-Fi it can transmit users' conversation data to servers in China.

Eiliko's AI companion feature can store almost everything the user tells it.

Eiliko's manufacturer said it has hired an "independent security company" to investigate the security vulnerabilities.

Eiliko's security problems may not be limited to the leak of conversation records; they may also involve risks in other areas.