Woman Sues Sex Toy App For Secretly Capturing Sensitive Information (ctvnews.ca)
A woman in Chicago filed a class action lawsuit against the makers of a smartphone-enabled vibrator, alleging their devices "secretly collect and transmit 'highly sensitive' information." CTV News reports:
The lawsuit, which was filed earlier this month in an Illinois court, explains that to fully operate the device, users download the We-Connect app on a smartphone, allowing them and their partners remote control over the Bluetooth-equipped vibrator's settings... The suit alleges that unbeknownst to its customers, Standard Innovation designed the We-Connect app to collect and record intimate and sensitive data on use of the vibrator, including the date and time of each use as well as vibration settings...
It also alleges the usage data and the user's personal email address was transmitted to the company's servers in Canada. The statement of claim alleges the company's conduct demonstrates "a wholesale disregard" for consumer privacy rights and violated a number of state and federal laws.
Slashdot reader BarbaraHudson argues that "It kind of has to share that information if it's going to be remotely controlled by someone else." But the woman's lawsuit claims she wouldn't have bought the device if she'd known that while using it, the manufacturer "would monitor, collect and transmit her usage information."
It also alleges the usage data and the user's personal email address was transmitted to the company's servers in Canada. The statement of claim alleges the company's conduct demonstrates "a wholesale disregard" for consumer privacy rights and violated a number of state and federal laws.
Slashdot reader BarbaraHudson argues that "It kind of has to share that information if it's going to be remotely controlled by someone else." But the woman's lawsuit claims she wouldn't have bought the device if she'd known that while using it, the manufacturer "would monitor, collect and transmit her usage information."
In the most shockingly personal way possible.
Then your sex life is a tragic mess.
You downloaded an app and linked it to your network connected smartphone. What the fuck did you think was going to happen?
Unless privacy is an advertized feature (and probably even then) you will be sold to anyone willing to pay. You don't even need to real the EULA to know that.
This is their web site legal.. which says they collect information.
I'm betting their apps have a similar eula but I couldn't locate them (they may only be available while installing the app). I checked the user manuals and the eula is not in the manuals.
http://we-vibe.com/legal
Standard Innovation® Corporation intends to build the user's trust and confidence in Internet and App use by promoting the use of fair information practices. Our privacy statement covers we-vibe.com, standardinnovation.com and the We-Vibe® mobile app.
If you have questions or concerns regarding this statement, you should first contact us at our mailing address found on the Contact Us page or by emailing Customer Service at: customerservice@we-vibe.com.
Privacy is Paramount to Us
Standard Innovation Corporation understands the need for and is committed to all reasonable protection of our customersâ(TM) privacy. We will not share information about you with any third party other than the shipper you choose to deliver your goods ordered on our ecommerce site.
Information Collection
Distributor Orders and RMA's
If you contact us, we may collect certain personally identifiable information from you. On our web-form you must provide contact information such as: name, shipping address, telephone number, email. This information is considered private and will not be divulged to third parties except the shipper if relevant.
Links to Other Sites
Standard Innovation Corporation is not responsible for the content or security of other sites that we link to.
Sharing
We do not share, rent, or sell your personally identifiable information with any third parties for marketing purposes.
Customer Service
If you register on our Website to have access to the "Media and Trade" section, we will send you a welcoming email to provide your password. If you register in the We-Vibe App and choose to receive news and offers we will send you a welcome email. In both cases you can unsubscribe at any time by clicking on the unsubscribe link provided in the footer of each email message.
Agents
We use an outside shipping company to fulfill orders. To the best of our knowledge, these companies do not retain, share, or use personally identifiable information for any other purposes.
Legal Disclaimer
We reserve the right to disclose your personally identifiable information if required to by law.
Log Files
Like most websites and apps, we gather "cookies" and certain other information automatically and store it in log files to maximize your website and app experience. We use this information in the aggregate and it will not be traced to an individual.
Secure Transactions on our Website
We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. However, no Internet traffic is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
Complete Shipping Discretion
If we ship you any product(s), the package will be shipped as from Standard Innovation Corporation in a plain package with no mention of the We-Vibe or product inside. This assures complete discretion.
Changes in this Privacy Statement
If we decide to change our privacy statement, we will post changes here in the Legal section of the Website so that you are aware of what information has changed. We reserve the right to modify our privacy statement at any time, so please check back here.
Contacting Us
If you have any questions about this Privacy Policy, please contact us.
--
Any any case, this case will shake up the legal situation and set things vibrating!
She was like chocolate when she drank... semi-sweet at first and then increasingly bitter.
I've looked into this app as a surprise gift for a female.... friend... (Yeah, that's what we'll call it... "Its complicated" doesn't even start to explain it) ... (And lets be honest... the remote control is as much a gift for me... ) But... you have to make accounts on their site/app on both of your phones (Which can be flaky from what I hear) and then she has to open the app on her phone and then I have to open the app on my phone and they have to sync THEN I can control it over TCP/IP.
Of course having to SIGN UP ON THEIR SITE requires ... ohh I don't know... giving personal information... and her lack of understanding how TCP/IP works (the need of server for both phones to connect to) isn't the manufacturer's fault... it is pretty clear about what it is doing,
I DID however think about buying one of these, using wireshark/etc. to dump the traffic, and see if I could make my own command and control server... that way I could make an Android App that runs as a background service on her phone, a private server of my own, and an app for my phone that allowed the screen to be turned off, and used my volume rocker buttons to control the intensity...
I'd pay an extra 100$ for them to give me the private server software/app... but 'ehh'... this still doesn't seem "class action" worthy to me... because I'm in the VERY SMALL % of people who could let alone 'would' host their own server with a static IP/etc.
EDIT: The Captcha for this is...and I swear to the Gods... [perverts]
Developers of applications that store or transmit data of this kind need to be held accountable for their practices, need to use strong encryption and should generally be treated like producers of medical devices that store sensitive information. I'd feel sorry for anyone to whom this is not obvious.
Let's see this so-called toy in or about here vagina.
They saw her coming!
> Standard Innovation designed the We-Connect app to collect and record intimate and sensitive data on use of the vibrator, including the date and time of each use as well as vibration settings...
>
> Slashdot reader BarbaraHudson argues that "It kind of has to share that information if it's going to be remotely controlled by someone else."
Does it ?
First of all, collecting and recording the information does not seem necessary for the app to work.
Then, to enable an external user control over the device, you just need to connect the two smartphones together. You do not necessarilly need the data to transit to third parties. You probably can route all the information over tor and never have a clear message given to the company or anyone else than the two involved party.
Or am I missing something?
(BTW, this device give a new meaning to Avenue Q's "The internet is for porn")
In the event of a traffic accident, they will demand the records from the server to see if the driver was having an orgasm at the time.
Have gnu, will travel.
is such a dick move.
tele-dil-donics tele...
She's doin' it at TEN! Ten guys, try to beat that.
How about buying a vibrator with a simple on/off switch and variable
setting (vibration intensity) knob? No microchips, no Bluetooth or need
to sync it, just good old fashioned simple electrical components.
Really, why the FUCK should someone need to sync a vibrator to
a smartphone just to use it?
Editors. I can ignore bad editing as long as you report on current news. I noticed more and more lately that Slashdot is reporting on news from general news outlets and not "tech news". This news was reported over a month ago. This used to be a good site for news, despite it's warts. Now it's basically a tech version of the Drudge Report.
We've talked about this before. On its face, collecting information about settings changes, time of use, and duration of use are not inherently sensitive.
However, the issue (for me) is that it was later learned that these reports tie back to a username. Now, obviously a username is arguably non-PII by itself, but there are enough people putting in real information about themselves that it becomes a problem.
Is it worth a lawsuit? Or more accurately, is this an instance where popular opinion of a manufacturer's "should have known better" will override their own stated ToS/Privacy policies?
[DISCLAIMER: This post is a work of satire and should not be misconstrued as a holy text upon which to base a religion.]
What happened to just using a simple radio remote control, like an RC car?
Oops, I forgot, that would not be Hi-Tech, and computer related*, therefore it won't be COOL*, and as the suits know, nobody buys anything that isn't COOL* or TRENDY*
*Funny, when I was growing up in the 80s and I started programming in 1986, people called you a NERD, DORK, and all sorts ofother of bad names
for being into computers. Where was the COOL view of us back then?
No pair of communications devices "has to share that information".
Data passed between my wireless mouse and my PC hopefully isn't sent to Logitech or Dell.
Data passed between my phone and my bluetooth speaker hopefully isn't sent to Bose or Verizon.
This data is sensitive enough that it should not be shared.
Well, then maybe if it upsets you so much you should have reported it a month ago instead of bitching and moaning like you've got a dildo up your arse :-)
"Transparent" is a shit show that trades on every stereotype going. A man in drag is NOT a transsexual.
Your mouse and bluetooth speakers aren't traveling in a different city.
Any nerd should know that if it's not under BSD, GPL, or another free license, and unless you can see the source code for everything, it's probably phoning home constantly. This is what Stallman and EFF warned us about with Treacherous Computing, and anyone who uses a so-called "smart" anything is a willing enabler. Dump these parasites now.
"Fire in the hole!!!"
I've calculated my velocity with such exquisite precision that I have no idea where I am.
See Milo Yiannopoulos for more details.
Atfer all, they seem to want to control every aspect of out lives.
What's a betting that she's now getting adverts for rival vibrators (te-he)
Filing suit over something so private must mean that she needs her 15nSecs of fame.
I predict that this won't end well.
"It kind of has to share that information if it's going to be remotely controlled by someone else."
There is a difference between transmit and share. Transmit means you do not save that info you just send it to the smartphone or whatever. Share means you save that info with the intention of using it for your OWN purpose. That's the difference. If you are unable to tell, then really it is no wonder privacy protection is so poor among consumers in the US.
A woman in Chicago filed a class action lawsuit against the makers of a smartphone-enabled vibrator, alleging their devices "secretly collect and transmit 'highly sensitive' information."
Typical rape culture.
"Sensitive"? Seriously? The jokes just write themselves.
How do you think two arbitrary mobile machines connect to each other on the internet (not just locally)? To connect two machines via the internet, you need to have known IP addresses to talk to, and these phones and devices can't act as internet servers, for a variety of technical reasons, listening for these connections. Anytime you communicate with anyone else in an apparent "peer to peer" fashion using smartphone apps, some central authority is needed to at least make the initial connection.
The problem is that these companies often can't resist collecting all sorts of personal information, and don't know how to properly secure the data and communications channel (security is hard), and so it ultimately ends up as a privacy nightmare. IoT is a security disaster, but the public still hasn't caught on. There are going to be many cases such as this one over the next few years.
Irony: Agile development has too much intertia to be abandoned now.
It's supposed to be able to be operated by partners separated by great distances. Meaning the transmitting app has to send that it wants to active the device to a server, the receiving app has to contact the server to find the instructions of when to turn on and a measure of intensity, and then has to communicate to the device. So, everything that she complains about in the lawsuit is exactly what is needed for standard operation.
To have both "robot snatches rifle" and "robot rifles snatch" on the front page at the same time...
"BarbaraHudson" is a troll who uses multiple sock-puppet accounts to mod up her mock-legal-advice; and has been doing so for YEARS now. Good going "EditorDavid". Way to show that you know your way around the site you work for.
A remote control doesn't need fucking logs, and it certainly doesn't need to phone home with them.
Women used cucumbers, and they didn't have to worry about sending private information to anyone...besides the neighbors, if they forgot to close the windows first.
It is pitch black. You are likely to be eaten by a grue.
What's the point, some cyber-sex thing? It's interesting there's no iPussy device for out-of-town girlfriends to control.
So what's the rationale for it being recorded by a third party? Who are they going to sell it to? Will women get insurance discounts if they're not risking pregnancy, sexual diseases, alcohol poisoning in bars;45 instead, getting a cardio workout? Or will insurance costs increase because she had 'sex' more than 2.5 times per week?
"It has a remote. How lazy can you get?", Carrie, Sex and the city
Perhaps the issue is that (1) the only thing first required is said "initial connect" to trade IP addresses and then said devices don't need that central authority anymore, (2) one can (and should be always able to) provide a static IP for one of the devices and it can function as a server*, and (3) even if NONE of this were true the use of public key encryption over an otherwise public messaging system would entirely bypass the involvement of Standard Innovation Corp and preclude their monitoring or really any meta data collection other than general "text messages were sent" or whatever.
Bingo.
If I have a device that only sends messages when I'm changing the vibrator settings and they always go through my central server, then I might not know what setting you're using but I can log when vibrator settings were changed. This is one of those reasons why the idea that meta data is somehow not protected is absurd.
* Despite your claims to the contrary, there's no reason why one device couldn't be "master" and another be "slave".
Multicast is more appropriate for this type of data.
Time to dust off RFC1112.
<blink>down the rabbit hole</blink>
More to the point, she must have been using it a hell of a lot to be worried about that data getting out. She must be a total freak in the bed.
White countries for white people!
You'd think with multiple people involved in developing something like this that at least one person would spot the obvious impending shitstorm if it was found out they were recording this data.
Reactions like this will be history when dildos embrace IoT. Get ready for massive deep inspection of packets!
Sure, privacy...
Is this toy any good? I mean like in "Xmas present for the SO".
Appologies to RMS.
I hadn't the slightest objection to his spending his time planning massacres for the bourgeoisie... (P.G. Wodehouse)
Bahahahahahahahah!
Whether you are a man or a woman Adidas offers trainers for both. These trainers match perfectly with casual wear and are popular all over the world. Adidas uses high quality materials and best technologies to make these Retro Adidas trainers. People get attracted to these trainers because they are not only comfortable but also stylish and trendy. You can not only use them when playing sports and as casual wear but as they go well with jeans and shorts; you are simply re-living a once brand new style. Adidas retro trainers will now be considered as heritage clothing and therefore perfectly suited to compliment some of the retro fashions that you see today. You can easily buy Adidas trainers online from the convenience of your home or office. Many online stores sell Originals trainers but you have to be careful to ensure you are paying for a genuine pair of authentic Adidas trainers. Retro Adidas trainers come with the Adidas logo at the back and on the ankle and with stripes in many colours. When you purchase trainers from Adidas, you must first check to see if the logo is present and looks genuine. Adidas is a brand that keeps improvising and including different designs in their footwear collection. If you are looking for some Adidas retro trainers air max Pas Cher . then why not check out the amazing selection here at Sole Searchers.
Nerds would have a VPN connecting the devices, or some other means of getting around, say, NAT. The other 99% don't.
If your product isn't for sale exclusively to nerds, and you don't want to have to mark it up an extra thousand dollars to cover the inevitable support costs of walking 99% of customers through setting up their own VPNs, then you're going to proxy everything through your own server.
Nerds know this, which is why many will roll their eyes at the "unbeknownst to its customers" part of the claim. We know, without the slightest hesitation or doubt, that if the product is for mass market, then it definitely does share the data with a third party. It's impossible for a nerd to buy the product and not know they're telling other people when it's used. We know this even before we study it and verify that it's true.
It comes down to this: if it didn't share, then you wouldn't have bought it.
But we know it for the same reason that we know everyone else doesn't know it. It does the "bad" thing in order to make it mass-marketable because laymen don't know how to do things themselves. Ergo, laymen might not know that it shares (though many will), even if we know that it has to.
So of course we're confused and ambivalent. It all depends on how you're analyzing it and what PoV you're taking. Do you give highest weight to truth and simplicity, or do you weight what you believe is the mainstream misperception of the truth? And as nasty as I made that second choice sound, it has a lot going for it and it's what you predict a court to rule. You have to share this planet with those people, but you can't always guess what they're going to think. Your own beliefs about what the mainstream believes, are part of the analysis!
I want to design an IoT Toilet that uploads all the information of a download and shares it on social media.
Today Oswald took a 2lb dump in the iToilet. See attached photos.
- This status update has received 5 likes.
"That's the way to do it" - Punch
Seems that a response to social media may apply: Put the toy down and get out and MEET PEOPLE FACE TO FACE!
You may find the real thing more satisfying!
Self-importance and self-indulgence is the root of ALL evil.
Even her phone couldn't satisfy her, so she is sewing.
The day Microsoft creates a product that doesn't suck, it will be known as the Microsoft Vaccuum Cleaner!
...insider dealing?