Toy warning issued as strangers hack walkie talkies and karaoke machines sold by Amazon, Argos and Smyths
PARENTS have been warned to beware children's smart toys, such as walkie talkies and karaoke machines, being hacked and kids being contacted by strangers.
The warning comes from consumer group Which? after it tested smart toys sold by popular retailers such as Amazon, Argos, John Lewis and Smyths.
It discovered a security flaw in a £30 V-Tech KidiGear walkie talkie could allow someone to start a two-way conversation with a child.
Which? also found popular children’s karaoke machines from Singing Machine and Xpassion could allow people within 10 meters to send recorded messages to users because the Bluetooth had no authentication, such as a PIN.
In addition, an artificial intelligence Boxer Robot made by Spin Master, and a coding game by Bloxels were found to have poor security that could leave them open to being hacked because users are not required to create strong passwords.
The consumer group wants new laws to ensure smart products meet security standards before being allowed on sale.
How to make sure your kids' toys are safe
HERE are Which?'s top tips for keeping your kids smart toys safe:
- Search online to see if there have been any security concerns raised about the toy, such as a leak of personal data.
- Submit only the minimal amount of personal data required when setting up a smart toy account for your child while using strong passwords.
- Keep an eye on kids when they’re playing with the smart toy, particularly if it can send or receive messages.
- When a smart toy is not being used, turn it off so that it is not vulnerable to being exploited.
In October 2018, the government set up a new voluntary code to improve the security of smart products, but manufacturers have failed to support it.
Only three - HP Inc., Centrica Hive Ltd, and Green Energy Options - have signed up publicly, which Which? says could leave kids at risk from unsecure toys.
“The next government must ensure manufacturers design connected tech products with security as paramount if it is going to prevent unsecure products ending up in people’s homes,” said Natalie Hitchins of Which?.
Amazon and John Lewis both told The Sun they follow the relevant laws and regulation, while John Lewis added that it's been working with the government to explore how it can "support" the code or practice.
Vtech told The Sun a child would have to accept a pairing request to communicate with another device, and that it's impossible to link to a new device if already paired.
Singing Machine told Which? its karaoke machine has been made following industry best practice, while Spin Master told it online accounts aren't required to be set-up to use the robot.
Bloxel and Xpassion failed to comment.
The Sun has contacted Argos and Smyths, as well as Bloxel, Singing Machine, Spin Master, and Xpassion.
More on toys
Christmas shoppers have also been warned over "cute but deadly" teddy bears, fake LOL surprise toys and unsafe scooters on sale in the UK.
It comes as last year it was revealed that dangerous fake toys are on the rise with thousands flooding into Britain.
Back in 2017, the FBI issued an urgent warning about "spy toys" that could put "privacy and safety of children at risk".