Other vulnerabilities that do not directly impact users will be released soon but we’d like to give the developers of SinVR time to fix them should they wish. We tried emailing the addresses we could find, sending private messages to their (active) reddit account and reaching out via Twitter.ĭue to the nature of the issues found, we made the tough decision of bringing one of the issues to the attention of the public in order to warn users their data was not being protected adequately. Initially we planned on releasing this post after the vulnerabilities were fixed, however after several attempts we were not able to contact the company behind SinVR. Jumping on the bandwagon of hacking sex toys and teledildonics, Digital Interruption thought it was worth taking a look at the VR angle).ĭuring this research, we found a high risk vulnerability in the SinVR application that leaked customer information and several deviations from security best practice. Who knew that decompiling an application would be more interesting than virtual women?
Honestly, it was a little underwhelming so instead my night was spent pulling it apart.
When looking for other interesting VR applications, one kept coming up as recommended on sites such as reddit SinVR. Lack of Authentication Leaks Customer Details in SinVR - An Adult VR Applicationĭespite initial thoughts, pulling robots apart and killing zombies does eventually get boring so I decided to see what else could be done in Virtual Reality.
0 kommentar(er)
