Exercise 2: Privacy in IoT

The mass deployment and adoption of IoT toys raise real (and not hypothetical) security and privacy concerns. These concerns arise from the design of these devices, which often include microphones and/or cameras, and the way they operate, such as their ability to connect to Bluetooth and/or Wi-Fi, GPS capabilities, collection of vast quantities of data about users and owners, storage of collected data in the cloud, and sharing of collected information with manufacturer and third parties.

Please review the following:

Maras, M.-H. 4 ways "Internet of things" toys endanger children. The Conversation (10 May 2018).

Connected toys pose child safety risk - Which? Investigates (length: 1:00).

Hacked smart toy used to order item off Amazon - Which? Investigates (length: 0:53).

Hacking a Furby - Which? Investigates (length: 0:58)

'Smart' Toys Like 'My Friend Cayla' Raise Questions About Child Security and Safety, Today (length: 4:17)

Could Smart Toys Be Spying On Your Kids? NBC Nightly News (length: 2:02)

Discuss the following:

1. What are the security risks associated with the use of IoT toys?

2. What are the privacy implications of using IoT Toys?

3. What privacy by design measures could be implemented to secure IoT toys and protect data collected, stored, analyzed and shared by them?