Engineer proves that Kohler's smart toilet cameras aren't very private
Briefly

Engineer proves that Kohler's smart toilet cameras aren't very private
"In October, Kohler announced its first "health" product, the Dekoda. Kohler's announcement described the $599 device (it also requires a subscription that starts at $7 per month) as a toilet bowl attachment that uses "optical sensors and validated machine-learning algorithms" to deliver "valuable insights into your health and wellness." The announcement added: Data flows to the personalized Kohler Health app, giving users continuous, private awareness of key health and wellness indicators-right on their phone."
"The average person is most likely to be familiar with E2EE through messaging apps, like Signal. Messages sent via apps with E2EE are encrypted throughout transmission. Only the message's sender and recipient can view the decrypted messages, which is intended to prevent third parties, including the app developer, from reading them. But how does E2EE apply to a docked camera inside a toilet? Software engineer and former Federal Trade Commission technology advisor Simon Fondrie-Teitler sought answers about this, considering that "Kohler Health doesn't have any user-to-user sharing features," he wrote in a blog post this week:"
Kohler released the Dekoda, a $599 toilet-bowl attachment with a subscription that uses optical sensors and machine-learning algorithms to provide health insights. The device sends data to a Kohler Health app and advertises features such as fingerprint authentication and end-to-end encryption for user privacy. Questions emerged about how E2EE applies when there is no user-to-user sharing and a camera records toilet activity. Kohler communications indicate that encrypted data can be decrypted by Kohler systems, meaning Kohler can access stored and in-transit data, underscoring surveillance and privacy limitations.
Read at Ars Technica
Unable to calculate read time
[
|
]