Jailbreaking RabbitOS: Uncovering Secret Logs, and GPL Violations
Jailbreaking RabbitOS: Uncovering Secret Logs, and GPL Violations
cross-posted from: https://infosec.pub/post/14981035
But as I and others looked closer, and thought about it more deeply, things became concerning.
These logs include:
Your precise GPS locations (which are also sent to their servers).
Your WiFi network name.
The IDs of nearby cell towers (even with no SIM card inserted, also sent to their servers).
Your internet-facing IP address.
The user token used by the device to authenticate with Rabbit's back-end API.
Base64-encoded MP3s of everything the Rabbit has ever spoken to you (and the text transcript thereof).
2 comments
AI product violates your privacy. What a shocker... I would have been surprised if it didn't.
Actually I'm surprised when any product respects privacy these days, not just AI products. But AI in particular owes its very existence to corporate surveillance and runs on privacy violation. It just comes with the beast.