CogniToys Dino
Dinosaurs may have gone extinct millions of years ago, but they will always live on in the hearts of kids. This little Wi-Fi connected dino toy claims it is designed to listen to your kids questions, adapt to their age with its responses, and grow with your child over time. One of the best things about this little dino is once you've connected it to Wi-Fi via the app, the toy no longer requires the phone for playtime. Interactive play without a screen seems brilliant.
What could happen if something goes wrong?
There was a warning from a 2017 security audit that this CogniToys Dino transmitted information without using encryption, leaving your child's information vulnerable. When we reached out to the company in 2018 this is what they said, "Dino uses encryption for all audio traffic and in fact, each one uses unique keys, which are also cycled per session per device."
Can it snoop on me?
Camera
Device: No
App: No
Microphone
Device: Yes
App: No
Tracks location
Device: No
App: Yes
What can be used to sign up?
Can’t Determine
Phone
Can’t Determine
Third-party account
Can’t Determine
What data does the company collect?
Personal
Body related
Social
How does the company use this data?
How can you control your data?
What is the company’s known track record of protecting users’ data?
Can this product be used offline?
User-friendly privacy information?
Links to privacy information
Does this product meet our Minimum Security Standards?
Encryption
We're still unclear if this device uses encryption. From the company: “Dino uses encryption for all audio traffic and in fact, each one uses unique keys, which are also cycled per session per device.” But a 2017 security audit says it doesn't use encryption.
Strong password
Security updates
Manages vulnerabilities
The company has no bug bounty program, but they do work with penetration testers.
Privacy policy
Does the product use AI?
Is this AI untrustworthy?
What kind of decisions does the AI make about you or for you?
Is the company transparent about how the AI works?
Does the user have control over the AI features?
News
Assessment of the Privacy and Security of Smart Toys Marketed to Children
We assessed the privacy and security of six different toys and devices marketed to children. We were able to compromise all of these devices and found critical vulnerabilities that could impact the security or safety of a child in five of these devices
Comments
Got a comment? Let us hear it.