IKKO ActiveBuds: A Deep Dive into a Security Nightmare

This blog post details the security vulnerabilities discovered in the IKKO ActiveBuds earbuds, a device featuring integrated ChatGPT functionality. The author found that the device directly communicates with the OpenAI API using an easily accessible, unencrypted API key. Furthermore, the companion app suffers from multiple security flaws, allowing unauthorized access to user chat logs and user identification through IMEI guessing. While the manufacturer has implemented some patches, significant security risks remain.