News: 1640246532

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Fisher Price's Bluetooth reboot of pre-school play phone has adult privacy flaw

(2021/12/23)


A Bluetooth phone designed to evoke the carefree days of early childhood has been found to instead threaten the very adult prospect of being surveilled in your home.

The phone is the Fisher Price Chatter Special Edition, a device that adds Bluetooth and a speaker to the smiling, brightly coloured, wheeled, rotary dial phone on which it's previously been possible to make calls only by using one's imagination.

The phone also bears the name “60G LTE” – which stands for “60 great years, Let’s Talk Everywhere” and an [1]infomercial for the handset opens with “The past has finally arrived” before lampooning mobile phone ads quite nicely.

[2]

The 2021 version of the device connects to a smartphone and can be used as a speaker phone, or to make calls. Even the rotary dialler works for outbound calls.

[3]

The Chatter Special Edition. Click to enlarge

Before you try to find a vendor capable of delivering this before Christmas, consider [4]this post from security firm PenTest Partners, because it says the Chatter has security problems that can turn it into a spy phone.

[5]Of course a Bluetooth-using home COVID test was cracked to fake results

[6]Is VPOTUS Bluetooth-phobic or sensible? The answer's pretty clear

[7]Reg scribe spends week being watched by government Bluetooth wristband, emerges to more surveillance

The post states that the Chatter uses Bluetooth classic without secure pairing, which means it agrees to any pairing request.

Anyone within range could therefore hook up a Bluetooth speaker, and whatever is said within range of the Chatter’s microphone.

[8]

[9]

PenTest Partners also found:

Someone nefarious nearby could also use the Chatter telephone to speak to and listen to a child in your home

Separately, if the phone handset is left off, it will AUTO ANSWER any call to a connected smartphone, in a kind of ‘reverse butt dial’

The same attacker can also make the Chatter phone ring, so an unsupervised child is likely to answer

The security firm has called on Mattel, Fisher Price’s parent company, to explain why the Chatter’s security is so rubbish and suggested turning it off as the easiest mitigation.

The device has sold out and, thankfully, was only available in the USA

The original Chatter phone, with nothing electronic inside, remains [10]available for $12.99. ®

Get our [11]Tech Resources



[1] https://www.youtube.com/watch?v=UKKFNV0m3SQ&t=2s

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YcRW2T1B96Lsiit7MsQgEwAAAIM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://regmedia.co.uk/2021/12/23/screenshot_fisher_price_chatter_special_edition.jpg

[4] https://www.pentestpartners.com/security-blog/audio-bugging-with-the-fisher-price-chatter-bluetooth-telephone/

[5] https://www.theregister.com/2021/12/22/ellume_home_covid_test_cracked/

[6] https://www.theregister.com/2021/12/13/in_brief_security/

[7] https://www.theregister.com/2021/10/19/7_days_with_singapore_shn/

[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YcRW2T1B96Lsiit7MsQgEwAAAIM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YcRW2T1B96Lsiit7MsQgEwAAAIM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[10] https://www.amazon.com.au/Fisher-Price-FGW66-Fisher-Price-Telephone/dp/B01LZYGY8H?ref_=ast_sto_dp

[11] https://whitepapers.theregister.com/



Brrrrring

Chris G

From a company that always thinks of the children!

Immediately after calculating the price.

Turning it off

Hawkeye Pierce

I think I'd be looking to "turn it off" with a hammer...

Re: Turning it off

Terje

Or you could gut the insides and replace it with something not quite as incompetent.

Re: Turning it off

Jonathon Green

I suspect it’s not actually aimed at Children. I don’t know about anybody else but this has got me seriously thinking about looking out for an original, gutting it, and building my own equivalent…

Come on Barbie

Anonymous Coward

Let's go Stasi.

Anonymous Coward

This defeats the purpose of the toy. Imagination. Why do they do these things? My kids had one these when they were younger and they loved having conversations.

Pascal Monett

That's modern education for you. Kids must be officially occupied all day long. Not a minute should be spent doing nothing, much less something that's not on the program. Parents are dragging their spawn to club after club during the week. Dancing, sports, horse riding, anything but having them at home where they need to create their own fun.

These kids have now grown up and are ruining the fun for their kids.

But hey, can't have a brat bothering you all the time, now can you ?

Mike 137

"That's modern education for you."

Education as entertainment. Part of an established trend for everything to be entertainment. See Neil Postman 'Amusing ourselves to death' 1985

I want one

2+2=5

If it works as a speaker phone then I want one for Teams calls for when the video is supposed to be on!

Re: I want one

KittenHuffer

Then add the playroom backdrop to your video!

Perhaps wear some adult diapers!

Or go for the latex onesie! ------->

So......Bluetooth in the news.....poor programming, poor security......

Anonymous Coward

Link: https://forums.theregister.com/forum/all/2021/12/22/ellume_home_covid_test_cracked/

*

......why am I not surprised?

Fisher Price security

Dynamite

At least when someone now says that an item has Fisher Price levels of security we have a valid reference that we can link to when proving the point....

Hmm ...

Blofeld's Cat

"Thank you for calling the Fisher Price Chatter help line:

For sales, dial 1, for support, dial 2, to hear a duck quack, dial 9"

Creating computer software is always a demanding and painstaking
process -- an exercise in logic, clear expression, and almost fanatical
attention to detail. It requires intelligence, dedication, and an
enormous amount of hard work. But, a certain amount of unpredictable
and often unrepeatable inspiration is what usually makes the difference
between adequacy and excellence.