Smartwatch Exposes Kids' GPS data

Walden Systems Geeks Corner News Smartwatch Exposes Kids' GPS data Rutherford NJ New Jersey NYC New York City North Bergen County
Rita gives you full control of what sites your employees visit. Rita can block sites that eat up your precious bandwidth such as media streaming sites. Rita enables you full control of what sites your employees can and cannot visit. Rita gives you the ability to block undesirable sites by wildcard or by name. Rita gives you the ability to determine which computers will be blocked and which will be allowed. With Rita, you can block access to sensitive servers within your LAN.

Researchers are warning parents that a children's connected smartwatch has vulnerabilities that leak personal and GPS data, and allow hackers to listen in on and manipulate conversations. The SMA M2 smartwatch, which costs $35, helps parents track their children using a companion app that tracks the smartwatch's GPS location and allows them to send messages or make phone calls. Researchers discovered the personal information of smartwatch users, including real-time GPS position data sent by the watch's SIM card were unencrypted and is accessible through a web API.

The watch gives hackers the ability to identify the location of more than 5,000 children and access data from over 10,000 parent accounts. Other personal data is left unencrypted as well, including names of both children and their parents, children's addresses and their ages. Also openly available are children's smartwatch contacts and all voice messages transmitted. Researchers also discovered a vulnerability that allows hackers to intercept and manipulate conversations.


A configuration file in the complementary smartphone app directory can be used to connect to children's smartwatches using their user IDs. However, it does not require any type of authentication. Because the user IDs are also exposed unprotected on the publicly accessible web API, a hacker could download the app and enter a child's user ID to connect with their phone and send them messages and phone calls under the guise of their parents.

Researchers have contacted SMA, the manufacturers of the smartwatch, regarding their findings but SMA still continues to sell the watch via various distributors worldwide. German distributor, Pearl, has taken the smartwatch off the market.