Security & Privacy in Smart Toys

This work analyzes the security practices of three smart toys that communicate with children through voice commands, and shows how attackers can decrypt communications to and from a target device, and perhaps more worryingly, the attackers can also inject audio into the toy so the children listens to any arbitrary audio file the attacker sends to the toy.