Question

Topics
-Understand moral and ethical theories
-In a given scenario identify related stakeholders, ethical issue, and key elements. and using the decision-making framework.
-Technology related ethical issues and case studies.

Intellectual property
privacy
networking
security
reliability and safety
professional ethics

Case 1

In 2015, just in time for the holiday season, Mattel released its WiFi-enabled Hello Barbie doll, which allowed the doll’s microphone to record conversations with a child and send it via Wi-Fi to third parties for audio language processing, allowing the doll to then offer the child an appropriate natural language response. Because the conversations were stored in the cloud, parents were also able to monitor the child’s conversations with the doll; parents can even share the audio clips of their children’s conversations online on the website of ToyTalk, the maker of the third-party software. One legal scholar noted, “In Mattel’s demo, Barbie asks many questions that would elicit a great deal of information about a child, her interests, and her family. This information could be of great value to advertisers and be used to market unfairly to children.”. One independent security researcher claimed that he was able to hack the device in such a way that he could access the user account information, stored audio files, and microphone for the doll, and potentially spoof ToyTalk’s third party website server to assume control of the doll’s speech. Somerset Recon, an organization devoted to security analysis and reverse engineering, eventually found 14 vulnerabilities in the system, including allowance for weak passwords, no protections against brute force password attacks (allowed unlimited password guesses), and exposure to URL redirect and phishing efforts. There was also the potential for malicious Javascript to be stored on ToyTalk’s third party website, allowing “persistent backdoor access to a ToyTalk user account.”

i want an answer please

Answer 1

ans) Yes, the makers of the doll break the law of security and security ethics as it breach the identity or information of a person which is wrong. Stakeholders make a profitable business by selling a wide range of that doll as it can talk to kids and vary fascinating for parents to listen their children voice and how they try to talk with the doll which grabs attention of parents which make a profitable business for the stakeholders and in the above case stakeholders is Mattell as he released the doll. Parents didn't know about the fact that their precious information is saved at cloud by the help of third party help that is Toy Talk, it will be very easy for a hacker to attack their information and easily get access to their data. They breach the security by the popular man in the middle attack or spoofing in which a unauthorized person is listening your information without anyone attention and we found that there are 14 vulnerabilities present in the system like weak password so that it can be easily hacked by someone, etc. So one thing we are sure about that, the makers of doll as well as Toy Talk don't provide safety or security to there users and it is very bad for an organisation and it is against the ethics of security policies.

Hope you like the answer, comment down below :-).

Thank you very much :-)