{"id":1610,"date":"2024-06-26T20:42:08","date_gmt":"2024-06-26T18:42:08","guid":{"rendered":"https:\/\/eltecnologuia.com\/?p=1610"},"modified":"2024-06-26T20:42:12","modified_gmt":"2024-06-26T18:42:12","slug":"rabbit-r1-security-flaws-put-users-on-alert","status":"publish","type":"post","link":"https:\/\/eltecnologuia.com\/en\/rabbit-r1-security-flaws-put-users-on-alert\/","title":{"rendered":"Rabbit r1 security flaws put users on alert"},"content":{"rendered":"

First news about the Rabbit r1 Teach Mode arrives<\/a><\/h4><\/header><\/div>
<\/div><\/div><\/article>\n

The Rabbit r1 is updated: Beta Rabbit, timers and alarms<\/a><\/h4><\/header><\/div>
<\/div><\/div><\/article>\n

Cybersecurity experts put the Rabbit r1 to the test<\/a><\/h4><\/header><\/div>
<\/div><\/div><\/article>\n<\/div><\/section>\n\n\n

A team of researchers sends an email from the administrator account evidencing the security flaws of the Rabbit r1<\/h2>\n\n\n\n

According to what they say from the portal 404media.co<\/a> a group known as "rabbitude<\/a>\u00bb has been able to send an email from the official email account of the administrators of Rabbit Inc. disclosing a very serious security breach.<\/p>\n\n\n\n

This group of hackers is dedicated from the output of the device to the jailbreak<\/em> from r1<\/strong>. According to their own website, they comment on the following:<\/p>\n\n\n\n

\u00abRabbitude is the overall reverse engineering project for the r1. We rolled back, hacked, and experimented with r1 and reported our findings publicly. Rabbitude is built by the community along with some core members. Overall, it improves the experience of the r1.\u201d<\/em><\/p>\n\n\n\n

Its goal is to unravel the Rabbit r1 to its depths so that users can modify the operating system, use base applications that are not allowed<\/strong> and collaborate with other researchers by developing shared editorial resources.<\/p>\n\n\n\n

Rabbit r1 security and API Keys<\/h2>\n\n\n\n

According to the research, Rabbit may have exposed some critical API keys<\/strong> encoded and exposed in your code. This security flaw would have allowed viewing and downloading \u00aball r1 answers ever given<\/em>\u00ab<\/p>\n\n\n\n

Among these failures, users of Rabbitude could have sent emails from Rabbit's own domains<\/a>. This would imply a security flaw in the Rabbit r1 never seen before. We will see proof of this later.<\/p>\n\n\n\n

It seems that one of the main problems was the Eleven Labs API key<\/a>, the text and voice artificial intelligence that the Rabbit r1 uses for its device and that seems to have been compromised a few days ago by this group.<\/p>\n\n\n\n

However, on June 26, 2024 Rabbitude launched an article explaining the situation in more detail<\/a>.<\/p>\n\n\n\n

As they have argued, on May 16, 2024, the Rabbitude team gained access to the Rabbit codebase and found several\u00a0encrypted API keys<\/strong>\u00a0criticisms in your code.<\/p>\n\n\n\n

These keys would allow anyone to read all the answers each r1 has given, including those that contain personal information<\/strong>, block all r1, alter the responses of the devices in even replace the gadget time.<\/p>\n\n\n\n

The violated APIs are the following:<\/p>\n\n\n\n