The new generation of ultra-cheap smart glasses leaves Australians’ personal data, images and videos exposed to hackers.

Key flaws

• When the smart glasses are switched on but the owner is not connected, an attacker can “race” them to connect first, with no password or barrier to stop it
• Once inside, the attacker can control the device to take new photos and recordings, and copy any photos or videos that are already stored
• Audio and images can be intercepted while they’re being transmitted from the owner’s glasses to their phone
• An attacker can impersonate glasses they don’t own and use them to connect to the owner’s mobile app
• The device ID number is visible to others within bluetooth range while the glasses remain unpaired, and can be used to look up the user’s email address and date of birth via a separate failure on the app’s website