Eiliko Flaws Remain After Energize Lab Response — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Sammy Azdoufal spent over a month with The Verge trying to contact Energize Lab, including emailing CEO and founder Shaw Yeung, before the company issued an unsigned response.
- Energize Lab confirmed the core reported issues, created a dedicated monitored security inbox and said an independent security firm would review all its systems.
- Energize Lab said that by Wednesday it had closed external backend access, rotated all access credentials and disabled the interface that allowed a robot’s responses to be modified remotely.
- Energize Lab took long-term memory and custom avatar features offline and said it would no longer store conversation records or the user profiles generated from them.
- Energize Lab pledged to delete stored conversation records, profiles, avatar images and related content, but said memory and avatars would return after the independent review confirms they are secure.
- The Verge confirmed that Eiliko customer photos and audio recordings remained stored at unsecured public web addresses with no protection as of the company’s email.
- Sammy Azdoufal said he still had full SSH access to Eiliko robots and retained the theoretical ability to read transcripts and modify their behavior, which placed Energize Lab’s closed-access claim in doubt.
Why it matters: For Eiliko owners, two exposure points remained after Energize Lab’s response: customer photos and audio were still public, and Sammy Azdoufal said he retained full SSH access. That directly conflicts with the company’s closed-access claim, while the security review and disabled memory features show remediation has begun but trust remains unearned.
Ask SkimNews
