Cheap Smart Glasses from Temu Let Strangers Connect Without a Password and Start Recording

An investigation by ABC News Australia uncovered serious privacy issues in a new generation of ultra-cheap smart glasses. Journalists tested two pairs of such devices. One pair, priced at 60 Australian dollars, or about $42, was purchased on the Chinese marketplace Temu. The second pair was bought from Sydney-based importer BDI Technology through Big W Marketplace for 110 Australian dollars, or roughly $78. Both models connect to a smartphone via the HeyCyan app.

The analysis showed that if the smart glasses are turned on but the owner has not yet connected to them, another nearby person can connect to the device first. No password is required, and there are no additional security mechanisms in place to block such access. Once connected, an attacker can effectively take control of the glasses, capture new photos and videos, copy content already stored on the device, and intercept audio and images being transferred from the glasses to the owner’s smartphone.

The privacy risks are not limited to direct access to the glasses themselves. The investigation found that attackers can also impersonate someone else’s smart glasses in order to connect to the owner’s mobile app. In addition, the device identifier can be seen by other users within Bluetooth range even when the glasses have not yet been paired with a smartphone. Combined with a separate vulnerability on the app’s website, this could allow attackers to obtain a user’s email address and date of birth.

Kimberlee Weatherall, a technology regulation expert at the University of Sydney, told ABC News Australia that the findings point to “a failure to take even basic steps to protect personal data.”

Smart Glasses Bans Are Becoming Increasingly Common

A higher price does not necessarily guarantee better privacy either. An investigation by Swedish daily newspaper Svenska Dagbladet found that contractors working for Meta in Kenya could view sensitive content recorded with Meta Ray-Ban smart glasses. This reportedly included videos of people using the bathroom and recordings of intimate moments. The risks affect not only the owners of these devices but also anyone who happens to be within the camera’s field of view. Smart glasses are often referred to as “creep glasses” because they can be used to secretly record people without their consent.

Growing privacy concerns and public backlash have already led to bans on smart glasses in courts and other facilities in the United States and the United Kingdom. Norway, the Netherlands, and Germany are also considering additional restrictions on their use. The Western Australian government has already announced a ban on smart glasses in public schools, with the restriction also applying to sporting events and school excursions. Meanwhile, the Australian federal government is considering banning such devices in its offices and service centers across the country.