I certainly chuckled at the combination of the title and the domain the article is hosted at. pentestpartners sounds like it could be the name of a group sex app...

I know you’re joking but I think it’s a big problem in a lot of these very private apps that don’t get a lot of security attention before they’re released. Lovense, for example, is a pretty popular smart toy brand that has a bit of a history of security & privacy issues. Both device hacking[1] and sketchy data collection[2].

I don’t know if it’s because they’re less secure than their competitors or because they’re a bigger brand so their security is looked at more often. I suspect they have terrible security but are probably a lot more secure than their smaller competitors.

[1] https://www.newsweek.com/hacked-butt-plug-controlled-anywher...

[2] https://www.helpnetsecurity.com/2017/11/13/lovense-bug/

Reminds me of Fufme: http://www.easylife.org/fufme/

I'm sure there are a few back doors as well.