The TicTocTrack smartwatch allows parents to track their children s whereabouts. The smartwatch’s API can be attacked by changing the FamilyIdentifier number (which identifies the family that the user belongs to), which then could give a bad actor complete access to the user’s personal data. The parent company of the smartwatch, iStaySafe Pty Ltd., has temporarily restricted access to its service and app while it investigates further. The company said in its notice to customers that they will restrict all use access to. the. smartwatch application and service until they can confirm the validity of the flaws.
Source: https://threatpost.com/tictoctrack-smartwatch-flaws-track-kids/143791/