BB-8 remote control toy from Sphero has a security flaw that could be exploited by hackers. The toy is paired via Bluetooth to the bundled app running on an Android smartphone. Pen Test Partners has informed Sphero of the issue, and they are apparently working on implementing proper SSL security for a future update. However, there are no personal data on the mobile app or the droid, so its not like it could be used for spying on the user. This is yet again proof that manufacturers are rushing into building internet-enabled devices without making security an integral part of the progress.”]
Source: https://grahamcluley.com/8-star-wars-droid-toy-insecurity-strong-this/