Fitbitten: Researchers Exploit Health Monitor To Earn Workout Rewards

Researchers at Florida International University reverse-engineered the Fitbit One ecosystem and discovered multiple security flaws in the device, companion web software, and communication protocol; they created a proof-of-concept toolkit called FitBite that can eavesdrop, inject fabricated activity data (enabling fraudulent reward accrual), perform denial-of-service and battery-drain attacks, and thereby compromise users' privacy and enable monetary fraud via linked services.