Reverse Engineering Furby Connect’s Bluetooth Protocol

Some of my earlist memories from being a toddler was my cousin having a Furby, so naturally I also really wanted to have one. When most children finally get one of these little monsters, feeding and petting Furby keeps them busy for a week or so until they get bored and move on to something new. For me, however, the fascination never really faded.

So last Christmas, I gifted myself with Hasbro’s new “Furby Connect” that comes with a Bluetooth Low Energy (BLE) interface. Smart toys equipped with BLE just ask to be hacked, so I was quite surprised when I found out that there are no security checks whatsoever in place to protect Furby against someone uploading and playing arbitrary audio. But see for yourself:

You can find more information about this project on its GitHub page.

Updated: