My smart sleep mask broadcasts users' brainwaves to an open MQTT broker
aimilios.bearblog.dev
February 14, 2026
4 min read
🔥🔥🔥🔥🔥
70/100
Summary
A smart sleep mask broadcasts users' brainwaves to an open MQTT broker, allowing access to brainwave data from multiple users. The device features EEG brain monitoring, electrical muscle stimulation, vibration, heating, and audio capabilities.
Key Takeaways
- The smart sleep mask broadcasts users' brainwaves to an open MQTT broker, allowing access to live EEG data from multiple devices.
- The mask's app contains hardcoded credentials that enable unauthorized access to the company's MQTT broker, revealing data from various IoT devices.
- The mask features EEG brain monitoring, electrical muscle stimulation, and other functionalities, all of which can be controlled via a web dashboard created through reverse engineering.
- Users' brainwave data can be captured and manipulated, raising significant privacy and security concerns.
Community Sentiment
Concerns
- Broadcasting brainwave data to an open broker without user consent raises serious privacy concerns, highlighting a governance failure in data handling.
- The lack of visibility into data transmission from connected devices underscores the urgent need for audit trails to protect user privacy.
- Many Kickstarter projects prioritize speed to market over thorough engineering, leading to potential risks and inadequate product quality.
