COROS Confirms Security Vulnerability

Ray Maker posted this on his site DC Rainmaker while I was running around the Dolomites and I didn’t get a chance to share it here, but for all Coros watch users, this is one to read and pay attention to:

A German IT security firm has published a list of 8 different security bugs found in all COROS watches that give essentially full access to not only the user’s watch, but also their COROS account. This includes everything from interrupting a workout (during the workout), to resetting the device remotely, as well as accessing/downloading all your COROS.com data.

And on COROS’s response to this:

… every single software product ever created will eventually have a security bug. That’s largely the nature of software development. What matters is how a company handles that bug/issue. In this case, it seems like it was basically thrown into the larger pile of bugs to deal with, rather than being properly categorized as a security issue.
…
… all this usually only happens after a company screws up once. In this case, I’d guess this is the ‘once’ for COROS. As their CEO noted, they’re going to implement a host of things to ensure that future security issues are addressed efficiently (because again, all companies will have security issues eventually).

This is COROS’s wake up call. How they’ll respond to this will define the future of the company.