3 ms·
1) An attacker (/ RF noise) can induce false alarms frequently enough that you no longer take the alarm seriously. 2) Can I get the crypto keys you're relying
by superuser2 11y ago
1) An attacker (/ RF noise) can induce false alarms frequently enough that you no longer take the alarm seriously.
2) Can I get the crypto keys you're relying on by buying the hardware myself and dumping the firmware? What about by ripping an exterior sensor off the wall? What about by social engineering you into giving me an invoice with the serial number on it?
3) What happens if I power-cycle your building? Do the sequence numbers start over?
4) How are you going to communicate the alarm condition to anyone who can help? If I cut your phone/internet lines? If I bring a cell phone jammer?
Not an expert either, but I remember a fascinating chapter of a security engineering textbook from HN years ago talking about what goes into the design of robust alarm systems. The process is largely driven by the high-end valuables insurance industry, which has standards/certifications for the alarms you must buy to enjoy their protection. I'll see if I can dig it up.
Wireless isn't inherently impossible to secure, but it must be done very carefully.