3 ms·
It's just possible this is a title which deserves to be editorialized to "Defcon Lockpickers Open Card-And-Code Government Locks In Seconds With a Hammer." Edit
by Cushman 15y ago
It's just possible this is a title which deserves to be editorialized to "Defcon Lockpickers Open Card-And-Code Government Locks In Seconds With a Hammer." Edit: Make that "With a Rubber Mallet."
- wglb 15y agoBut it is a soft hammer.
- Cushman 15y agoOh yeah, that was unclear— I don't mean it doesn't count, I mean these locks are ridiculous in a way this title doesn't fully capture.
- jonknee 15y ago... Or a paper clip.
- dlsspy 15y agoThere were three different security exploits. The first was rapping with a mallet to compress the springs and release the pins (similar concept to bumping). But don't forget: "In another bypass, they insert a wire into a silicon cover for an LED light that blinks red when the user enters an invalid code. That wire can ground a contact on the circuit board behind the light that triggers a function intended to allow the door to be opened with a remote button, bypassing all its security measures." and "A third attack allows an insider to open the back side of the lock and insert a wire that flips a microswitch intended as an override for power failures. That trick resets the lock’s software, tampering with its audit trail and allowing it to be reprogrammed with different codes. Bluzmanis demonstrated in a video that the more elaborate microswitch attack could be performed in under a minute."
- Cushman 15y agoYeah, that's what I'm saying— all these exploits are absurd. The security guys are experts, of course, but I just think implying this is "lockpicking" is giving the locks a little too much credit.
- thatjoshguy 15y agoWell, it's not 'lockpicking' in the traditional sense, but they still demonstrated that you can open it just by stabbing a bit of wire into the light. It's absurd in the sense that it actually works.