3 ms·

> what, exactly? They could plug the access holes, with custom pentalobe screws. That's an under a dollar per lock fix.

tptacek 14y ago
So, that's more than a million dollars more than NYSE:UTX's gross profits for the last quarter, and ~1/4 of their gross revenue over the same quarter. No, I don't think they were going to do that.
- huhtenberg 14y ago
  C'mon. It's well under a dollar. And that's a 10 second idea, I'm sure there are other options. (edit) That's not even considering that this cost can be carried by the hotels. I'm sure they can cough up $500 to secure their facilities. -- Please don't tell me that you, of all people on HN, think that there's no need for a private disclosure on this guy's part?
  - tptacek 14y ago
    It's way more than a dollar. How many locks could one technician replace/fix in an hour, and what's their hourly rate? "Me of all people"? Am I a spokesperson for "Responsible disclosure" now? I would have notified the vendor ASAP, and I might not have put the vendor name into the talk at all. But that's me, and I am super conservative about this stuff. Lots of very reputable security people would do exactly what Cody did.
    - huhtenberg 14y ago
      Not in bulk. Hotel technicians install and service locks, I'm sure they'll manage to screw a bolt into a hole. They are salaried. "You" as a "sensible security guy". Or at least that was my impression of you based on what you post here.
    - peterwwillis 14y ago
      For clarification: lots of "very reputable security people" can also be total dicks. Hacker elitism does not encourage thoughtfulness.
      - danielweber 14y ago
        As an industry we are a pretty awful people.
- 3am 14y ago
  Financial reports are typically in 1000s of dollars - UTX's net reported in 03/2012 were $330 million USD. edit: source is http://finance.yahoo.com/q/is?s=UTX http://finance.yahoo.com/q/is?s=UTX ('All numbers in thousands' in upper right of the statement). Easy mistake! I just happened to be passingly familiar with United Technologies, which is a large diversified industrial conglomerate that includes Carrier (A/C systems), Sikorsky (helicopters), and Pratt & Whitney (aircraft engines) among other subsidiaries.
  - tptacek 14y ago
    URL? I got mine from Google Finance, but only quickly eyeballed it; it's very likely you're right.
sneak 14y ago
Now the device used to break into the rooms costs $57 instead of $50. Cool story, bro.

So, that's more than a million dollars more than NYSE:UTX's gross profits for the last quarter, and ~1/4 of their gross revenue over the same quarter. No, I don't think they were going to do that.

huhtenberg 14y ago
C'mon. It's well under a dollar. And that's a 10 second idea, I'm sure there are other options. (edit) That's not even considering that this cost can be carried by the hotels. I'm sure they can cough up $500 to secure their facilities. -- Please don't tell me that you, of all people on HN, think that there's no need for a private disclosure on this guy's part?
- tptacek 14y ago
  It's way more than a dollar. How many locks could one technician replace/fix in an hour, and what's their hourly rate? "Me of all people"? Am I a spokesperson for "Responsible disclosure" now? I would have notified the vendor ASAP, and I might not have put the vendor name into the talk at all. But that's me, and I am super conservative about this stuff. Lots of very reputable security people would do exactly what Cody did.
  - huhtenberg 14y ago
    Not in bulk. Hotel technicians install and service locks, I'm sure they'll manage to screw a bolt into a hole. They are salaried. "You" as a "sensible security guy". Or at least that was my impression of you based on what you post here.
  - peterwwillis 14y ago
    For clarification: lots of "very reputable security people" can also be total dicks. Hacker elitism does not encourage thoughtfulness.
    - danielweber 14y ago
      As an industry we are a pretty awful people.
3am 14y ago
Financial reports are typically in 1000s of dollars - UTX's net reported in 03/2012 were $330 million USD. edit: source is http://finance.yahoo.com/q/is?s=UTX http://finance.yahoo.com/q/is?s=UTX ('All numbers in thousands' in upper right of the statement). Easy mistake! I just happened to be passingly familiar with United Technologies, which is a large diversified industrial conglomerate that includes Carrier (A/C systems), Sikorsky (helicopters), and Pratt & Whitney (aircraft engines) among other subsidiaries.
- tptacek 14y ago
  URL? I got mine from Google Finance, but only quickly eyeballed it; it's very likely you're right.

sneak 14y ago

Now the device used to break into the rooms costs $57 instead of $50. Cool story, bro.