3 ms·
>Just place a "special" charger in the lobby Now this idea, I like. http://krebsonsecurity.com/2011/08/beware-of-juice-jacking/ http://krebsonsecurity.com/201
by blueskin_ 13y ago
>Just place a "special" charger in the lobby
Now this idea, I like.
http://krebsonsecurity.com/2011/08/beware-of-juice-jacking/ http://krebsonsecurity.com/2011/08/beware-of-juice-jacking/
>My guess is because none of they crypto is mentioned, its probably some self developed snakeoil, so you might not even need to own their phone. Could be as simple as "bluetooth address whatever, which happens to be in the central DB whitelist, says open sesame" and the door opens.
I would seriously hope for this not to be true, but I've seen too many security fails to think it won't. Access is amazingly rubbish with security, especially when some RFID chip makers actually put a proprietary encryption algorithm as a selling point, when many of those (e.g. mifare) are provably broken.