![]() ![]() ![]() Kwikset spokesman Brent Flaharty said in an email statement that the company couldn’t respond to the researcher’s claims without seeing a video of the hack. He added that Kwikset’s locks have “passed the most stringent lock-picking standard.”īut Tobias says that the standards are part of the problem, since they don’t test for many real-world lock-cracking techniques. “You read the packaging and yes they are certified as grade-one. “Obviously they won’t do that, because no one will buy their locks.”īut they ought to be putting on the package that there are tools and techniques that can open these locks in 30 seconds or less,” he says. Next, the researchers cracked the AMSEC electronic safe Model es1014. The safe is not high security, but is marketed for home and small businesses and sells for about £57 ($90).Ī piece of metal from a hanging file folder is slipped into the AMSEC safe to access a reset button inside the safe.ĪMSEC did not respond to a request for comment. The most impressive lock they examined, the iLoq C10S, is an electro-mechanical lock that combines electronic key authentication and audit trail with a mechanical lock. The researchers were able to disable the electronic portion, allowing unauthorised users to gain entry without being tracked. The attack requires modification of an authenticated key supplied either from an insider or through borrowing or theft. The iLoq has a unique award-winning design that differs from other electro-mechanical locks: it has no battery, either in the lock or in the key. ![]() Instead, the processor for authenticating keys is powered by a mechanical motor inside the lock. Unfortunately, the clever design works against the lock’s security, Tobias says. As a key is inserted, the motor wakes the processor to authenticate the key. Then the motor turns a gear to start the mechanical system. As the key travels through the keyway, it lifts a nylon pin that lifts a second metal pin, allowing the lock chamber to turn. The hack involves filing off a tiny hook at the tip of an authenticated key, which would take less than a minute to do, Tobias says. The iLock key has a small hook on the end that catches another hook inside the lock to reset the lock. When the hook is filed off the key, the lock can't reset, and the electronic part of the key is disabled, allowing even simulated keys to open the lock. When the key is inserted, it’s authenticated by the processor, and the pins lift to open the door. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |