Pages

Sunday, August 9, 2015

Opus 2015-240: DEFCON: Access Not Denied

It is a good thing that computer hackers are basically honest.  I know that is an oxymoron but it is still true at least in the area of computer security.  I would not trust them with the key to my wine cellar.

I went to one session today where the presenter showed how to quickly and easily get doors to open that are theoretically protected.  You have all seen the boxes at apartment complexes or other limited access areas.  They have a keypad for authorized people to enter a code and the gate or door will open.  He claimed the installer usually doesn’t bother to change from the default password and the new owner doesn’t either.  Thus many boxes, he believes most, across the country can be controlled by the same password, set at the factory.  Even if they did change the password he pointed out that it was always six characters and they could only be numbers.  He then showed how quickly his computer could discover the password if it had been changed.

He showed how to open all the doors controlled by the box and either keep them open or lock them shut so the legitimate user could not get them open.  He showed how it could be done on many of them remotely using the internet.

It was scary.  He made it clear that this demonstration only covered one manufacturer but he said it was by far the most common brand in the country.

Did you remember to lock the front door?  Are you sure?

homo unius libri

No comments:

Post a Comment

Comments are welcome. Feel free to agree or disagree but keep it clean, courteous and short. I heard some shorthand on a podcast: TLDR, Too long, didn't read.