Stories
Slash Boxes
Comments

SoylentNews is people

posted by chromas on Friday June 15 2018, @01:20PM   Printer-friendly
from the where's-the-blockchain? dept.

A hi-tech padlock secured with a fingerprint can be opened by anyone with a smartphone, security researchers have found.

On its website, Tapplock is described as the "world's first smart fingerprint padlock".

But researchers said it took just 45 minutes to find a way to unlock any Tapplock.

[...] The "major flaw" in its design is that the unlock key for the device is easily discovered because it is generated from the Bluetooth Low Energy ID that is broadcast by the lock.

Anyone with a smartphone would be able to pick up this key if they scanned for Bluetooth devices when close to a Tapplock.

Using this key in conjunction with commands broadcast by the Tapplock would let attackers successfully open any one they found, said Mr Tierney.

In response, Tapplock said in a statement that it was issuing a software update.

-- submitted from IRC


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 5, Informative) by EvilSS on Friday June 15 2018, @01:59PM (8 children)

    by EvilSS (1456) Subscriber Badge on Friday June 15 2018, @01:59PM (#693480)
    This is the same lock that you can stick a go-pro mount or similar to the back of and unscrew the back plate of the lock and take it apart. https://www.youtube.com/watch?v=RxM55DNS9CE [youtube.com]
    Starting Score:    1  point
    Moderation   +3  
       Interesting=1, Informative=2, Total=3
    Extra 'Informative' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   5  
  • (Score: 5, Informative) by requerdanos on Friday June 15 2018, @02:12PM

    by requerdanos (5997) Subscriber Badge on Friday June 15 2018, @02:12PM (#693492) Journal

    Smart Lock Can be Hacked 'in Seconds'

    This is the same lock... unscrew the back plate of the lock and take it apart.

    In response, an unnamed source said in a statement that they knew that the lock was good only for separating IOT worshippers from their money, and certainly served no security purpose, but not to worry, that the mfr. was "issuing a software update" as if that were somehow relevant.

  • (Score: 2) by FatPhil on Friday June 15 2018, @02:49PM (3 children)

    by FatPhil (863) <{pc-soylent} {at} {asdf.fi}> on Friday June 15 2018, @02:49PM (#693509) Homepage
    Thanks for the link. I'm a bit disappointed that he didn;t spend a bit longer grinding the scanner face plate with some corundum until it made the lock unopenable (by the legit owner), and therefore only openable by bad guys.
    --
    Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
    • (Score: 2) by EvilSS on Friday June 15 2018, @03:02PM (1 child)

      by EvilSS (1456) Subscriber Badge on Friday June 15 2018, @03:02PM (#693518)
      To render it inoperable it would be easier to just open the back and cut the battery out.
      • (Score: 2) by FatPhil on Friday June 15 2018, @03:18PM

        by FatPhil (863) <{pc-soylent} {at} {asdf.fi}> on Friday June 15 2018, @03:18PM (#693525) Homepage
        Can a ciggy lighter, and burning wire sheathes, melt solder?
        Or even denature EPROMS?
        --
        Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
    • (Score: 2, Funny) by anubi on Saturday June 16 2018, @08:14AM

      by anubi (2828) on Saturday June 16 2018, @08:14AM (#693886) Journal

      There is this story flying around that a city near to me held a "sawdust festival", and the local brick-and-mortar merchants all got together to "work with" the city to ban all the cart vendors from the street, and succeeded in getting the city politicos to craft ordinances banning the street carts from vending food, drink, and souvenirs.

      I understand the entire group of store merchants discovered the morning of the festival that someone had come by in the middle of the night and shot every front door lock full of super glue.

      And the cart vendors showed up anyway.

      Ten thousand people, and the stores could not open their front door.

      They had locksmiths coming in from all over Southern California, but by the time they got there, the festival was already well underway.

      --
      "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
  • (Score: 4, Informative) by JoeMerchant on Friday June 15 2018, @02:55PM (2 children)

    by JoeMerchant (3937) on Friday June 15 2018, @02:55PM (#693511)

    Back in the 1980s, I bought a "magic magnet key" padlock, for about $8 - which, considering I was making $3.35/hr at the time was probably more expensive than this hype-tech lock would be for me today. That padlock still works - they keys are made with a combination of I think 4 magnets in random polarizations (not a lot of combinations, but not a lot of people bought those locks, either). Magnets haven't depolarized, keys still work to open it, and it's solid as any other padlock you'll see, much more solid than the dial ones they sell for $8 today. Mine has a round face with a round faced key pad in the middle of it, I don't see any similar ones on Google Images, though there are new magnetic key locks out there.

    --
    🌻🌻 [google.com]
    • (Score: 2) by FakeBeldin on Sunday June 17 2018, @05:53PM (1 child)

      by FakeBeldin (3360) on Sunday June 17 2018, @05:53PM (#694303) Journal

      Couldn't resist.

      Back in the 1980s, I bought a "magic magnet key" padlock, for about $8 - which, considering I was making $3.35/hr at the time was probably more expensive than this hype-tech lock would be for me today.

      At $3.35/hr, you would have had to work (almost) 2.4hrs, that is about 2 hours and 24 minutes.

      This lock was originally going for $99. You'd have to be taking home $41.25/hr for that. That's $330/day, or $1650/wk, or $6600/4wks. Or, if you get paid for 52 weeks a year: $85,800/yr. That's *well* above the US's median salary for September 2017 ($59,039).

      Conclusion: maybe it's cheaper for you than that old lock, but likely not by much.

      • (Score: 2) by JoeMerchant on Monday June 18 2018, @01:20AM

        by JoeMerchant (3937) on Monday June 18 2018, @01:20AM (#694384)

        Well, there's some sliding scale on that - back in the 80s I had a shit job making minimum wage, whereas today I have an education and 25+ years experience, so I've moved up the scale a bit, even beyond "median." OTOH, I'm sole income provider for 4 people, so the money doesn't go as far as it used to, either...

        --
        🌻🌻 [google.com]