The Internet of Things (Smart locks, etc...)

[Klumpen]

My landlord recently sent out a letter to all residents saying that the key system will be updated soon and now I stumbled over this and fear the worst:

Read her updates on the last post too.

Relevant - LockPickingLawyer:
https://www.youtube.com/channel/UCm9K6rby98W8JigLoZOh6FQ/search?query=smart

 

[TrashyMG]

There is an T-shirt for this...
https://teespring.com/shop/the-s-in-iot#pid=369&cid=6521&sid=front

 

[ible]

technically there is an S in the unabbreviated version...
internet of thingS

 

[Nintendo]

That's fucking ridiculous!
Petition or boycott.

 

[levi]

I've been boycotting them for so long I never even signed up in the first place.

 

[Binky]

Oddly, I don't think the biggest problem with smart locks is their disastrously poor information-security design. Working out how to send an unauthenticated "Unlock now" command over Bluetooth is of comparable difficulty to picking or bypassing a cheapish mechanical lock. Not too hard for an engineer, but beyond a common-or-garden burglar.

The problem is the physical design of smart locks. The average thief isn't going to mess around spoofing radio signals when the padlock is shimmable, made of plastic, and held together with hot-snot.

XKCD538 applies.

 

[PowerGod]

In my palace, we had reinforced doors with multiple physical locks... so they climbed the gutter and broke the window, took all gold (leaving all fakes behind), money, keys, some little digital devices, and then disappeared... all in less than 15 minutes for 4 apartments...

 

[ElPoco]

Working out how to send an unauthenticated "Unlock now" command over Bluetooth is of comparable difficulty to picking or bypassing a cheapish mechanical lock. Not too hard for an engineer, but beyond a common-or-garden burglar.

True but it can be automatized and you can have automatic unlockers sold on the black market so that anyone can unlock the door. This is already the case for car locks.
But it's still cheaper to just break a window or force the door open (unless it's reinforced).

The biggest trouble I see is that with smart lock hacking there's no trace of forced entry. Just a log stating that someone opened the door. Which means that insurance companies can refuse to cover the loss since you have no way to prove that this was a burglary.

 

[Binky]

I thought insurers generally insist on a certain standard of lock for the property they're insuring. The existing testing agencies and processes would fail most smart locks immediately for mechanical reasons, so the increased risk of traceless entry is a bit of a moot point.

Of course, most masterlock products can be quietly defeated with a rusty paperclip, so the problem isn't unique to electronic wodgits, either.

 

[ClockworkCoder]

Reminds me of this: https://www.amazon.com/b?node=17861200011

Allow some stranger in to your house to deliver Amazon parcels. Or just ask Alexa to open it for them... so 'convenient'.

Never was the expression "a fool and his money..." was more true.

 

[Klumpen]

 

[Binky]

It might also be that engineers are (by nature or by training) more aware that:

• A 'dumb' appliance does the job perfectly well, and is only insufficient for a few edge-cases
• Those 'dumb' appliances will last ten times as long as their 'smart' counterparts.

I have seen porcelain & bakelite light switches still in regular use, several decades after installation - a fair sight better than any of their modern Android-enabled counterparts will manage!

 

[comradekingu]

Klumpen doesn't live here anymore, he got stolen.

 

[levi]

https://www.nbcchicago.com/investig...ermostat-Hacked-Homeowner-Says-505113061.html

Google can tell you you've used a compromised password when having to explain how their kit was compromised, but still let you set that password in the first place.

 

[FBnil]

he got stolen.

Dutch course time: "Hij kan mij gestolen worden"
lit: He can from-me stolen to get.
trans: I don't care about... (Nothing really matters to me).
The French really make the statement as hard as the Dutch!

 

[AxPU]

There is an T-shirt for this...
https://teespring.com/shop/the-s-in-iot#pid=369&cid=6521&sid=front

The shirt is nice but it is missing an important fact...

... cause the "U" stands for updates!

 

[elw3]

Could be worse, you could have an iot shoelaces instead just a door lock.
https://mashable.com/article/nike-app-connected-shoe-bricked/?europe=true
Just imagine trying to run away from a robber and he pulls his smartphone and makes you trip.
Actually i like this idea, finally the +200kg computer nerds can attempt a career phath in robbery too. Its sooooo inclusive!

 

[Silent-Hunter]

I just use OpenHAB and things that work with OpenHAB. That way it's all internal and not online.