Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Traditional locks are more like suggestions, and have a well known attack called "lockpicking", that is easy to learn. I doubt smart locks will be less secure than that.

Still leaves concern for DOS and privacy attacks.



You can't remotely pick a lock, but you can remotely hack a smart lock, and you also know when its owners are gone.

No lock is totally secure, but at least a dumb lock requires physical presence to defeat.


Don't forget the other major characteristics of network-connected gear; it's not just that a lock can be hacked remotely, but that all of them can be hacked at once, or even just all left accidentally unlocked because someone screwed up at Cloud Central.

The real problem with all this network connected stuff isn't even the new failure modes per se... it's the correlated nature of the new failure modes. (You know you're a Real Systems Engineer if something inside of you just screamed in terror.)


In that scenario though, the attacker (or an accomplice) would need to be physically present to take advantage of the unlock attack...


Most people don't know lockpicking so while you are right in principle this will change things in practice.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: