News for hackers. Stuff that matters.

A comment on A Landlord Wants Facial Recognition in Its Rent-Stabilized Buildings. Parent comment

Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by closeparen on Sunday March 31, 2019 @03:03PM (#19537555)
This is already accomplished by having difficult-to-duplicate keys or fobs for the building entrance, which is a pretty standard feature of apartment living. And yes, some management companies are very stingy with extra fobs, as a control against having extra people in the unit who are not on the lease, or Airbnb, or whatever. You can tell you are in a building with a lot of illegal extra tenants when the keyfob-controlled gates are always propped open, or there are always people waiting to tailgate through them.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by envy2 on Sunday March 31, 2019 @03:25PM (#19537729)
I've yet to meet an apartment key fob I haven't been able to clone with a 'universal' RFID cloner gadget I bought in Shenzhen for $150 a few years back and some blank cards of various frequencies. You can also link it to a Aliyun/Tencent Cloud account for compute power to crack some older/low-end encrypted tags. I even managed to successfully clone a HID badge from work that was supposedly clone-proof...

Most landlords, in my experience, don't invest in the high-end RFID systems that have real security.

[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by sithadmin on Sunday March 31, 2019 @03:09PM (#19537599)
If nothing else: there's a market for fighting back against this. KeyMe kiosks (usually found at US supermarkets, pharmacies, etc.) have had RFID fob/card cloning capabilities for a while now. You scan the fob/card at the kiosk, then they clone it to a sticker and send it to you via mail.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by C14L on Sunday March 31, 2019 @03:31PM (#19537770)
> clone it to a sticker and send it to you via mail.

So they have a database full of addresses together with their digital keys?

What could possibly go wrong...

[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by Cpoll on Sunday March 31, 2019 @03:40PM (#19537841)
To be honest, not a lot, they only let you past the building door. So as a thief, I can: A. Scrub through a hypothetical leak of all that data, or B. Tailgate someone (even in security-conscious buildings this isn't much harder than following someone while carrying a box in both hands)

Locks are for honest people.

[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by jib on Sunday March 31, 2019 @04:19PM (#19538101)
Until you live in an apartment complex that has eliminated keys. My place is all keyfobs (except for the mailbox).
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by BurningFrog on Sunday March 31, 2019 @04:08PM (#19538031)
So it can be used to steal or deliver packages.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by Scoundreller on Sunday March 31, 2019 @09:14PM (#19539621)
Letting people get into the locker room or bike room can create issues.

You can get a great lock, but what they lock into is usually a very weak link.

[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by closeparen on Sunday March 31, 2019 @03:21PM (#19537697)
Interesting. I wonder if they have actually productized the security research on HID iClass, etc. or if they are only supporting simpler credentials with no cryptography.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by ma2rten on Sunday March 31, 2019 @03:49PM (#19537904)
Does this also work for company badges?
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by sithadmin on Tuesday April 02, 2019 @10:29AM (#19554426)
In theory, it could. Depends on whether the particular RFID standard used is supported by KeyMe or not. At a glance, they didn't seem to have much info available on what is/isn't supported.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by MR4D on Monday April 01, 2019 @04:43AM (#19541550)
I wonder what they do with the data after they’ve mailed you the sticker.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by Doxin on Monday April 01, 2019 @05:44AM (#19541768)
Most RFID keyfobs simply contain a serial number (possibly encrypted or signed) and nothing more. There's not a lot of use in stealing a random number. They'd have to be in cahoots with the people running the lock software to gain anything by it.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by dub on Sunday March 31, 2019 @03:48PM (#19537902)
In San Francisco the rent ordinance allows tenants to petition the rent board to lower their rent due to a substantial decrease in services if a landlord denies a request for a spare key.

This seems like a reasonable policy that other cities with renters might benefit from, if they don't already have something similar.

[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by londons_explore on Monday April 01, 2019 @07:02PM (#19549260)
Presumably the landlords then don't deny the request... They just make the process horrendously long and complex...

"Please fax this handwritten form to this foreign phone number and then you can collect the key from this office on the other side of town only at 3pm on a tuesday. Oh - now you've shown up we need ID, and we only accept birth certificates."

[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by dub on Monday April 01, 2019 @09:37PM (#19550268)
An SF landlord has 14 days to provide a key after being asked in writing. It's acceptable to deny the request for unlawful occupancy, but not for giving a family member, houseguest, or service worker access to your home.

For reference: https://sfrb.org/section-3713-keys

If they claim unlawful occupancy, you can invoke the Kim 2.0 amendments of the rent ordinance which basically prevent an SF landlord from denying you the roommates of your choice.

If a landlord denies a roommate under the Kim 2.0 amendments, you can almost certainly get your rent cut in half by petitioning the rent board.

[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by scrollaway on Sunday March 31, 2019 @03:15PM (#19537645)
In every apartment I've lived in with such difficult-to-duplicate keys (such as magnetic locks and what not), I've been ask whether I want a second set; and/or the owner told me to ask them should that ever be the case.

Not quite sure what's different with that situation from before, other than slightly cheaper keys.

[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by Faaak on Sunday March 31, 2019 @03:43PM (#19537859)
In Switzerland I've always changed the locks to my apartment and its garage.

1) The landlord is _never_ allowed to enter your house 2) In an emergency, the firemen would just break the door.

[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by detaro on Sunday March 31, 2019 @03:49PM (#19537908)
GP was talking about the entrance to the building, not the apartment. Having your own keys to the apartment doesn't help much if you only have one key to get into the building.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by scrollaway on Sunday March 31, 2019 @04:29PM (#19538148)
Yep, sorry for the lack of clarity. I assumed we were talking about building entrances, I've never had magnetic locks on an apartment itself.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by lovich on Sunday March 31, 2019 @11:19PM (#19540172)
In parts of the US I have lived in at least, not letting the landlord in under certain conditions allows the landlord to evict you or go after you for damages. There is no way to never let them in
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by nemothekid on Sunday March 31, 2019 @03:19PM (#19537680)
In my experience, in San Francisco, the owner will only give you a key for every name on the lease.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by SubiculumCode on Sunday March 31, 2019 @03:31PM (#19537774)
Nevertheless, you can at least hand a person (e.g. your visiting parents) your key so they can open the door without you.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by Scoundreller on Sunday March 31, 2019 @09:12PM (#19539615)
Some buildings (or just the owners?) keep the copy for cleaners in a realtors lock box. Doesn’t stop a sophisticated attacker, but probably does the job when you want to fire the cleaner.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by rdsubhas on Sunday March 31, 2019 @05:16PM (#19538453)
Face recognition will not allow anyone other than the tenant EVEN if they carry the very original key. Forget about duplicate keys, which may be it's own problem, but nothing compared to this.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by Hamuko on Sunday March 31, 2019 @03:44PM (#19537870)
Do Americans not get extra keys for their rental apartments?

Granted, I've only rented out an apartment once, but it was from a big local rental agency and I got three keys despite being the only tenant in a single bedroom apartment. My current studio apartment (although not a rental) also has three keys.

[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by UncleEntity on Sunday March 31, 2019 @07:01PM (#19539017)
> Do Americans not get extra keys for their rental apartments?

Mine didn't though I'm sure I could have gotten extra ones if I just asked.

I've been tempted on many, many occasions to give the neighbors a dollar to get a duplicate key made so they aren't knocking on the door/window at all hours because they obviously don't have enough keys for the amount of people living there.

[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by closeparen on Sunday March 31, 2019 @03:51PM (#19537921)
As a single tenant, I've always gotten 2 keys for my apartment door, and only one fob for the main entrance.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by Hamuko on Sunday March 31, 2019 @03:54PM (#19537947)
That also sounds weird since here it's pretty much universal that your apartment key also works for the main entrance.
[ Parent | on HN ]
Re:A Landlord Wants Facial Recognition in Its Rent-Stabilize... by crooked-v on Sunday March 31, 2019 @04:03PM (#19537998)
RFID access fobs instead of keys are becoming increasingly common for main entrances because it allows property management to revoke access for one person without making everyone else in the building also change keys.
[ Parent | on HN ]