News for hackers. Stuff that matters.
Re:Defcon Lockpickers Open Card-And-Code Government Locks In... by jrockway on Sunday August 07, 2011 @06:16PM (#2857930)
I like how causing the LED to fail causes the microcontroller to decide to open the lock. And it even turns on the green LED when it does so!
Re:Defcon Lockpickers Open Card-And-Code Government Locks In... by Cushman on Sunday August 07, 2011 @06:19PM (#2857944)
According to the article, they're not shorting the LED itself but poking a different wire which activates the remote-open-without-code system.

Which, hey, that's convenient.

Re:Defcon Lockpickers Open Card-And-Code Government Locks In... by Natsu on Sunday August 07, 2011 @07:26PM (#2858100)
I like how they say they haven't even disclosed the worst of the flaws, because they want the company to have a chance to fix this stuff.

And how the company is trying to tell us that these flaws can only be exploited in the lab. I can just imagine the security bulletins banning rubber mallets from the facility.

Re:Defcon Lockpickers Open Card-And-Code Government Locks In... by Cushman on Sunday August 07, 2011 @08:23PM (#2858234)
It's kind of frightening to imagine what exploits these locks have are that are quieter and less detectible than sticking it with a paperclip.

It's also funny to imagine the company's security experts who just can't seem to reproduce the stick-it-with-a-paperclip trick outside of a laboratory environment. I'm surprised guys that sharp let the hammer trick slip through!

Re:Defcon Lockpickers Open Card-And-Code Government Locks In... by Someone on Monday August 08, 2011 @05:24AM (#2859362)
It does not have to be less detectable to be worse.

Imagine if there were a way to remotely disable all such locks in a building, keeping them locked, or to remotely make them burst into flames (or both).