Re:Defcon Lockpickers Open Card-And-Code Government Locks In...
by Cushman on Sunday August 07, 2011 @08:57PM
(#2858309)
Yeah, that's what I'm saying— all these exploits are absurd. The security guys are experts, of course, but I just think implying this is "lockpicking" is giving the locks a little too much credit.
Re:Defcon Lockpickers Open Card-And-Code Government Locks In...
by thatjoshguy on Sunday August 07, 2011 @11:03PM
(#2858582)
Well, it's not 'lockpicking' in the traditional sense, but they still demonstrated that you can open it just by stabbing a bit of wire into the light. It's absurd in the sense that it actually works.
But don't forget:
"In another bypass, they insert a wire into a silicon cover for an LED light that blinks red when the user enters an invalid code. That wire can ground a contact on the circuit board behind the light that triggers a function intended to allow the door to be opened with a remote button, bypassing all its security measures."
and
"A third attack allows an insider to open the back side of the lock and insert a wire that flips a microswitch intended as an override for power failures. That trick resets the lock’s software, tampering with its audit trail and allowing it to be reprogrammed with different codes. Bluzmanis demonstrated in a video that the more elaborate microswitch attack could be performed in under a minute."