This picture was extracted from Cody Brocious' talk at the BlackHat 2012 in Las Vegas.
More information can be found on Cody's website: http://daeken.com/blackhat-paper
Saturday, July 28, 2012
Onity HT lock provides its own key when questioning it
The vulnerability found by Cody Brocious and presented at BlackHat Las Vegas 2012 deserves an entry in this blog. The Onity HT lock is installed on a huge amount of hotel doors around the globe and you might have already seen it, when you stayed in couple of hotels.
Even more disturbing is the vulnerability that Cody discovered. Every lock has a small barrel-type DC power socket on the bottom. This is used to charge up the battery, when it is empty, but also to program the lock. Every hotel has its own random sitecode installed, which is used to encrypt/decrypt cards, program locks or open locks. This 32-bit key, however, is stored in the lock's memory and by connecting to the power socket, an attacker can extract the key. Moreover, the key is always stored on the same location and no authentication at all is needed to the extract the key.
More information can be found on Cody's website: http://daeken.com/blackhat-paper
More information can be found on Cody's website: http://daeken.com/blackhat-paper
Subscribe to:
Post Comments (Atom)
Hi Sir, You are really good writer.
ReplyDeleteNice post. Before finalizing your insurance policy educate yourself about it securitypitfalls.org. It is very helpful in using social media sites.I came across this site, it seems to contain very informative and nice information and also gives you an option to compare quotes about on The e-cig has been current for almost three years and is a amazing device focused at providing tobacco customers with a better option. Obviously also useful in assisting to reduce and indeed stop cigarette smoking tobacco completely. Are looking Buy e cigarette, V2 tobacco voucher & Green cigarette smoking tobacco coupon?
Thanks For Only You Create That cute Article.
Master lock-pick sets can be obtained online for not especially at all and these will make the entire procedure a great deal less demanding. which lock opens everything
ReplyDeleteI am unable to read articles online very often, but I’m glad I did today. This is very well written and your points are well-expressed. Please, don’t ever stop writing. PCs Folder Lock - Don't Spend Time Searching for, Read through Information On COMPUTER Devices On this page how to attach password protect pictures in outlook
ReplyDeleteThis article gives the light in which we can observe the reality. This is very nice one and gives indepth information. Thanks for this nice article. gt locksmith
ReplyDeletethink to win a round sum is unreal exclusive roulette online game here not. Come in and try your luck
ReplyDeletewow, awesome article.Really looking forward to read more. Fantastic. Locksmith Jacksonville FL
ReplyDeleteEach model of car has a remote explicitly intended for it. These are commonly accessible at neighborhood car sellers. used car dealerships near me
ReplyDeleteThe loss of an ignition key or a broken ignition key can really be a major hassle especially these days when most car keys are transponder keys with a chip inside. Locksmith Colorado Springs
ReplyDeleteMany locksmiths offer 24-hour residential locksmith services. They perform emergency keying services like lock picking and lock repair.Links Locksmith Services Jacksonville FL 23335
ReplyDeleteIf, you have lost your car keys, then you don’t have to panic. Rather, you need to call the locksmith and get relaxed because everything else can be handled by him with greater perfectness and ease.
ReplyDeleteThese are also used as a supplementary security feature on UPVC door, and fit between the sliding element of the door and the frame horizontally, stopping the door from being forced open.SubZero, Viking Refrigerator Repair Near Me
ReplyDeleteThese are not locksmiths by any means.Locksmith Gold coast
ReplyDeleteBeside offering types of assistance to vehicle proprietors, this kind of locksmith can likewise help home and entrepreneurs. key maker near me
ReplyDeleteInstalling proficient evaluation safes and vaults . Unlocking those equivalent safes and vaults when you lose or overlook the mix or codes. Installing claim to fame locks like edge chamber locks and business deadbolts . Schlüsseldienst Aachen
ReplyDeleteWe're here to produce long-term relationships with the clients when it comes to their mortgage. mortgage calculator canada You should think about applying on an investment property loan instead. mortgage payment calculator canada
ReplyDeleteI always like to read quality content having accurate information regarding the subject and the same thing I found in this post. Nice work.
ReplyDeleteDoor Locks In Dubai
At the point when the door was physically pushed or pulled, the inhabitant couldn't handle the development of the door, and coincidentally came to between squeeze focuses (mating areas of individual sectional boards) of the moving door. slotenservice rotterdam 010
ReplyDeleteLocksmith Dubai
ReplyDeleteThe primary goal of these purported 'modest locksmiths' is to go into your home and let you free from your resources. locksmith Sterling Heights
ReplyDeleteInquire as to whether there is a charge for mileage, or a base expense for an assistance call. locksmith Madison heights
ReplyDeleteBasically, emergency locksmiths should be ready to help even at the most awkward hours of the day. Navigate to the site
ReplyDeleteWe've discussed the small home repairs you can make to protect your home during hurricane season, but what about tenant improvement for businesses impact windows
ReplyDelete