David Bombal : Flipper Zero Hacking

Watch on YouTube

A quick, practical demonstration of Hypponen's Law. If it's smart, it's vulnerable. Without knowing anything about the Flipper Zero device, I'm guessing it's being used to perform a replay attack on the bike lock. If I'm right, it recorded the unlock signal sent from the legitimate remote control for the lock and then transmitted the same signal it recorded at the press of a button.

Jerry Rig Everything : DO NOT buy this $100 Smart lock

Watch on YouTube

It's always good to know if the things you're buying are going to do their job, especially if their job is to protect you or your belongings. Clearly this isn't something you want to rely on for anything valuable enough to warrant a $100 lock.

How dumb can a smart lock be?

from here (image source)

Apparently there are all sorts of ways in which a smart lock can be dumb. I think I'll stick with dumb locks for now.

Breaking Into a Smart Home With A Laser - Smarter Every Day

Watch on YouTube

This demonstration is great for a couple of reasons. It demonstrates a complex security vulnerability in a way that ordinary people can connect with, but it's also careful not to hype up the threat and gives some solid recommendations on countermeasures.

Better living through power tools

from here

Unfortunately it appears that the KeyWe smart lock has software vulnerabilities that can be exploited by an attacker. Even more unfortunate is the fact that the software (firmware really) can't be updated, so the mistake that makes them vulnerable can't be fixed or patched. One may argue that the only way to deal with the problem is to remove them and replace them with a traditional lock, but if they already accept a traditional key it seems like a well placed hole through some computer chips could eliminate the avenues of attack the vulnerability opens up.