• 0 Posts
  • 17 Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle
  • ive used smart light bulbs in a botnet before

    Yeah that’s why I never mentioned WiFi ones. Which can still be secured by not letting them access the rest of the network or the internet. That’s what we do in industrial automation, security standards for PLC software tend to suck, but that’s irrelevant if it can’t be reached.

    and if you do a teardown on one of those locks you can probably get the firmware and uart to get the unlock function which you could use theoretically to unlock every single one

    I don’t see how that’s relevant for a lock that’s inside an armoured door, it’s only accessible by disassembling the door, at which point unlocking it is moot.







  • ZigBee, Z-wave and Thread have virtually 0 attack surface from an IoT perspective, and even then what are they gonna do, do radio hacking to turn off and on my lights? It’s not like they can be used in a botnet.
    Locks is a bit more risky as an endeavor, but again, it’s probably easier to pick the lock than hack it… Actually with the quality of many smart locks, smashing them is easier still.

    Smart TVs are way more problematic devices for example, as soon as they stop receiving updates, you have a bunch of high-speed internet connected devices with unresolved exploits just sitting there waiting for the right chance.


  • I was considering a smart lock for my (armored) front door, but just because there are some locks manufactured here in Italy that can be set to be controlled by external contacts.
    Which means I could use and ESP or similar with esphome, now they also support wired, ethernet ones.
    That’s way more secure than the shitty lock I have now, I’ve seen videos of people picking that with a decoder device in 30 seconds.