Live data from Hacker News

Picking the FB50 smart lock

icyphox.sh

51–60 of 67 posts

Re: Picking the FB50 smart lock

#51
post #3

Losing access to a lock is bad stuff. I went with a smart lock that has a physical key. The article says don't buy a smart-lock, but the convenience of having one-time access codes, scheduled access, delivery access, and linked to a security camera make the downsides (increased attack vectors) something I'm willing to live with.

Tangentially related tip: Inside most modern car keyfobs there is an "emergency" physical key...or should be (recently saw one where the space was empty as the dealer had failed to include it) It's not marked or obvious from the outside of most I have seen and some prying in some innocuous looking seam will be needed. One of those things that seems obvious once you know it but may not have run across.

In my experience, there's usually a subtle release mechanism or button that you need to squeeze and the physical key will slide out readily.

On some of mine, the physical key is also the pry-tool used to open the body of the fob for battery changing. :)

On my Toyota, this mechanical key can be used to lock the doors while the engine is running (pitstop mode), which is otherwise not possible. On my friend's Mercedes, it does not respond to the mechanical key (wait, what?) while the engine is running.

Re: Picking the FB50 smart lock

#52
post #46

Earlier quoted context omitted.

LPL is an amazing lock picker, anyone with this level of skill is much better off working as a locksmith or a security consultant. Most B&E’s aren’t exactly executed by master thieves they aren’t single pin picking your locks. When selecting a door lock or a pad lock you should care only that it can be raked or bypassed, for bike locks you should also care that it can’t be easily cut. For the most part your door is l…

Many people even install glass windows.

Smashing a window is unnessecary noise.

I've been burgled 4 times in my life, all 4 were either jimmied window or jimmied door (usually a screwdriver as a prying tool).

Re: Picking the FB50 smart lock

#53
post #33
post #31

Earlier quoted context omitted.

> Why is a WiFi lock so bad? Scalability. Once you know how to pick one, you can pick them all quickly and remotely. Kicking down a door or picking a physical lock takes time and effort and exposes you to scrutiny while doing it.

Picking a lock remotely seems rather pointless.

Lock Picking as a Service?

I can imagine someone cracking these locks en masse, then setting up a website to sell the fruits of their labour. A local thief could log into a website, provide a street address and pay a fee, and the lock will be remotely unlocked.

Re: Picking the FB50 smart lock

#54

I’ve been getting into home automation recently and I’ve given myself a rule: nothing cloud connected. If I can’t run it off my local server, I don’t want it. I have much more motivation to secure my home than any company ever will.

Exactly. I have hard time finding automated vacuum cleaner that doesnt connect to cloud, do you have some suggestion for vacuum cleaner that doesnt suffer on features?

Re: Picking the FB50 smart lock

#55

> DO NOT. Ever. Buy. A smart lock. You’re better off with the “dumb” ones with keys. Well, physical locks are not necessary harder to pick lock than electronic locks. Buy your self a pick lock set, practice a bit and be amazed how many locks you can pick.

I think you'll be surprised. You should watch some of these videos: https://www.youtube.com/channel/UCm9K6rby98W8JigLoZOh6FQ - choose any one of his videos. It'll be picked in under a minute.

Lockpickinglawyer is an absolute expert in his field though.

There's a difference between using a lock that requires an expert to pick, vs a smart lock that requires an expert to write an app that anyone can use to hack the lock.

Re: Picking the FB50 smart lock

#56
post #52
post #46

Earlier quoted context omitted.

Many people even install glass windows.

Smashing a window is unnessecary noise. I've been burgled 4 times in my life, all 4 were either jimmied window or jimmied door (usually a screwdriver as a prying tool).

4 times? Where do you live just out of interest?

Re: Picking the FB50 smart lock

#57

I’ve been getting into home automation recently and I’ve given myself a rule: nothing cloud connected. If I can’t run it off my local server, I don’t want it. I have much more motivation to secure my home than any company ever will.

Yup, totally agree. One thing I have found is that many of these devices use the venerable and cheap ESP8266 chip which is extraordinarily easy to hack. It can't really be factory flashed so the programming pins are almost always padded out on the PCB. So I get WeMo or cheap knock offs for example, and reflash 'em with my own code so it basically is only on my wifi network.

Re: Picking the FB50 smart lock

#58

> DO NOT. Ever. Buy. A smart lock. You’re better off with the “dumb” ones with keys. Well, physical locks are not necessary harder to pick lock than electronic locks. Buy your self a pick lock set, practice a bit and be amazed how many locks you can pick.

I think you'll be surprised. You should watch some of these videos: https://www.youtube.com/channel/UCm9K6rby98W8JigLoZOh6FQ - choose any one of his videos. It'll be picked in under a minute.

I happen to like a challenge, and I can say through experience that picking any modern reasonably priced lock is not something you learn in a week. Besides, the vast majority of burglars do not pick locks - they pry open doors or windows, and if they cannot they either find a different house or break a window.

Re: Picking the FB50 smart lock

#59
post #54

I’ve been getting into home automation recently and I’ve given myself a rule: nothing cloud connected. If I can’t run it off my local server, I don’t want it. I have much more motivation to secure my home than any company ever will.

Exactly. I have hard time finding automated vacuum cleaner that doesnt connect to cloud, do you have some suggestion for vacuum cleaner that doesnt suffer on features?

Afaik, the Roomba can be used totally offline with Home Assistant and the like.

Not sure if all versions can be made to do this or just some.

Re: Picking the FB50 smart lock

#60
post #32

I’ve been getting into home automation recently and I’ve given myself a rule: nothing cloud connected. If I can’t run it off my local server, I don’t want it. I have much more motivation to secure my home than any company ever will.

After my internet was cut for five days and my smart house became super dumb, I adopted that rule too. I'd love to know what products you are using.

I have lots of Tradfri Ikea products. They are officially designed to work offline.

Otherwise zigbee and z-wave products mostly work completely offline.

Some Xiaomi products (you need to be careful, as not all work offline) work offline and can be connected to local servers.

For shutters I use products by Rademacher. Its yet another base station (by now I have 4...), but they can be connected over http locally.

Post reply on HN