Hacking your apartment's electronic entry system • Hacker News Board

Re: Hacking your apartment's electronic entry system

#31

Post by euroclydon » Thu, Feb 24, 2011, 12:52 PM UTC

patio11 wrote: post #13

You can do this a wee bit more securely than "Let anybody in", too. Ten minutes of work and you can give your script state, letting it do things like e.g. accept a text message or web interface request to let anyone in for the next ten minutes. I was considering implementing Port Knocking 2.0 on my server(s) for giggles: permit SSH logins without a key for ten minutes after calling a number and keying in a password.…

I guess you regen ssh keys after accessing your server from a cafe?

Re: Hacking your apartment's electronic entry system

#32

Post by jberryman » Thu, Feb 24, 2011, 1:52 PM UTC

pmcginn wrote: post #9

Would putting the MP3 on your phone and playing it into the entrypads mic get you in as well? I'm picturing waling up to any apartment building, choosing an apartment number at random, and then just playing the MP3 when someone answers (or when voicemail picks up.)

I'm sure some systems are vulnerable to this (although the mic might mangle the DTMF). After all until the late 80s the entire phone system was vulnerable to these kinds of attacks because it used in-band signaling

http://en.wikipedia.org/wiki/Blue_box

Re: Hacking your apartment's electronic entry system

#33

Post by nollidge » Thu, Feb 24, 2011, 2:15 PM UTC

gommm wrote: post #25

I'm sorry to be pedantic, but please use capital letters where needed. I found it rather difficult to read...

Weird, I didn't even notice the lack of capitals until you pointed it out. I wonder if it's because of all the AIM I did during my formative years.

Re: Hacking your apartment's electronic entry system

#34

Post by caryme » Thu, Feb 24, 2011, 4:14 PM UTC

TimothyBurgess wrote: post #22

caryme wrote: post #15

I actually implemented this idea using Twilio almost a year ago and have been using it actively ever since. I give my close friends 4-digit PIN numbers to my condo. When someone dials my number in the directory, it first prompts them for a PIN. If they enter a valid PIN, it welcomes them by name (my friends love this) and unlocks the door. If they enter an invalid PIN or no PIN, Twilio rings my and both my roommates'…

Any particular reason you haven't turned this into a startup?

Mostly time at this point, but I also wasn't sure if there would be interest. I should have some more free time this spring... maybe I'll work to get an MVP out then? I'll let y'all know.

Re: Hacking your apartment's electronic entry system

#35

Post by Raesan » Thu, Feb 24, 2011, 6:05 PM UTC

I did something similar with Google Voice. I created a new voicemail greeting of the tone and calls from the apartment's callbox are sent straight to voicemail with that greeting.

You have to hold your phone next to the speakers on my computer and record the greeting by playing the tone since the tone you get from pressing the number on your phone isn't picked up by Google Voice, for whatever reason.

Re: Hacking your apartment's electronic entry system

#36

Post by gkoberger » Thu, Feb 24, 2011, 6:14 PM UTC

TimothyBurgess wrote: post #22

caryme wrote: post #15

I actually implemented this idea using Twilio almost a year ago and have been using it actively ever since. I give my close friends 4-digit PIN numbers to my condo. When someone dials my number in the directory, it first prompts them for a PIN. If they enter a valid PIN, it welcomes them by name (my friends love this) and unlocks the door. If they enter an invalid PIN or no PIN, Twilio rings my and both my roommates'…

Any particular reason you haven't turned this into a startup?

I applied to YC with this exact idea, and didn't get in. Of course, there are a lot of factors- but I guess it was an idea they didn't love.

http://www.getdoorman.com/ (Not really coming soon anymore :) )

Re: Hacking your apartment's electronic entry system

#37

Post by tastybites » Thu, Feb 24, 2011, 6:31 PM UTC

caryme wrote: post #34

TimothyBurgess wrote: post #22

Earlier quoted context omitted.

Any particular reason you haven't turned this into a startup?

Mostly time at this point, but I also wasn't sure if there would be interest. I should have some more free time this spring... maybe I'll work to get an MVP out then? I'll let y'all know.

I would buy it! You could charge per-usage too, since most people don't have an unlimited stream of people coming to their apartment every month.

I'm not sure how the phone # allocation works but I imagine the biggest challenge is getting local #'s for people who don't have google voice or whatnot.

Re: Hacking your apartment's electronic entry system

#38

Post by athom » Fri, Feb 25, 2011, 7:00 AM UTC

jazzychad wrote: post #18

athom wrote: post #7

Earlier quoted context omitted.

Maybe written by a cockroach?

Just wanted to say that this reference made my day. My grandfather introduced me to Archy several years ago, and I have yet to find anyone else that knows about him. and so I don't get downvoted for a comment with no substance, if you don't get the reference, try googling "archy and mehitabel"

I half expected to get downvoted for the obscure comment myself, but decided, it's worth it! ;)

Glad to see it caught a few knowing eyes, after all!