Live data from Hacker News

OpenSesame – A device that can open fixed-code garage doors in seconds

samy.pl

51–60 of 111 posts

Re: OpenSesame – A device that can open fixed-code garage doors in seconds

#51
post #50
post #18

Three weeks ago I reverse-engineered my garage door opener wireless protocol. I probed the remote's PCB with a Saleae logic analyzer and found it was a 12-bit code ASK-modulated at 390 MHz with bits encoded as sequences of 10 kHz and 20 kHz pulses. I bought a $13 spare remote to hack it and control the RF transmitter section from my computer through an FT232 sending the ASK signal. I just cut off the digital signal t…

Somewhat of a tangent, but I am concerned about the MITM attack on car locks [1]. This kind of attack is being used in my neighborhood in Oakland, California and no doubt other places. I read the reports of "someone is breaking into my car but no windows/locks are broken". Then a couple other people on NextDoor chime in with the same thing and one person reports a woman who is walking around the neighborhood and appe…

I don't think so, as far as I know a garage door opener has to be activated (you press the button) so that exact attack won't work.

Re: OpenSesame – A device that can open fixed-code garage doors in seconds

#52
post #7
post #4

Which should I consider more insecure: my garage door, or the deadbolt on my front door? I wonder how commonly lock picking is used in crimes. I've picked a lock before myself, but I have no real idea how effective locks are in stopping people that want to commit house thefts. I expect an automated garage door opener is much easier to use than a lock pick though, and probably easier to produce and distribute than loc…

My parents did the thing where they put keyed deadbolts on all of the doors. So when someone wanted to break in they broke the glass on the door, discovered the deadbolt, broke the glass on another door and discovered the deadbolt, then broke the glass on a third door before yet again being foiled by the deadbolt. Then they broke a window and stole our stuff anyway. Apparently they were professional thieves too, sinc…

Seriously, a dog[1] apparently is a way better security system.

[1] Big dogs are not afraid, thus they sleep at night if not properly trained. Small dogs (especially Yorkshires) are the most bad-ass security system I've encountered. They bark on anything alive that comes into 0.5miles circumference.

Re: OpenSesame – A device that can open fixed-code garage doors in seconds

#53
post #18

Three weeks ago I reverse-engineered my garage door opener wireless protocol. I probed the remote's PCB with a Saleae logic analyzer and found it was a 12-bit code ASK-modulated at 390 MHz with bits encoded as sequences of 10 kHz and 20 kHz pulses. I bought a $13 spare remote to hack it and control the RF transmitter section from my computer through an FT232 sending the ASK signal. I just cut off the digital signal t…

A friend who lives in a wealthy neighborhood here had their garage broken into electronically more than 10 years ago. So clearly some people have known about it for a while. The local police claim the thief probably "listened" to their garage door opener open the door at least once to get in, as opposed to brute forcing it.

Re: OpenSesame – A device that can open fixed-code garage doors in seconds

#55
post #52
post #7

Earlier quoted context omitted.

My parents did the thing where they put keyed deadbolts on all of the doors. So when someone wanted to break in they broke the glass on the door, discovered the deadbolt, broke the glass on another door and discovered the deadbolt, then broke the glass on a third door before yet again being foiled by the deadbolt. Then they broke a window and stole our stuff anyway. Apparently they were professional thieves too, sinc…

Seriously, a dog[1] apparently is a way better security system. [1] Big dogs are not afraid, thus they sleep at night if not properly trained. Small dogs (especially Yorkshires) are the most bad-ass security system I've encountered. They bark on anything alive that comes into 0.5miles circumference.

>They bark on anything alive that comes into 0.5miles circumference.

Which means you get so many false positives that you quit taking them seriously.

Re: OpenSesame – A device that can open fixed-code garage doors in seconds

#56
post #16

Might as well post a more direct link: http://samy.pl/opensesame/

Thanks, we updated the link from https://threatpost.com/using-a-toy-to-open-a-fixed-code-gara... .

Strangely the old link works fine for me, but the new one is blocked by my workplace's McAfee filter/firewall.

Re: OpenSesame – A device that can open fixed-code garage doors in seconds

#57
post #18

Three weeks ago I reverse-engineered my garage door opener wireless protocol. I probed the remote's PCB with a Saleae logic analyzer and found it was a 12-bit code ASK-modulated at 390 MHz with bits encoded as sequences of 10 kHz and 20 kHz pulses. I bought a $13 spare remote to hack it and control the RF transmitter section from my computer through an FT232 sending the ASK signal. I just cut off the digital signal t…

>>> I wonder if there could be commercial interest in cryptographically secure garage door openers? Probably not. Mainly because breaking a window or crowbarring a door is a lot less expensive and a lot faster.

Was thinking about making the same comment. People throw cinderblocks here to get garage doors open. Until recently, we deliberately kept ours unlocked (if we're going to get burglarized, at least we'd like to keep the doors on the hinges).

Re: OpenSesame – A device that can open fixed-code garage doors in seconds

#58
post #17

Earlier quoted context omitted.

Exactly. Lots of people don't realize that most of their door locks are there to keep "normal" people out, because dedicated criminals are typically going to find a way in.

Locks keep honest people honest.

...and dishonest people untempted.

Re: OpenSesame – A device that can open fixed-code garage doors in seconds

#59
post #56
post #16

Earlier quoted context omitted.

Thanks, we updated the link from https://threatpost.com/using-a-toy-to-open-a-fixed-code-gara... .

Strangely the old link works fine for me, but the new one is blocked by my workplace's McAfee filter/firewall.

Not really surprised... Samy's website is full of borderline-blackhat material. One might even say that it's his specialty.

Re: OpenSesame – A device that can open fixed-code garage doors in seconds

#60
post #3

> It may be time to upgrade your garage door opener. If you're worried about this, make sure your garage door can't be opened with a coat hanger as well: http://lifehacker.com/5549366/how-to-unlock-your-garage-door... Also most of your door locks can probably be opened in a few seconds with the right tools+experience: http://en.wikipedia.org/wiki/Lock_bumping#Use_by_criminals http://www.carkeywholesale.com/wholesale/…

Bumping always mystified me, in a sense that as I've understood it its for pin tumbler locks, so why do people use them? Every place I've lived has had Abloy locks (which no doubt have their own problems), but as far as I know they at least can't be bumped.
Post reply on HN