The classification markings (U) are a nice touch :)
OpenSesame – A device that can open fixed-code garage doors in seconds
91–100 of 111 posts
Re: OpenSesame – A device that can open fixed-code garage doors in seconds
#92Earlier quoted context omitted.
While locks don't keep skilled criminals out, you'd be shocked how many unskilled ones there are. Meth/crackheads routinely go around twisting doorknobs in apartment complexes or pulling on car handles just hoping to find something unlocked so they can steal whatever is there. They (usually) don't break and enter, but if they happen upon an unlocked door they'll walk in and steal anything.
Not that this is a common attack, but to add to the stew - I knew a guy who left his leather jacket in his car, which was a soft-top convertable. The jacket thief simply sliced open the top and took the jacket. These days I just tell people to consider the inside of their car a public place, and never to leave anything in there that you wouldn't leave lying on your front fence or similar. There are simply too many wa…
A car is like a glass vault on wheels. That's at least two weaknesses right there.
Re: OpenSesame – A device that can open fixed-code garage doors in seconds
#93Earlier quoted context omitted.
Also, is strong security something people expect out of a garage door remote? It's never been a feature, as far as I can remember. Not that there isn't a market of people who do want for security in their remote, or would but don't yet know it...
Absolutely; everyone just assumes it's already secure, or at least as secure as the deadbolt on their front door.
Which is only as secure as the door frame it goes into, which usually means: pretty insecure.
Still, I agree with the premise that it's about assumptions, and if people can be made to realize that their garage door openers are inherently pretty insecure, and feel that that presents a substantial, then there's a market there. But until it becomes a problem that's common enough for media outlets to scare people about it, there probably isn't a large market yet.
(Any marketing plan for an endeavor like that should have a PR budget from day one, since that's exactly how such stories tend to become news segments.)
Re: OpenSesame – A device that can open fixed-code garage doors in seconds
#94Earlier quoted context omitted.
Bumping always mystified me, in a sense that as I've understood it its for pin tumbler locks, so why do people use them? Every place I've lived has had Abloy locks (which no doubt have their own problems), but as far as I know they at least can't be bumped.
Most people in the US have Schlage or Kiwkset deadbolt locks, or something similar to that. Bump keying them is trivial.
Kwikset has almost completely gone to their new SmartKey system, which uses wafers, and is harder to bump. It has other vulnerabilities, but bumping isn't one of them.
Re: OpenSesame – A device that can open fixed-code garage doors in seconds
#95Re: OpenSesame – A device that can open fixed-code garage doors in seconds
#96Earlier quoted context omitted.
Absolutely; everyone just assumes it's already secure, or at least as secure as the deadbolt on their front door.
Which is only as secure as the door frame it goes into, which usually means: pretty insecure. Still, I agree with the premise that it's about assumptions, and if people can be made to realize that their garage door openers are inherently pretty insecure, and feel that that presents a substantial, then there's a market there. But until it becomes a problem that's common enough for media outlets to scare people about i…
> Which is only as secure as the door frame it goes into, which usually means: pretty insecure.
But the door frame/deadbolt is still more secure than the remote controlled garage door because abusing the former mode of entry is more likely to draw concern from passers by and leaves a permanent record of your passage.
Re: OpenSesame – A device that can open fixed-code garage doors in seconds
#97Earlier quoted context omitted.
By the way it is very surprising a description of the 12-bit Genie protocol does not appear to exist online. Look at the datasheet for the IC they use. 2^12, as it's known, is a very common code and the ICs out there implement only a handful of variations on it. The other common variants are 3^9 (19683 codes), 3^12 (531441 codes) and 3^18 (387420489 codes).
The remotes I reverse-engineered were universal ones with generic MCUs, so their datasheets weren't useful: Skylink model 69 with an EM78P468N, and Skylink model 39 with an HT48R30A-1.
A bit of a shame that they used an MCU instead of an encoder/decoder ASIC, since they could've implemented something better. The fixed-code remotes I've seen use a standard IC like an HT12E.
If those weren't OTP/mask ROM, reflashing them with a different firmware (maybe even a simple rolling code?) could be an interesting exercise...
Re: OpenSesame – A device that can open fixed-code garage doors in seconds
#98Can't one just sniff the code from the airwaves with a GNU radio RF scanner? Not that it is as cool as brute forcing it in 8 seconds but in someways it seems simpler and more universal.
Re: OpenSesame – A device that can open fixed-code garage doors in seconds
#99Earlier quoted context omitted.
No housebreaker with an ounce of brains would use a lock pick before trying a bump key first. The locks on your house are almost certainly bumpable. The locks at your workplace might be more secure. That's fine, though. If you make the lock on your front door more secure, the weak point is now the latching mechanism, the door frame, or the door itself. Or perhaps it is your sliding patio door, that can be levered. Ma…
> The thing that saves most people is that there is really nothing worth stealing in their house Agreed. I lived in a houseshare a couple of years ago where the housemates didn't want to chip in for contents insurance. At first I was shocked, and thought about paying the whole house premium myself, but then I actually thought about it properly for the first time and realised that the sheer difficulty of removing and…
Except when your house burns down or floods.
Re: OpenSesame – A device that can open fixed-code garage doors in seconds
#100Very interesting. I used to work with an older gentlemen who did RF comms in the military and back in early 2000s he used to tell me stories about his random RF hacking. One such story was around a garage door opener he modified with a potentiometer so he could test opening frequencies by rotating the dial. Obviously this wouldn't work for the "newer" style openers. I've recently purchased a HackRF to start to learn…
Because "Real Men Carry Pink Pagers"[1]