Gosh, you can tell he really hates the Flipper.
This from a fellow who posts on Twitter using his Mastodon Social account handle. I don't get the point.
Trying Out Flipper Zero
61–70 of 109 posts
Re: Trying Out Flipper Zero
#62> people will write that the Flipper can't be used for jamming. I've bad news. I will not explain what I did, but I tried to implement an attack to prevent my key from opening my car and I successfully had this jammer working at quite a distance (10 meters). That's not good, and script kiddies should be away from this techniques.
What's not good is that tons of tech now relies on radio garbage for no reason, especially car keys.
Re: Trying Out Flipper Zero
#63People and companies that are attacking the device because it makes unlocking certain things easy should realize that the issues is not the device but the antiquated vehicles/door locking system that basically uses obscurity for it's security. If you can unlock your car with the flipper zero you can also do it with a ~100 USD SDR and an old laptop.
Do those arguments really hold up though? I get that these devices are sort of the “messenger” in “don’t shoot the messenger”, but still. Security is about appropriate security. A general teenager or thief wanting to cause issues would not know what to do with an SDR and laptop, versus something like the Flipper making it point and click. So now that something is made so readily available, we need to increase the cos…
Yes it holds up. Those poor billion dollar companies selling stuff with critical flaws should have been fined many decades ago (all the issues talked about in this tweet are literally 20 years old, I can probably go find a Defcon video from 20 years ago where they exploit the same bugs on the top 5 vehicle vendors).
> A general teenager or thief wanting to cause issues would not know what to do with an SDR and laptop, versus something like the Flipper making it point and click
This is just your imagination. Flipper is barely less obscure than running some scripts on a Linux laptop, both of which general teens can do.
Re: Trying Out Flipper Zero
#64Earlier quoted context omitted.
Your average teenager or thief won't know how to pick a lock either, yet everyone installs pick resistant locks instead of cheaper alternatives. Yes. Your security might have been good enough, but world moves on. Back in the day Triple DES was good enough, but you are very irresponsible if you use it today. I get that whenever you are looking anything from inside the industry there is constant need to make processes…
> everyone installs pick resistant locks instead of cheaper alternatives. What geographic area? In the northeast US I've noticed that the cheap, easy to pick locks seem to dominate.
How would you even tell?
Is there some kind of independent certification of pick resistance?
Of course all lock companies will say that their lock is secure.
Re: Trying Out Flipper Zero
#65> people will write that the Flipper can't be used for jamming. I've bad news. I will not explain what I did, but I tried to implement an attack to prevent my key from opening my car and I successfully had this jammer working at quite a distance (10 meters). That's not good, and script kiddies should be away from this techniques. What's not good is that tons of tech now relies on radio garbage for no reason, especial…
> tons of tech now relies on radio garbage for no reason, especially car keys.
I'm curious what you mean by "radio garbage" and "for no reason."
Re: Trying Out Flipper Zero
#66People and companies that are attacking the device because it makes unlocking certain things easy should realize that the issues is not the device but the antiquated vehicles/door locking system that basically uses obscurity for it's security. If you can unlock your car with the flipper zero you can also do it with a ~100 USD SDR and an old laptop.
All the car locks can be opened by force using hammer, and in theory it should be equally illegal to force open as to use flipper. But in practice it gives plausible deniability if say a kid could use a toy like thing with some script downloaded from internet versus a guy breaking car window. Flipper kind of looks like a learning tool used for hacking, while SDR method seems like hacking tool that could be used for l…
[flagged]
Re: Trying Out Flipper Zero
#67Tee product quality of the Flipper Zero, including the packaging and the unboxing experience, is incredible. I just got mine a couple of weeks ago and have used it every day. I've done things ranging from analyzing and emulating at the hotel keys at the NY hotel I stayed in the week of the 19th, to turning off the TV sets in the airport lounge on the way back home.
Re: Trying Out Flipper Zero
#68> people will write that the Flipper can't be used for jamming. I've bad news. I will not explain what I did, but I tried to implement an attack to prevent my key from opening my car and I successfully had this jammer working at quite a distance (10 meters). That's not good, and script kiddies should be away from this techniques. What's not good is that tons of tech now relies on radio garbage for no reason, especial…
> tons of tech now relies on radio garbage for no reason, especially car keys. I'm curious what you mean by "radio garbage" and "for no reason."
For instance, car keys.
Re: Trying Out Flipper Zero
#69Earlier quoted context omitted.
> and in regard to the parent comment mentioning teenagers: They are exactly the group that needs the Flipper least because they have might not have money but they often have plenty of time. That was my point.
if your security model can't stand up to teenagers with plenty of time, it might be time to reconsider it.
I was more addressing the idea that the Flipper device, while cool, seems to stand to do more harm than good by making its functionality so readily available to a wide class of people. Yes, it is generally a good idea to not oversupply teenagers with things that do things they otherwise couldn't but do harm.
Cars are trivially broken into. Increasing the safety of the locking mechanism would do some good but not prevent. This is what I was referring to by appropriate. Maybe that weakens my argument about at least considering the Flipper as a potentially harmful device, but the Flipper can do a lot of things.
There is a lot of security that relies on things simply being inconvenient.
Re: Trying Out Flipper Zero
#70[flagged]