Live data from Hacker News

Drilling open a smart door lock in 4 seconds

pentestpartners.com

71–80 of 145 posts

Re: Drilling open a smart door lock in 4 seconds

#71

Easier way to open a smart door lock in 3 seconds...use a hooligan tool[1]. For $150 USD a SWAT team(or someone who practices for a few hours) can be in your room in no time. [1] https://en.wikipedia.org/wiki/Halligan_bar

Sure but that entry is then really a lot more obvious. The kind of small hole they propose to drill here might not get noticed by a security guard doing the rounds, and would offer the ability for repeated near-covert entry.

Re: Drilling open a smart door lock in 4 seconds

#72

Slightly related to this, the Lock Picking Lawyer on Youtube has number of videos where he tries a Ramset gun [1] against different padlocks. For example: https://youtu.be/Wimo09WV-rY This was interesting as it was an attack that certainly would not have crossed my mind. Would be interesting to see how other types of locks would do against this kind of tool. [1] https://www.homedepot.com/p/Ramset-MasterShot-0-22-Cali…

His most unusual attack may have been using Gallium to break the aluminum body of a lock:

https://www.youtube.com/watch?v=jeghGhVdt9s

Re: Drilling open a smart door lock in 4 seconds

#73
post #48

Earlier quoted context omitted.

He's got a couple of videos using it in different ways and it doesn't look like it would be too difficult to brace a lock in some way to use it, like using the tension in the chain or hasp it hangs from. But you're right, in some circumstances it probably would work. Seems dangerous though, both in debris flying off and even more so since it looks like a gun.

"since it looks like a gun" There are models that don't. https://www.homedepot.com/p/Ramset-HammerShot-0-22-Caliber-S...

It basically is a gun though

"this technology relies on a controlled explosion created by a small chemical propellant charge, similar to the process that discharges a firearm"

https://en.m.wikipedia.org/wiki/Powder-actuated_tool

Re: Drilling open a smart door lock in 4 seconds

#74
post #32
post #22

Earlier quoted context omitted.

My pet peeve is smart dead bolts. Presumably if you have a dead bolt you are worried enough about security to pay for a lock that's stronger and harder to subvert than a normal door knob lock. After all using 2 keys/locks is a hassle every time you open the door. Presumably because you don't want anyone with a shim/credit card to just pop your latch. Most would expect a dead bolt to survive a 5 second attack from a 1…

I (and I assumed everyone with a dead bolt) only ever lock the dead bolt. What's the point of locking the door handle if there is a dead bolt?

When someone is trying to break into a house, they might have to do it fast, so that they don't get noticed. If they need to pick two locks instead of one, it's costing them twice the time, so by locking the handle in addition to the deadbolt, you're increasing your security by making your door a bit more of a pain for someone to break into.

Re: Drilling open a smart door lock in 4 seconds

#75
post #38

Earlier quoted context omitted.

Essentially everyone has stolen at some point in their lives, and almost everyone has gone into private property they theoretically shouldn't have gone into. My door has a lock, but must adults could get in by kicking it a few times with determination. That's true of most locks in existence. They're there to stop people who don't actually want to cause any real damage.

> Essentially everyone has stolen at some point in their lives Isn't this a fairly wild claim? I've never stolen anything and can't imagine doing so. That's a pretty dismal view of the human race isn't it.

Ikea pencils?

Re: Drilling open a smart door lock in 4 seconds

#76
post #53

Turns out powers tools work well on non-Turing complete locks too. The interesting part of the threat model for smart locks are cases where a physical attacker is _not_ present.

It does, and the physical lock makers know about this threat. My lock has a freely rotating piece of metal that covers the keyhole - you cannot drill through it without first preventing it from rotating.

More advanced locks jam when drilled through. There are also materials that emit lots of smoke when drilled through, mostly used in safes.

Re: Drilling open a smart door lock in 4 seconds

#77
post #15

Earlier quoted context omitted.

Maybe if you live in Baltimore or Detroit but in most of the US people really need a good reason to do that kind of thing. In college I had a friend who didn't even bother locking his door and always left his keys in his car and it was never a problem.

I live in a very low crime area, yet even in my sleepy neighborhood (semi rural), we had a break-in a couple years before buying our house. It turned out to be a couple of teenagers that wanted some quick cash (probably for drugs). That was the only break-in for years, and there hasn't been one for the several years I've lived in my house, so you never know when someone will try to steal something. That being said, a…

It still isnt clear to me that at this level that locking your door is a win.

If they break in you still have to pay to repair the damage and the things they've taken.

I'm fairly certain, if someone broke into my house, the biggest bill would be repairs, not replacements.

Re: Drilling open a smart door lock in 4 seconds

#78

Slightly related to this, the Lock Picking Lawyer on Youtube has number of videos where he tries a Ramset gun [1] against different padlocks. For example: https://youtu.be/Wimo09WV-rY This was interesting as it was an attack that certainly would not have crossed my mind. Would be interesting to see how other types of locks would do against this kind of tool. [1] https://www.homedepot.com/p/Ramset-MasterShot-0-22-Cali…

His magnetic attack[1] on a common commercial lock that's no longer in use was entertaining too.

[1] https://www.youtube.com/watch?v=cCay5ek_cW0

Re: Drilling open a smart door lock in 4 seconds

#79
post #38

Earlier quoted context omitted.

> Essentially everyone has stolen at some point in their lives Isn't this a fairly wild claim? I've never stolen anything and can't imagine doing so. That's a pretty dismal view of the human race isn't it.

I don’t think they’re suggesting that everyone on earth has purposefully become a thief at one point, but that sometimes it just happens. I’ve definitely walked out of a supermarket with a bottle of water that I picked up while shopping and forgot to pay for - I still stole it, even if unintentionally.

> I’ve definitely walked out of a supermarket with a bottle of water that I picked up while shopping and forgot to pay for - I still stole it, even if unintentionally.

You only steal it if you realize it and don't return back to pay. Happened with me a few times, the cashiers will really appreciate it.

Post reply on HN