Live data from Hacker News

Trying Out Flipper Zero

twitter.com

91–100 of 109 posts

Re: Trying Out Flipper Zero

#91
post #82

By buying Flipper Zero you are sending money to russia, indirectly funding terrorist invasion of Ukraine. :/

During the American invasion of Afghanistan and Iraq, I was a founder of an American company. Using your logic, you could say I indirectly funded the invasion of those countries, since international customers were sending my company money.

What sort of terrorist invasions have you indirectly funded?

Re: Trying Out Flipper Zero

#92
post #87

Earlier quoted context omitted.

I'm confused about the "for no reason" part then. I get a lot of value from not having to physically approach my car and use a key to unlock or start it.

Just to steel man the argument, I think what the parent might mean is that when you move from something that used to be physical security only (a regular key) to something that is now both physical and over radio, or worst case radio only, you are introducing a new medium and because of that you're also introducing a lot of new attack vectors and vulnerabilities. Presumably the argument is that the benefits you get f…

If the argument is that the risks of adding an additional access mechanism outweigh the benefits, I would tend to disagree, but I understand the argument. But since the original comment stated "for no reason," I'm confused about what argument is being made.

Re: Trying Out Flipper Zero

#93

Earlier quoted context omitted.

> tons of tech now relies on radio garbage for no reason, especially car keys. I'm curious what you mean by "radio garbage" and "for no reason."

For instance, car keys.

>For instance, car keys.

Have you ever owned a push button start vehicle? It is a strictly superior UX.

Re: Trying Out Flipper Zero

#94
post #49

Earlier quoted context omitted.

> everyone installs pick resistant locks instead of cheaper alternatives. What geographic area? In the northeast US I've noticed that the cheap, easy to pick locks seem to dominate.

How would you even tell? Is there some kind of independent certification of pick resistance? Of course all lock companies will say that their lock is secure.

Based largely on the keys and certain brands and easily recognizable kinds of lock (e.g., kwikset). Even in commercial buildings the default often seems to be cheap locks.

Re: Trying Out Flipper Zero

#95
post #10

Earlier quoted context omitted.

Do those arguments really hold up though? I get that these devices are sort of the “messenger” in “don’t shoot the messenger”, but still. Security is about appropriate security. A general teenager or thief wanting to cause issues would not know what to do with an SDR and laptop, versus something like the Flipper making it point and click. So now that something is made so readily available, we need to increase the cos…

> A general teenager or thief wanting to cause issues would not know what to do with an SDR and laptop, versus something like the Flipper making it point and click. This is where the story falls apart. I own both a HackRF One and a Flipper. I thought it would be a great teaching tool for my kids to show them physical world insecurities. While it's a great device it's nowhere near as potent as the HackRF as a real too…

> If anything I hope the Flipper pushes the likes of physical access systems manufacturers / integrators to be questioned on why their systems fail to authorize access correctly against trivial attacks.

That's a good point on it moving the needle where there's reason and capability to.

Re: Trying Out Flipper Zero

#96
post #85
post #82

By buying Flipper Zero you are sending money to russia, indirectly funding terrorist invasion of Ukraine. :/

FYI, their CEO is Ukrainian

https://twitter.com/zhovner/status/1333526964771184647 They are located in Moscow. Money goes directly to Russia/Moscow. This is why their funds and shipments were frozen.

Re: Trying Out Flipper Zero

#97
post #69

Earlier quoted context omitted.

if your security model can't stand up to teenagers with plenty of time, it might be time to reconsider it.

I was more addressing the idea that the Flipper device, while cool, seems to stand to do more harm than good by making its functionality so readily available to a wide class of people. Yes, it is generally a good idea to not oversupply teenagers with things that do things they otherwise couldn't but do harm. Cars are trivially broken into. Increasing the safety of the locking mechanism would do some good but not prev…

> There is a lot of security that relies on things simply being inconvenient.

Good, this will hopefully lead to less of that.

edit: Like Firesheep, as my sibling comment pointed out.

Re: Trying Out Flipper Zero

#99
post #10

People and companies that are attacking the device because it makes unlocking certain things easy should realize that the issues is not the device but the antiquated vehicles/door locking system that basically uses obscurity for it's security. If you can unlock your car with the flipper zero you can also do it with a ~100 USD SDR and an old laptop.

Do those arguments really hold up though? I get that these devices are sort of the “messenger” in “don’t shoot the messenger”, but still. Security is about appropriate security. A general teenager or thief wanting to cause issues would not know what to do with an SDR and laptop, versus something like the Flipper making it point and click. So now that something is made so readily available, we need to increase the cos…

> Is there an easy solution to improve locks on cars?

Expose their flaws and let the manufacturers properly mitigate their creation.

Re: Trying Out Flipper Zero

#100
post #13

Earlier quoted context omitted.

Ah yeah, probably. Misread it. I didn’t sleep that well. :)

I hope you'll recover during the day! Take it easy :)

Finished my 10mi run and relaxed the rest of the day! Not the greatest day but we work with what we have. Haha.
Post reply on HN