How we hacked our office doorbell using Slack, MessageBird and Now

#1

Post by adriaanmol » Mon, Aug 20, 2018, 3:03 PM UTC

How we hacked our office doorbell using Slack, MessageBird and Now
blog.mollie.com

Re: How we hacked our office doorbell using Slack, MessageBird and Now

#2

Post by matteuan » Mon, Aug 20, 2018, 3:38 PM UTC

So wait a sec, do you open the door to anyone without checking who is it?

Re: How we hacked our office doorbell using Slack, MessageBird and Now

#3

Post by philip1209 » Mon, Aug 20, 2018, 3:43 PM UTC

matteuan wrote: post #2

So wait a sec, do you open the door to anyone without checking who is it?

Yeah, I feel like this needs to grab a screenshot from a security camera first, or perhaps ask the person why they are there and auto-transcribe the message to Slack with their request.

Re: How we hacked our office doorbell using Slack, MessageBird and Now

#4

Post by cjrp » Mon, Aug 20, 2018, 3:45 PM UTC

matteuan wrote: post #2

So wait a sec, do you open the door to anyone without checking who is it?

I was hoping it would take a screenshot of the doorbell video (assumed it was a Nest or Ring) and send that in the Slack message. v2.0 maybe?

Re: How we hacked our office doorbell using Slack, MessageBird and Now

#5

Post by hayksaakian » Mon, Aug 20, 2018, 3:45 PM UTC

matteuan wrote: post #2

So wait a sec, do you open the door to anyone without checking who is it?

That's the first thing I wondered. Seems like it defeats the purpose of the landlords system of verifying you actually want to open the door for the person there.

I suspect they'd be better off switching to a RFID / nfc swipe system

Re: How we hacked our office doorbell using Slack, MessageBird and Now

#6

Post by THE_PUN_STOPS » Mon, Aug 20, 2018, 4:03 PM UTC

matteuan wrote: post #2

So wait a sec, do you open the door to anyone without checking who is it?

If that’s true, then on top of that, they’ve now broadcasted that fact to the world. And they’re a payment services company.

Re: How we hacked our office doorbell using Slack, MessageBird and Now

#7

Post by parliament32 » Mon, Aug 20, 2018, 4:03 PM UTC

Considering you don't actually check who the person is, wouldn't it be easier to just leave the door unlocked during business hours?

KISS and all that...

Re: How we hacked our office doorbell using Slack, MessageBird and Now

#8

Post by Justin_K » Mon, Aug 20, 2018, 4:14 PM UTC

Did you hack it or just integrate to it?

Re: How we hacked our office doorbell using Slack, MessageBird and Now

#9

Post by Justin_K » Mon, Aug 20, 2018, 4:15 PM UTC

matteuan wrote: post #2

So wait a sec, do you open the door to anyone without checking who is it?

Seriously, may as well stick a wedge in the door during business hours, there's no difference.

Re: How we hacked our office doorbell using Slack, MessageBird and Now

#10

Post by quiq » Mon, Aug 20, 2018, 4:16 PM UTC

philip1209 wrote: post #3

matteuan wrote: post #2

So wait a sec, do you open the door to anyone without checking who is it?

Yeah, I feel like this needs to grab a screenshot from a security camera first, or perhaps ask the person why they are there and auto-transcribe the message to Slack with their request.

I think they would definitely also want to send ~5 seconds of the plain audio. Freely available speech to text probably wouldn't recognize local business names. But either way it's pretty inconvenient to ring a doorbell and wait ~30 seconds. You never realize how valuable a receptionist is until you don't have one.