Forums
New posts
Search forums
What's new
New posts
New media
New media comments
Latest activity
Classifieds
Media
New media
New comments
Search media
Log in
Register
What's New?
Search
Search
Search titles only
By:
New posts
Search forums
Menu
Log in
Register
Navigation
Install the app
Install
More Options
Advertise with us
Contact Us
Close Menu
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
The Water Cooler
General Discussion
Defcon Lockpickers Open Card-And-Code Government Locks In Seconds
Search titles only
By:
Reply to Thread
This site may earn a commission from merchant affiliate links, including eBay, Amazon, and others.
Message
<blockquote data-quote="_CY_" data-source="post: 1589818" data-attributes="member: 7629"><p>[ATTACH=full]94270[/ATTACH]</p><p>Lockpicker Toby Bluzmanis inserts a wire into the LED readout of Kaba's E-Plex 5800 to open the lock.</p><p></p><p>To open a door fitted with the latest U.S. government-certified lock from high-end Swiss lock manufacturer Kaba, an employee must both enter a code up to eight digits long, then swipe a unique identity card coded to comply with a new standard that requires an extra layer of security, one designed to track individual staffers and make covert intrusion harder than ever.</p><p></p><p>Or, as lockpicking expert Marc Weber Tobias will show a crowd of hackers Friday, you can stick a wire in the tiny display light above the keypad and instantly render all of that “security” irrelevant.</p><p></p><p>At the Defcon security conference in Las Vegas, Tobias and his partner Toby Bluzmanis plan to demonstrate a series of simple hardware hacks that expose critical security problems in Kaba’s E-plex 5800 and its older 5000. Zurich-based Kaba markets the 5800 lock, which Bluzmmanis says can cost as much as $1,300, as the first to integrate code-based access controls with a new Department of Homeland Security standard that goes into effect next year and requires identifying credentials be used in secure facilities to control access.</p><p></p><p>In demonstrations for me and in videos they plan to show the Defcon audience, the lockpicking duo use one method called “rapping” to open the lock by simply hitting its top surface or lever handle with a mallet, compressing an internal spring that then decompresses and pushes open a latch that releases the lock. In another bypass, they insert a wire into a silicon cover for an LED light that blinks red when the user enters an invalid code. That wire can ground a contact on the circuit board behind the light that triggers a function intended to allow the door to be opened with a remote button, bypassing all its security measures.</p><p></p><p><a href="http://blogs.forbes.com/andygreenberg/2011/08/05/defcon-lockpickers-open-card-and-code-government-locks-in-seconds/" target="_blank">http://blogs.forbes.com/andygreenberg/2011/08/05/defcon-lockpickers-open-card-and-code-government-locks-in-seconds/</a></p><p></p><p>[video]http://youtu.be/6txFFS1TwSE[/video]</p><p></p><p>[video]http://youtu.be/lY_h7FxEVIc[/video]</p><p></p><p>[video]http://youtu.be/HXZ5pW31fB8[/video]</p></blockquote><p></p>
[QUOTE="_CY_, post: 1589818, member: 7629"] [attach=full]94270[/attach] Lockpicker Toby Bluzmanis inserts a wire into the LED readout of Kaba's E-Plex 5800 to open the lock. To open a door fitted with the latest U.S. government-certified lock from high-end Swiss lock manufacturer Kaba, an employee must both enter a code up to eight digits long, then swipe a unique identity card coded to comply with a new standard that requires an extra layer of security, one designed to track individual staffers and make covert intrusion harder than ever. Or, as lockpicking expert Marc Weber Tobias will show a crowd of hackers Friday, you can stick a wire in the tiny display light above the keypad and instantly render all of that “security” irrelevant. At the Defcon security conference in Las Vegas, Tobias and his partner Toby Bluzmanis plan to demonstrate a series of simple hardware hacks that expose critical security problems in Kaba’s E-plex 5800 and its older 5000. Zurich-based Kaba markets the 5800 lock, which Bluzmmanis says can cost as much as $1,300, as the first to integrate code-based access controls with a new Department of Homeland Security standard that goes into effect next year and requires identifying credentials be used in secure facilities to control access. In demonstrations for me and in videos they plan to show the Defcon audience, the lockpicking duo use one method called “rapping” to open the lock by simply hitting its top surface or lever handle with a mallet, compressing an internal spring that then decompresses and pushes open a latch that releases the lock. In another bypass, they insert a wire into a silicon cover for an LED light that blinks red when the user enters an invalid code. That wire can ground a contact on the circuit board behind the light that triggers a function intended to allow the door to be opened with a remote button, bypassing all its security measures. [url]http://blogs.forbes.com/andygreenberg/2011/08/05/defcon-lockpickers-open-card-and-code-government-locks-in-seconds/[/url] [video]http://youtu.be/6txFFS1TwSE[/video] [video]http://youtu.be/lY_h7FxEVIc[/video] [video]http://youtu.be/HXZ5pW31fB8[/video] [/QUOTE]
Insert Quotes…
Verification
Post Reply
Forums
The Water Cooler
General Discussion
Defcon Lockpickers Open Card-And-Code Government Locks In Seconds
Search titles only
By:
Top
Bottom