DrewWilson
August 3rd, 2009, 12:14 AM
The three, who have made numerous headlines for bumping and picking Medeco high-security locks and other brands, have now succeeded to crack state-of-the-art, CLIQ technology electro-mechanical high-security locks.
They showed Threat Level how they could easily bypass the electronic portion of the locks and thwart audit logs that track who opens a lock and when. They provided the demonstration in advance of a presentation they’re giving at the DefCon hacker conference here on Sunday, with the caveat that Threat Level not disclose certain details about how they defeated the locks. (View edited video on Tobias’ web site.)
The hacks are low-tech and don’t involve attacking the actual electronic component of the lock. Instead, they use standard techniques for opening mechanical locks, similar to bumping — where an attacker places a specially-designed key in the keyway and “bumps” it repeatedly with a device until the lock releases.
“These [locks] are used in some high-security facilities,” Tobias said. “And the makers tout the fact that this is the ultimate in security. And they shouldn’t be saying that.”
The locks cost between $600 and $800 apiece, with keys costing about $95 each.
They’re used in government buildings, banks, and critical infrastructures, such as power and water plants and transportation facilities. The Swiss Federal Railway System uses them as does the Ottawa International Airport in Canada.
More... (http://www.wired.com/threatlevel/2009/08/electronic-locks-defeated/)
LOL! :owned:
They showed Threat Level how they could easily bypass the electronic portion of the locks and thwart audit logs that track who opens a lock and when. They provided the demonstration in advance of a presentation they’re giving at the DefCon hacker conference here on Sunday, with the caveat that Threat Level not disclose certain details about how they defeated the locks. (View edited video on Tobias’ web site.)
The hacks are low-tech and don’t involve attacking the actual electronic component of the lock. Instead, they use standard techniques for opening mechanical locks, similar to bumping — where an attacker places a specially-designed key in the keyway and “bumps” it repeatedly with a device until the lock releases.
“These [locks] are used in some high-security facilities,” Tobias said. “And the makers tout the fact that this is the ultimate in security. And they shouldn’t be saying that.”
The locks cost between $600 and $800 apiece, with keys costing about $95 each.
They’re used in government buildings, banks, and critical infrastructures, such as power and water plants and transportation facilities. The Swiss Federal Railway System uses them as does the Ottawa International Airport in Canada.
More... (http://www.wired.com/threatlevel/2009/08/electronic-locks-defeated/)
LOL! :owned: