Open almost any hotel room in the world for under $50

For less than $50, a hacker can exploit a security flaw in a keycard door lock used by hotels worldwide and berak into up to four million hotel rooms, a tech site said Tuesday night.

BitDefender reported security researcher Cody Brocious, 24, demonstrated the flaw at a BlackHat pre-briefing, exploiting the flaw in the electronic part of the Onity locking system.

"Even though the keycard system uses advanced encryption for the password, the specific model exposes a DC port that can access the device’s memory where the chunk of data (the master key) responsible for unlocking is stored. This DC port allows an electronic programmer to read and write the door lock’s memory space, which is exactly what Brocious did with his device," it said.

In effect, the device can be tricked into opening the door for unauthorized users through the 5-volt DC port it exposes.

“With how stupidly simple this is, it wouldn’t surprise me if a thousand other people have found this same vulnerability and sold it to other governments,” BitDefender cited a Forbes article quoting Brocious.

BitDefender said Brocious plugged into the DC port a home-made electronic key programmer similar to what hotel staff use to program doors.

Yet, he used a device built from parts one can buy at a radio supply store for less than $50.

BitDefender said that while the hack may not work every time in real-life scenarios, there is still a chance of having a door open without an authorized key.

It said Onity, the maker of the device in question, "should learn from the hack is that advanced encryption is useless if you don’t regulate which ports can read what."

"And there’s no need to re-think the entire system or change four million locks overnight – one just needs a good old piece of thick brass shield over the exposed port to make things right again," it added. — TJD, GMA News

Loading...

Editor’s note:Yahoo Philippines encourages responsible comments that add dimension to the discussion. No bashing or hate speech, please. You can express your opinion without slamming others or making derogatory remarks.

  • China ignores global outcry vs reclamation
    China ignores global outcry vs reclamation

    On Wednesday, G-7 foreign ministers issued a Declaration on Maritime Security expressing alarm over “unilateral actions, such as large scale land reclamation, which change the status quo and increase tensions” in the region. In their communiqué, which did not specifically mention China, the ministers expressed belief that reclamation activities were meant to “change the status quo” in the West Philippine Sea and South China Sea, through which 40 percent of global trade passes. …

  • Project NOAH exec receives recognition
    Project NOAH exec receives recognition

    Project NOAH executive director and University of the Philippines professor Mahar Lagmay recently received recognition from the European Geosciences Union (EGU) for his work in disaster risk reduction and mitigation in the Philippines. …

  • Nightclub ban for US troops
    Nightclub ban for US troops

    The US Pacific Command has banned its troops in the Philippines from bars and nightclubs, a spokesman said yesterday, with the trial under way of a US Marine accused of murdering a transgender Filipino he met in a bar. Thousands of American and Filipino soldiers will kick off tomorrow the 10-day annual military exercises, according to Capt. Alex Lim, a spokesman for the US forces, but there will be strict controls on their free time. Lim would not say why the restrictions were imposed but …

  • US-Phl war games to start under China’s shadow
    US-Phl war games to start under China’s shadow

    Thousands of American and Filipino soldiers will kick off tomorrow expanded wargames, showcasing a deepening  defense alliance as alarm bells ring over China. The 10-day exercises in the Philippines are an annual affair between the longtime allies, but this time they will involve double the number of soldiers as last year in a sign of their expanding military partnership. The Philippines is seeking more US military and diplomatic support to fend off China’s increasing forcefulness in its bid …

  • Palace defends legal tack in sea row
    Palace defends legal tack in sea row

    There is nothing weak about taking the legal and diplomatic approach to push for the country’s claims in the disputed West Philippine Sea, Malacañang maintained yesterday. On Friday, Bayan Muna Rep. Neri Colmenares led a rally in front of the Chinese consulate in Makati City to protest China’s massive reclamation activities in the Spratly island group to fortify its presence in the disputed waters. Colmenares also criticized the Philippine government for supposedly not doing enough to defend …

  • Veloso sons urge authorities to save mother from death
    Veloso sons urge authorities to save mother from death

    The sons of Mary Jane Veloso, who is facing execution in Indonesia for drug smuggling, yesterday appealed to government officials to do everything to spare their mother from death. “We love you,” Mark Daniel, 12, said when asked for a message for his mother following a press conference at the University of the Philippines in Diliman, Quezon City. Mark Daniel, an incoming Grade 8 student, reiterated his appeal to those in power to help save his mother from death. His younger brother, …

  • US-Philippines wargames to start under China's shadow
    US-Philippines wargames to start under China's shadow

    Thousands of American and Filipino soldiers on Monday will kick off expanded wargames, showcasing a deepening defence alliance as alarm bells ring over China. The 10-day exercises in the Philippines are an annual affair between the longtime allies, but this time they will involve double the number of soldiers as last year in a sign of their expanding military partnership. The Philippines is seeking more US military and diplomatic support to fend off China's increasing forcefulness in its bid …

  • Bar ban for US troops in Philippines amid murder trial
    Bar ban for US troops in Philippines amid murder trial

    The US Pacific Command has banned its troops in the Philippines from bars and nightclubs, a spokesman said Saturday, with the trial under way of a US Marine accused of murdering a transgender Filipina he met in a bar. Thousands of American and Filipino soldiers will on Monday kick off 10-day annual military excercises, according to Captain Alex Lim, a spokesman for the US forces, but there will be strict controls on their free time. Lim would not say why the restrictions were imposed but …

POLL

Should Aquino be held accountable over the Mamasapano operations?

Loading...
Poll Choice Options