Hackers Went Looking for a Backdoor in High-Security Safes—and Now Can Open Them in Seconds

Comments

• violetsoftness@piefed.blahaj.zone ⁨4⁩ ⁨days⁩ ago

  I bet they just watched a few episodes of the lockpicking lawyer dude has been cracking these 'high security' safes open with ease for at least a decade

  source

  • Badabinski@kbin.earth ⁨4⁩ ⁨days⁩ ago

    I love LPL, but he tends to focus on mechanical bypasses. I feel pretty sure that the safes mentioned in this article are actually listed by UL as safes. UL, of course, fucked up with the electronic locks themselves by underwriting them, but I have much more confidence in UL's mechanical expertise. The common bypasses that LPL uses would not be present on one of these safes, and he'd likely consider them to be truly secure (this vuln nonwithstanding, of course).

    source

    • higgsboson@piefed.social ⁨4⁩ ⁨days⁩ ago

      I note that they don't mention it resisting an angle-grinder for any amount of time. 🤔

      source

      • -> View More Comments
    • violetsoftness@piefed.blahaj.zone ⁨4⁩ ⁨days⁩ ago

      ahh that's some good perspective thank you

      source
  • shalafi@lemmy.world ⁨4⁩ ⁨days⁩ ago

    You inspired me! He has an episode on unlocking one of my safes, but it requires a special tool. :(

    source
• LovableSidekick@lemmy.world ⁨4⁩ ⁨days⁩ ago

  Funky girl with green hair in a side ponytail: “[click click clickity click]… I’m in!”

  source
• irotsoma@lemmy.blahaj.zone ⁨2⁩ ⁨days⁩ ago

  And this is the same reason why encryption backdoors would basically make encryption worthless. Doesn’t matter how strong the metal/encryption is if a backdoor exists to be the weakest link.

  source

  • possiblylinux127@lemmy.zip ⁨2⁩ ⁨days⁩ ago

    That’s not even the worse part of it.

    A backdoor would give faceless organizations immense power. Unchecked power leads down a dark path full of corruption and abuse. It is a great way for governments to crush civil liberties.

    source

    • irotsoma@lemmy.blahaj.zone ⁨1⁩ ⁨day⁩ ago

      Oh totally, but that’s the intended purpose. The thing is they’re saying they can do all that and still allow people to have a secure connection to their bank or whatever, but that’s impossible. Eventually, backdoors always lead to making the security worthless whether it’s bad design like putting hinge screws outside of the door so thrives can just use a screwdriver to remove the door, or a backdoor for locksmiths or government, it’s a weak link it doesn’t matter how thick the door is if a screwdriver removes it or how hard the encryption is to break if it can be bypassed by getting the code used by locksmiths or government, bad actors will get ahold of it and use it.

      source

      • -> View More Comments