Hackers gathered in Las Vegas on Saturday showed ways to crack electronic key-card systems and deadbolt locks used at security-sensitive places including the White House and the Pentagon.
"If you can't physically protect your computer, you are screwed," said Zac Franken, a British hacker who engineered a way to outwit door locks relying on key cards.
"Most people think that computers inside buildings are secure. How many computers do you see left logged on at night?" he said.
Franken's creation was among the real-world lock-cracking revelations made at the DefCon hackers conference, where a room is devoted to the "sport" of lock picking.
Medeco deadbolt locks relied on worldwide at embassies, banks and other tempting targets for thieves, spies or terrorists can be opened in seconds with a strip of metal and a thin screw driver, Marc Tobias of Security.org demonstrated.
"This is incredible; it's unreal," Tobias said while showing the ease with which the locks can breached.
"Medeco has one of the best designed locks in the world, but with this kind of attack it's all irrelevant," he said.
US-based Medeco is owned by ASSA ABLOY Group, a Swedish manufacturer and supplier of locks.
"This is not the only company," Tobias said. "There are lot of them; lots of deadbolts with similar weakness."
Tobias said he refuses to publish details of "defeating" the locks because they are used in places ranging from homes and banks to the White House and the Pentagon.
"This can cause a lot of trouble," he said. "They need to fix this. If you have one of these on your house or wherever you'd better be concerned."
Franken is equally protective of the simple electronics he uses in a device that can be spliced into wires connecting key card readers to computer systems that control door locks on many businesses.
"The access control system is inherently insecure," Franken said. "I just walk up, pop off a cover held on by two screws, put my device in and we're away."
Easy targets for the "physical hack," involving manipulating hardware instead of computer software, are electronic key scanner pads at doors where workers step outside for cigarette breaks, Franken said.
Once the device is spliced into place, encoded cards can be used to command it to replay the last valid entry code or have the system deny access to people with legitimate cards, he showed.
"Basically, I can now lock all the valid users out while I can still get in," Franken said. "There is no patch for this."
Tobias wants to see a "Hogwarts School for Reality," which like the school of magic made famous in the Harry Potter novels would aim to inspire children to act creatively -- in this case by applying technology to security needs on and offline.
"It's no difference breaking into a lock or a computer," he said. "If you can get past locks you get to the computers. This is the real world; we need the real world Hogwarts."
SCHEDULE: The delegation is due to meet with President Tsai Ing-wen this morning and witness the signing of an MOU on bilateral health cooperation in the afternoon US Secretary of Health and Human Services (HHS) Alex Azar yesterday arrived in Taipei aboard a US government plane at the head of a delegation that is the highest-level visit by a US official since Washington switched diplomatic recognition to China in 1979. Azar’s flight landed at Taipei International Airport (Songshan airport) at 4:48pm, nearly one hour earlier than scheduled, the Ministry of Foreign Affairs said. The apron where it landed is reserved for military aircraft, the Songshan Air Force Base Command said. The members of Azar’s delegation included HHS Assistant Secretary for Preparedness and Response Robert Kadlec, HHS Chief of Staff Brian
CHINESE FIGHTERS: Beijing marked the US Cabinet member’s visit by briefly sending two warplanes across the median line of the Taiwan Strait yesterday morning President Tsai Ing-wen (蔡英文) yesterday met with US Secretary of Health and Human Services Alex Azar in the highest-level official meeting between the two nations since 1979. “It is a true honor to be here to convey a message of strong support and friendship from [US] President [Donald] Trump to Taiwan,” Azar said during the open portion of his courtesy call to the Presidential Office, which was streamed live online before Tsai and Azar held a closed-door meeting. “Taiwan’s response to COVID-19 has been among the most successful in the world, and that is a tribute to the open, transparent,
‘CROSS-STRAIT CONSIDERATIONS’: Groups said that the Ministry of Education’s policies excluded Chinese and students should not be blocked over political issues The Taiwan International Student Movement yesterday said it would protest today outside the Ministry of Education in Taipei against a policy that excludes some Chinese students from returning to Taiwan amid the COVID-19 pandemic. Since June 17, the ministry has allowed foreign students from 19 “low risk” and “medium-low risk” countries and regions to enter Taiwan. On July 22, it announced that it was relaxing restrictions to include students from all countries and regions who are graduating this semester and on Wednesday it further expanded entry to students enrolled in degree programs. A letter sent by the ministry on Wednesday to universities did
PARTNERSHIP AND LEARNING: A Princeton University health policy researcher said that the nation would be a ‘treasure trove’ of information for the US health chief US Secretary of Health and Human Services Alex Azar on Friday said he wants to learn about Taiwan’s “incredibly effective” response to COVID-19, even though the nation did things that the US has fumbled, such as having a unified strategy and citizens willing to wear masks. Azar leads a US delegation arriving today for a three-day visit to Taiwan. They are to meet with President Tsai Ing-wen (蔡英文) and health system leaders, and Azar is to give a speech to public health graduates. “The message of this trip is about Taiwan,” Azar said in an interview, deflecting a question about China.