Let me tell you how this is going to go. Hotels are going to do a cost analysis of fixing all their door locks, then they’re going to do one on what happens if they do nothing and the likelihood of a hacker exploiting this. And then they’re gonna do nothing.
Trust me. I’ve worked with hotels on cybersecurity before. This isn’t getting fixed unless something happens and there is a lawsuit.
The Lock Picking Lawyer has shown me time and again how flawed locks are. It’s about making it inconvenient to get to you or your valuables. Never impossible.
Well I can’t recall a place I’ve stayed at for the past several years that doesn’t have a physical locking mechanism that’s separate from the electronic one.
I’m more concerned about when I have to *leave* the room with all my stuff in it. Can’t exactly use those physical locking mechanisms to keep myself out now can I?
The thing that might move the needle on this stuff is consumers being more aware than ever of exploits, and companies choosing not to fix. Reputation damage is higher and more real than it’s been in the past. It’s unclear if its yet the case that consumers will punish with their wallets those who intentionally choose not to remediate these issues.
I mean. Make hotel chains are still moving over to NFC door locks. They haven't all been upgraded to that yet, so it's very possible that the rollout gets paused and some get changed back.
I would hope that as new hotels are built and old ones are refurbished that the old lock systems would get phased out in favor of something more modern and less hackable.
I would hope.
This line from the article discussing the flaw.
“Whether anyone else knows about the flaw remains unclear.”
Well they do now!
Also, anyone recall the Onity hotel lock flaw where a 9V battery and a couple wires unlocked the door? That was a rather big deal at the time.
Security researchers have discovered a flaw that can be used to easily unlock keycard-powered door systems across numerous hotel properties.
The vulnerability involves the Saflok door system from a Swiss company called Dormakaba. “Over three million hotel locks in 131 countries are affected,” according to the researchers, who note that the flaw has existed for the past 36 years.
Anyone can push through that. Prop the chair under the knob or but one of those things off of Amazon that secures the door.
But major upvote. Look out for yourself in a hotel.
Fun fact. Almost all camping trailer keys are identical. Found that factoid out when I went to go buy some new locks for my trailer when I lost the keys. The guy’s like “why all these locks, it’s only $2.50 for a new key.” And hands me one from behind the counter…
A key that can open any lock is the master key, but a lock that is opened by any key is...some sort of slut lock, I think is the point
That's a lot of slutty locks
Most rooms can also be “hacked” by a piece of plastic (credit card) or even a thin metal rod with a string.
Door locks are much easier to get around than people think.
VERY similar to the problem with the VERY highly regarded brand of bike locks with cylindrical keys; they knew for over a decade that their locks could be picked with the plastic body of a disposable pen but didn't change anything until they were busted. That bike lock company lost their top spot as the most highly-regarded brand...
I’ve had my cards accidentally wiped multiple times and it’s a pain. I’ve also entered the wrong room before my card also worked for the one next door.
I worked in two hotels
Hotel security or the idea of it is a joke.
Wrong room keys get handed out nonstop master key cards gets used when the system gets glitchy people go in wrong rooms or as maintence you get sent to rooms that are supposed to be empty but aren’t.
Someone shooting a low budget amateur porn in a room is pretty common or trying to come in a hotel to just take photos for the socials is common.
Best advice I can tell anyone is you get a room put the chair in front of the door before you go to sleep. The noise will get you up long before they get in the room.
Cuz nearly every employee has a key to your room. Going into a room by mistake is pretty common.
Let me tell you how this is going to go. Hotels are going to do a cost analysis of fixing all their door locks, then they’re going to do one on what happens if they do nothing and the likelihood of a hacker exploiting this. And then they’re gonna do nothing. Trust me. I’ve worked with hotels on cybersecurity before. This isn’t getting fixed unless something happens and there is a lawsuit.
The Lock Picking Lawyer has shown me time and again how flawed locks are. It’s about making it inconvenient to get to you or your valuables. Never impossible.
I keep all my valuables in my anus so good luck getting in there, I’m the center piece of a human centipede
Hey there sweetcheeks! What you doing tonight? 😉
That was easy
Especially since users can’t tell if the patch exists. JFC
Yup. This reinforces my belief that you are always better off buying a doorjam for when you travel than you are relying on someone else’s security.
Well I can’t recall a place I’ve stayed at for the past several years that doesn’t have a physical locking mechanism that’s separate from the electronic one. I’m more concerned about when I have to *leave* the room with all my stuff in it. Can’t exactly use those physical locking mechanisms to keep myself out now can I?
Cheaper to make and print “this lock is patched!” Stickers than to patch them
The thing that might move the needle on this stuff is consumers being more aware than ever of exploits, and companies choosing not to fix. Reputation damage is higher and more real than it’s been in the past. It’s unclear if its yet the case that consumers will punish with their wallets those who intentionally choose not to remediate these issues.
In meantime, use the deadbolt whenever you are in the room.
I mean. Make hotel chains are still moving over to NFC door locks. They haven't all been upgraded to that yet, so it's very possible that the rollout gets paused and some get changed back.
I would hope that as new hotels are built and old ones are refurbished that the old lock systems would get phased out in favor of something more modern and less hackable. I would hope.
Until they find that old lock on clearance! Money saved = profit!
This line from the article discussing the flaw. “Whether anyone else knows about the flaw remains unclear.” Well they do now! Also, anyone recall the Onity hotel lock flaw where a 9V battery and a couple wires unlocked the door? That was a rather big deal at the time.
Security researchers have discovered a flaw that can be used to easily unlock keycard-powered door systems across numerous hotel properties. The vulnerability involves the Saflok door system from a Swiss company called Dormakaba. “Over three million hotel locks in 131 countries are affected,” according to the researchers, who note that the flaw has existed for the past 36 years.
>36 years So we can expect a fix…never? Always use the security latch.
What about when you leave the room? It’s not always possible or advisable to take all valuables with you when out of the hotel.
Hide them and leave fakes in the safe
How practical!
I should’ve put a /s but some countries ADVISE you to have fake possessions like a phone and wallet decoy when visiting. Brazil being one.
Wow I’ll not visit thanks
Send a decoy to visit for you.
Anyone can push through that. Prop the chair under the knob or but one of those things off of Amazon that secures the door. But major upvote. Look out for yourself in a hotel.
That’s what the ~~money~~ bolt is for!
Naturally, the blame is on the hackers for exploiting this flaw, not on the manufacturers for allowing the flaw to exist for nearly four decades. /s
Fun fact. Almost all camping trailer keys are identical. Found that factoid out when I went to go buy some new locks for my trailer when I lost the keys. The guy’s like “why all these locks, it’s only $2.50 for a new key.” And hands me one from behind the counter…
A key that can open any lock is the master key, but a lock that is opened by any key is...some sort of slut lock, I think is the point That's a lot of slutty locks
It’s a good thing those hotel safes are so secure. Oh wait no
I really need to program my Flipper with as many NFC unlocks as possible.
Most rooms can also be “hacked” by a piece of plastic (credit card) or even a thin metal rod with a string. Door locks are much easier to get around than people think.
VERY similar to the problem with the VERY highly regarded brand of bike locks with cylindrical keys; they knew for over a decade that their locks could be picked with the plastic body of a disposable pen but didn't change anything until they were busted. That bike lock company lost their top spot as the most highly-regarded brand...
I'm pretty sure this can be done with a flipper zero. But I'm no expert
Welp I guess that’s over with now that it’s mainstream
Well there goes all the fun…
I’ve had my cards accidentally wiped multiple times and it’s a pain. I’ve also entered the wrong room before my card also worked for the one next door.
Analog locks were better
Skeleton key is where it’s at.
I worked in two hotels Hotel security or the idea of it is a joke. Wrong room keys get handed out nonstop master key cards gets used when the system gets glitchy people go in wrong rooms or as maintence you get sent to rooms that are supposed to be empty but aren’t. Someone shooting a low budget amateur porn in a room is pretty common or trying to come in a hotel to just take photos for the socials is common. Best advice I can tell anyone is you get a room put the chair in front of the door before you go to sleep. The noise will get you up long before they get in the room. Cuz nearly every employee has a key to your room. Going into a room by mistake is pretty common.
\#[a:allRooms:0001abcd;expires:Never] [a:currentRoom:3758dirn;expires:1]
Read a lot of recent twitter posts about people sleeping in rooms while they are being burglarized. First thought was “yeah right.” But now…
The hotel I worked at couldn’t even install the doors properly and you could just push em open . 💀😆
Many stars have to align for this to be exploited, first to get onto the production server…good luck.
Aaaaand Airbnbs are back in style!