A researcher released a smart lock exploit for fingerprint fraud

Share This Post

These gadgets “typically include less powerful Processor cores, cheaper sensors, and do not provide the same level of protection as a smartphone,” according to Kerrison’s assessment. Based on the value of the product or what the sensor is meant to protect, this is usually seen as appropriate. By building a proof-of-concept device that could connect to a smart lock via Wi-Fi and, using an attack or an accessible debug interface, alter the firmware of the lock with instructions to collect and upload fingerprint data, Kerrison was able to demonstrate the issue. Disassembling the lock and utilising onboard debugging pads to attach it directly to the controller would be an alternative.

Consumer smart locks are easily vulnerable, making it easy for attackers to collect specific people’s fingerprint patterns, claims a recent study. This week, research from Singapore’s James Cook University demonstrated how a hacker might use inexpensive hardware and extremely fundamental hacking techniques to stealthily collect fingerprints using the drop lock smart lock cracking technique. Steven Kerrison, an author and senior cybersecurity lecturer, asserts that the hardware limitations of lo T smart locks are to blame for the issue. Smartphones or tablets store fingerprint data and other biometric data inside secure hardware enclaves, in contrast to low-end Internet of Things devices like commercial smart locks, which lack dedicated safe storage.

Highlights

  • Anyhow, when engaged within the controller’s range of the attacker, the lock would be able to offer details about the target’s fingerprint, which could then be used to further biometric hardware.

Read More:

Partnership Between Mitsubishi Electric and Nozomi Networks Strengthens Operational Technology Security Business

Mitsubishi Electric and Nozomi Networks Partnership Mitsubishi Electric and Nozomi...

Solidion Technology Inc. Completes $3.85 Million Private Placement Transaction

**Summary:** 1. Solidion TechnologyInc. has announced a private placement deal...

Analyzing the Effects of the EU’s AI Act on Tech Companies in the UK

Breaking Down the Impact of the EU’s AI Act...

Tech in Agriculture: Roundtable Discusses Innovations on the Ranch

Summary of Tech on the Ranch Roundtable Discussion: ...

Are SMEs Prioritizing Tech Investments Over Security Measures?

SMEs Dive Into Tech Investments, But Are...

Spotify Introduces Music Videos for Premium Members in Chosen Markets

3 Summaries of Spotify Unveils Music Videos for Premium...

Shearwater to Monitor Production at Equinor’s Two Oil Platforms

Shearwater GeoServices secures 4D monitoring projects from Equinor for...

Regaining Europe’s Competitive Edge in Innovation: Addressing the Innovation Lag

Europe’s Innovation Lag: How Can We Regain Our Competitive...

Related Posts

Government Warns of AI-Generated Content: Learn More about the Issue

Government issued an advisory on AI-generated content. All AI-generated content...

Africa Faces Internet Crisis: Extensive Outage Expected to Last for Months, Hardest-Hit Nations Identified

Africa’s Internet Crisis: Massive Outage Could Last Months, These...

FTC Investigates Reddit for AI Content Licensing Practices

FTC is investigating Reddit's plans...

Journalists Criticize AI Hype in Media

Summary Journalists are contributing to the hype and...