From the "Gao Jia" was cracked, see the ingenuity of the network security locksmith

However, "in theory, any lock can be opened without a key, just a matter of time." Similarly, a new generation of smart security locks with information storage and intelligent recognition as the core also faces unlocking. Security risks. Foreign media has reported that Reddit users of the net name sportingkcmo revealed that neighbors can open their smart door locks directly through voice commands. There are also devices that store passwords directly in plaintext, such as Quicklock and iBluLock locks, which can be easily invaded by anyone with a Bluetooth analyzer.

Hacker cracks to make smart door locks safer

On May 13th, the security geek broke the smart door lock without physical contact and without dismantling the door lock, and obtained all the unlock codes. This is the scene from the GeekPwn Hong Kong Station of the 2017 International Security Geek Competition. The cracked product is the "Gaojia Internet Smart Lock WiFi Apartment Edition" that has been widely used in the B-end market such as Freedom, Pig, and Tujia.

Figure: Baidu Security 2017GeekPWN cracked fruit plus Internet smart lock device debugging

Figure: 2017GeekPWN cracked fruit plus Internet smart lock unlocking moment

Figure: 2017GeekPWN cracked fruit plus Internet smart lock authentication success

Talking about the original intention of the project, Huang Zheng said: "One of the main research directions of Baidu Security Lab is to help individuals and businesses discover hidden dangers of technical vulnerabilities and protect personal privacy and business security. This entry is very accidental, we There are team members who are just comfortable with their customers. They have thoughts about cracking research for their own safety." At present, the Baidu Security Lab team has received a total of 57 public thanks from Microsoft. X-Team leader Huang is working on the 2016 MSRC Top 100. Ranked 8th in the world.

X-Team unlocks smart security and prevents vulnerabilities from becoming a stinger in the smart field

As a “hole-drilling professional” with research as the main direction of exploiting, Baidu Security Lab has grown into a number of world-patented technologies and contributed many heavy-weight typical technical cracking cases in the exploitation of security vulnerabilities. According to the information released by Baidu Security Lab's mobile security vulnerability information platform, only one area of ​​mobile phone vulnerabilities has been "burrowed" to cover 11 major versions of the Android system, and nearly 100 vulnerabilities of 22 global mobile phone brand manufacturers.

Vulnerabilities are like a stinger on smart innovation technology. As long as there is new technology, there must be new vulnerabilities. Therefore, industry players and security vendors involved in AI technology need to think about it: smart technology brings us convenience and makes our lives safer. The crack of the smart door lock project of Baidu Security Lab X-Team team provides us with a constructive opinion that can be referenced: AI is the direction of global technological change in the next five to ten years, and smart security is our technology application. And the long-lasting drive for product innovation.

In the face of increasingly intensive hacking attacks and AI vulnerabilities, Baidu Security Labs recommends that smart life be more focused on smart security. When choosing a smart home product, you need to consider its stability, privacy and technical difficulty.

Kylin Chemicals manufactures & supplies high performance Acrylic dispersant polymers & thickeners, serves a variety of use in the following applications.