Search results

  1. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    The point being that an alarm or other RF device ceases to work. I've seen it caused by baby monitors from China that don't obey the duty cycle rules, a malfunctioning weather station, horrific spurs from a wireless video transmitter.
  2. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    Really? I've looked into several cases of unintentional jamming caused by malfunctioning devices.
  3. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    I don't disagree with that, I've seen enough issues with various devices unintentionally jamming 434MHz and 868MHz. What I don't understand - and I have tested with two alarms bought 4 years apart, and one installed alarm - is that I cannot set the Yale jamming detection off. Even 0.5W of...
  4. C

    Just how many cores for a wired burglar alarm?

    It's not in his threat model of "14 year old smack head with an old screwdriver".
  5. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    It can be made significantly harder though, to the extent that it's not possible with reasonably priced equipment. Two-way RF makes a huge difference. Instead of an absence of signal, you look for an absence of response. You can poll the detectors much more frequently when the system is armed...
  6. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    Also still can't work out why the Ubuntu desktop is relevant.
  7. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    I mean, where is your line for a vulnerability being serious? Encryption totally token? http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/ Backdoor root account...
  8. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    Paul - what are you talking about? I'm trying to work out how I could have written the blog yet not understood any of it. That's nonsensical. I know I link to the paper. It's the source of the image, that's it. I'm wondering what the relevance is of the rest of it's content (which you brought...
  9. C

    Just how many cores for a wired burglar alarm?

    Just link the tampers out in the panel.
  10. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    Oh, when I published the Heatmiser issues, I got more than a few reports of people who had previously had their heating altered randomly.
  11. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    Haha, yes. I think I might get the blame though :)
  12. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    Yes, the wider implication is that these problems can be avoided, at little additional cost. Connect something to the Internet and you don't just need to worry about a burglar.
  13. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    A surprising number of burglaries happen with the occupier present. Cash and jewellery are still the biggest by value taken during burglaries.
  14. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    Stealing high-end cars requires a lot of time and effort to get them sold on, unlike cash, jewellery, and phones. The person doing the crime doesn't see a fraction of the value. Prison terms for non-aggravated first offence are similar for both.
  15. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    I'm just wondering why jamming is being seen in car theft, but not burglary. Both aren't exactly risk free, and the reward to the guy actually doing the crime is about the same.
  16. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    Why the difference between car thieves and burglars then?
  17. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    Wouldn't average joe be better securing his house before spending money on an alarm?
  18. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    I'm not sure of the relevance of the paper here? The physical keypad locks you out, the RF doesn't. I'm puzzled. Why wouldn't a burglar spend £50 on a jammer that means that the alarm won't go off? They don't need to make or program anything...
  19. C

    Is there actually any reason for tamper protection?

    If it's the same one I have just posted about, what surprises me is that we can't get the jamming detection to trigger with intentional jamming, yet loads of people have issues in the real world.
  20. C

    Alarm insecurity - jamming, replaying and brute-forcing on the Yale HSA6400

    I've alluded to these issues before, but after doing a seminar at IFSEC last week that was fairly well received, we've published a blog about the issues with wireless alarms, and their Internet connected brothers...
Back
Top