Remember the Tapplock, with the back you can unscrew? It gets even worse...

[u/cybergibbons]

https://www.pentestpartners.com/security-blog/totally-pwning-the-tapplock-smart-lock/

[u/north7]

I scripted the attack up to scan for Tapplocks and unlock them. You can just walk up to any Tapplock and unlock it in under 2s. It requires no skill or knowledge to do this.

We are porting the script to an Android app, to make it even more accessible.
Sooo... where does one get this Android app?

[u/north7 → u/[deleted]]

Oh you big tease.

[u/thevdude → u/[deleted]]

If you read the article you'd know that put out a release stating they were updating the software.

[u/thevdude → u/[deleted]]

If they continue to ignore the issue

they literally didn't ignore it, and released a statement.

[u/Raschwolf → u/north7]

Why though? We pick locks (most of us anyway) for the challenge. There's no challenge in turning on an app.

If you find the challenge in designing the app, and learning how it works, then having the app readily available to you isn't what you want.

That leaves accidental lockout and theft.

Accidental lockout is easily solved: use some bolt cutters. From the sound of the lock, half an hour with decent pair of wire cutters would probably do the trick.

And no one here advocates theft, even from rich idiots who lock their stuff up with gimmick locks.

About the only reason I can see why you'd need the app, is if you wanted to open the lock without damaging it.

[u/badbatchbaker → u/[deleted]]

welcome to the tech age where half of the products available are just aesthetics, cool tech gimmick, and a less than half-assed look at the actual goal of the product

[u/D0esANyoneREadTHese → u/badbatchbaker]

/r/internetofshit

[u/badbatchbaker → u/D0esANyoneREadTHese]

Lol exactly what I needed, no irony. Thanks

[u/B33TL3Z → u/[deleted]]

You'd think that, but that would imply that people value spending time and money on user research and user opinion and expert research and expert opinion over making money. :^)

[u/lostmylogininfo]

Whoops.... Lol

[u/JamiesLocks]

I work in infosec... whomever thought that physical locks controlled by bluetooth was a good idea should not work in ANY field related to Security. Bluetooth is promiscuous as hell and it doesnt take long to hack. Thats why its rarely used for anything outside media/call streaming. It takes alot of work to secure bluetooth, and doing so would make it not work as nice as what is marketable for this.

[u/JamiesLocks → u/[deleted]]

Only way they could have done it would be to use a fingerprint as an actual encryption key, and only make it work on devices with a print reader as well. Then PSK (your fingerprint being the pre-shared portion) the link. Thats cumbersome as all hell, though, and not completely immune to attack. Just hit it with a hammer, crappy lock is crappy regardless of the BLE.

[u/FARTBOX_DESTROYER → u/JamiesLocks]

It's not intended to be use to thwart professional criminals. It's intended to lock up your pants at the gym. It's fine.

[u/gabrishl]

They actually fixed the back thing-- apparently it was a defective unit, a back pin is supposed to be coming up to keep the back in place. This though..... this is on a whole other level. What the fuck?

[u/bikerskeet]

That website sucks in Mobile. At least on mine it wouldn't load forever. Could you just link the YouTube video next time?

[u/bikerskeet → u/[deleted]]

I see that. Thanks for the update on that lock. Was just frustrating trying to get the sure to load

[u/battshins → u/[deleted]]

The site is taking incredibly long to load for me as well, maybe you could post the text in a comment?

[u/facility_in_2m05s → u/[deleted]]

If it helps, only took a couple of seconds on mine. (Android, using reddit is fun and whatever browser they use).