About us
Collection
For researchers
Subscribe
Our Telegram
Newsletter
About RIMA
For researchers
Collection
Kronika Project
About us
Collection
For researchers
Subscribe
Our Telegram
Date
07/16/2015
Author
Алексей Ница
Source
Teplitsa
Preserved copy
Internet Archive
Translated material

Digital safety: how a hacker turned a toy into a tool for hacking garage doors


The developer of the Samy Kamkar itself in his video blog shows possible vulnerabilities into security not only on the network, but also to the real world. This time he reprogrammed a simple children's electronic toy in a tool for selecting code from garage gates. This can be hacked and any other devices using binary codes.

This topic is especially relevant for owners of their own houses, in which there is a car garage.

Usually it opens using a clker, which transmits an 8-12-bit binary code, which consists only of zeros and units. For example, for the selection of a 12-bit code, it is necessary to sort out 4096 combinations.

It is also known that the usual clicker transfers this binary code to the device of garage doors 5 times - a duration of two milliseconds per bit and the same pause between the bats.

According to the calculations, Kamkara themselves in order to directly sort out all the combinations, it will take only 29 minutes. But if you remove the repetitions in the transfer of code, as well as pauses, then the selection time will be reduced to only 3 minutes.

Using a standard children's game and reprogramming it to use a certain selection algorithm, you can reduce this time to just a few seconds.

Having called the Opensesame program and using this algorithm, the developer picked up an 8-12-bit code in just 8.214 seconds. Naturally, this time includes the worst option, which means that you can choose the code even faster.

At the moment, there are already companies that protect their products from such hacking, but also on the market, those devices that are vulnerable are on the market of devices that open using binary codes.

The developer posted the source code of the GITHUB program to confirm, but used the incomplete version to prevent use by attackers.