Saturday, July 28, 2012

Onity HT lock provides its own key when questioning it

The vulnerability found by Cody Brocious and presented at BlackHat Las Vegas 2012 deserves an entry in this blog. The Onity HT lock is installed on a huge amount of hotel doors around the globe and you might have already seen it, when you stayed in couple of hotels. 


This picture was extracted from Cody Brocious' talk at the BlackHat 2012 in Las Vegas.

Even more disturbing is the vulnerability that Cody discovered. Every lock has a small barrel-type DC power socket on the bottom. This is used to charge up the battery, when it is empty, but also to program the lock. Every hotel has its own random sitecode installed, which is used to encrypt/decrypt cards, program locks or open locks. This 32-bit key, however, is stored in the lock's memory and by connecting to the power socket, an attacker can extract the key. Moreover, the key is always stored on the same location and no authentication at all is needed to the extract the key.


More information can be found on Cody's website: http://daeken.com/blackhat-paper

22 comments:

  1. Hi Sir, You are really good writer.

    Nice post. Before finalizing your insurance policy educate yourself about it securitypitfalls.org. It is very helpful in using social media sites.I came across this site, it seems to contain very informative and nice information and also gives you an option to compare quotes about on The e-cig has been current for almost three years and is a amazing device focused at providing tobacco customers with a better option. Obviously also useful in assisting to reduce and indeed stop cigarette smoking tobacco completely. Are looking Buy e cigarette, V2 tobacco voucher & Green cigarette smoking tobacco coupon?

    Thanks For Only You Create That cute Article.

    ReplyDelete
  2. Master lock-pick sets can be obtained online for not especially at all and these will make the entire procedure a great deal less demanding. which lock opens everything

    ReplyDelete
  3. I am unable to read articles online very often, but I’m glad I did today. This is very well written and your points are well-expressed. Please, don’t ever stop writing. PCs Folder Lock - Don't Spend Time Searching for, Read through Information On COMPUTER Devices On this page how to attach password protect pictures in outlook

    ReplyDelete
  4. This article gives the light in which we can observe the reality. This is very nice one and gives indepth information. Thanks for this nice article. gt locksmith

    ReplyDelete
  5. think to win a round sum is unreal exclusive roulette online game here not. Come in and try your luck

    ReplyDelete
  6. wow, awesome article.Really looking forward to read more. Fantastic. Locksmith Jacksonville FL

    ReplyDelete
  7. Each model of car has a remote explicitly intended for it. These are commonly accessible at neighborhood car sellers. used car dealerships near me

    ReplyDelete
  8. The loss of an ignition key or a broken ignition key can really be a major hassle especially these days when most car keys are transponder keys with a chip inside. Locksmith Colorado Springs

    ReplyDelete
  9. Many locksmiths offer 24-hour residential locksmith services. They perform emergency keying services like lock picking and lock repair.Links Locksmith Services Jacksonville FL 23335

    ReplyDelete
  10. If, you have lost your car keys, then you don’t have to panic. Rather, you need to call the locksmith and get relaxed because everything else can be handled by him with greater perfectness and ease.

    ReplyDelete
  11. These are also used as a supplementary security feature on UPVC door, and fit between the sliding element of the door and the frame horizontally, stopping the door from being forced open.SubZero, Viking Refrigerator Repair Near Me

    ReplyDelete
  12. Beside offering types of assistance to vehicle proprietors, this kind of locksmith can likewise help home and entrepreneurs. key maker near me

    ReplyDelete
  13. Installing proficient evaluation safes and vaults . Unlocking those equivalent safes and vaults when you lose or overlook the mix or codes. Installing claim to fame locks like edge chamber locks and business deadbolts . Schlüsseldienst Aachen

    ReplyDelete
  14. We're here to produce long-term relationships with the clients when it comes to their mortgage. mortgage calculator canada You should think about applying on an investment property loan instead. mortgage payment calculator canada

    ReplyDelete
  15. I always like to read quality content having accurate information regarding the subject and the same thing I found in this post. Nice work.
    Door Locks In Dubai

    ReplyDelete
  16. At the point when the door was physically pushed or pulled, the inhabitant couldn't handle the development of the door, and coincidentally came to between squeeze focuses (mating areas of individual sectional boards) of the moving door. slotenservice rotterdam 010

    ReplyDelete
  17. The primary goal of these purported 'modest locksmiths' is to go into your home and let you free from your resources. locksmith Sterling Heights

    ReplyDelete
  18. Inquire as to whether there is a charge for mileage, or a base expense for an assistance call. locksmith Madison heights

    ReplyDelete
  19. Basically, emergency locksmiths should be ready to help even at the most awkward hours of the day. Navigate to the site

    ReplyDelete
  20. We've discussed the small home repairs you can make to protect your home during hurricane season, but what about tenant improvement for businesses impact windows

    ReplyDelete