Keyless Entry: Hacking SwitchBot Smart Locks
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
This Hrih News feature reports that researchers found a software-only attack on the SwitchBot Lock Pro, a popular smart lock sold on Amazon. The device's Bluetooth link between keypad and actuator uses AES in counter mode without integrity protection, so flipping ciphertext bits lets an attacker turn a captured LOCK…