I wouldnt be surprised if other electronic lock systems have similar vulnerabilities, Hirvonen added.
You cannot really know how secure the system is unless someone has really tried to break it.
Building a secure access control system is very difficult because there are so many things you better get right.
Only after we thoroughly understood how it was designed were we able to identify seemingly innocuous shortcomings.
We creatively combined these shortcomings to come up with a method for creating master keys.
The hack consists of three steps, Tuominen explains toThe Independent.
Firstly, get access to a key card, it doesnt matter which.
However, it is expected to take a long time to roll out the fix across all hotels affected.
We appreciate F-Secures ethical approach in bringing these issues to our attention, a spokesperson for Assa Abloy said.
With these updates, we have elevated hospitality security to the next level.
The researchers are set to present their findings at the Infiltrate conference later this week.
source: www.techworm.net
