Hacker News new | ask | show | jobs
by dirktheman 2031 days ago
I agree with you on the 'door lock will offer protection'. The vast majority of break-ins are actually climb-ins through an open window (forced or not), or by smashing a door window. Once you have a decent lock installed thieves will find another way to enter your house.

Some of these smart locks however turn out to have MASSIVE exploits (sending out unencrypted bluetooth addresses for instance). Sure, you could research and pick a lock from a wellknown brand with proven security. The downside to software security is that there is a possibility that a hack can be developed in the future. With an old-fashioned key, the risks are pretty well known.

I'm a big fan of home automation (Home Assistant user here). I'm rather proud of my setup where I can measure, control and secure my entire house. But I'm not using smart locks. Their use cases are, in my case, very limited (I've never encountered a situation where I thought 'darnit, I wish I could open that door without a key') and therefore not worth the extra risk.

1 comments

Unencrypted Bluetooth is the least of the problems with "smart" locks. All too often, a simple permanent magnet is all that's needed to pop the relay that controls the lock's solenoid.

Obligatory LockPickingLawyer: https://youtu.be/XXW27KKHtc8

Isn't that only possible if the relay is stupidly placed on the outside? All of the control should happen on the other side of the door, with the entry device simply feeding the input over.