I have an attention span rapidly approaching zero and a typing WPM slowly approaching 999, and as such you’ll find no shortage of ramblings, documentation, and research here. Some ideas may be well-thought-out, others far less so. If you find any blog posts or videos that seem to have severe holes or you would like to see more research into, feel free to reach out and let me know!
Hi, three years ago I bought one on ebay but it is the oem jdm type r version but I have not been able to install it for the reason you mention at the beginning of the video and I did not want to cut it. On ebay you got yours, but how can I search one? Thank you.
But... if you want to access the data, you need to connect to them, doesn't matter if it's through the internet or not. And the devices that are used to connect to the cameras could be hacked just as well. The problem is the companies that connects them to networks that aren't isolated from the internet.
Why do you call yourself the LockPickingLawyer when you are clearly not? The LockPickingLawyer is a very good & popular RU-vid channel that is on YT since 8 years. Why do you pretend to be him? It is very obvious to me that you are not him; because your voice is totally different and your hands in this video are also different. I just don't like it when people pretend to be somebody else. As for the content in this video ; I thought the content in this video is good & interesting. Showing the potential security flaws in locks, electronics is very good en informative for the general public. Just for the content I would considering to subscribe to your channel. But please drop the act of pretending to be the LockPickingLawyer. Because the LockPickingLawyer channel is one of my favorites on YT!
Along with the “reprogramming” issue already mentioned in lots of other comments, the “leaving people with permanently locked furniture” statement is also false. The lock auto-unlocks when the batteries are too low specifically to prevent that kind of lockout.
I mean, in the “locked” state it’s using less than 1mA of power, as the NFC chip (ST25R3911 for those interested, the datasheet is available on the web) supports capacitive card detection which uses next to no power I have 3 of those (1 in my furniture and 2 for DIY projects overriding the internal controller and controlling the lock via MQTT), and the un-modded one in my cabinet has been going for 2 years now without requiring a battery replacement yet
But yeah, they’re actually engineered pretty well, aside from using the UID detection for non-master cards, which can be easily spoofed with a flipper zero or a chameleon. But I guess that’s the only way they could ensure that they support any NFC-A card regardless of the actual card’s capabilities
Well produced video from a small creator with good production quality and decent information - except that the core issue regarding the smart lock is entirely wrong and you just reprogrammed the custom key for it every time :p Me and a friend did some research on this unit when it was new a while back. Never got to the point of dumping the firmware, but it seemed to be fairly resistant (more resistant than some industrial access control systems...), especially considering the price and usecase (keeping a piece of ikea-cardboard/furniture locked.)
During the entire video I couldn't stop thinking about the fact that if the battery dies, this thing locks itself inside a cabinet. What's the recourse? Does it at least warn you that it's running low on battery?
It can have one NFC card in addition to the two master keys. I don’t feel that’s a problem. You need to reprogram it to accept a new card, you can’t just add 10 of your own NFC card.
What is that debug pin setup contraption you use? I do a lot of work requiring me to make temporary connections for programming. For things I work with all the time, I'll make 3D printed programming adapters using pogo pins, but for things I only work with once, or rarely, I can't justify the time and effort. In those instances, I usually end up soldering 30GA Kynar and using those clip things. That contraption you have looks like it would be quite useful for me.
For the Flipper stuff: It seems they had some problems with storing nfc cards and emulating them back to back. check if you updated your flipper zero. this could be reason, why it wasn't able to emulate it :) And i see and interesting header on the pcb, which is connected to the stm32 variant. don't have the datasheet on hand, but it could be a debugging port of this chip. There is a neat little trick in putting the test clip through the hole and hook onto some wire or so, the test clip doesn't can go back through the whole. the tension will pull the test clip against the contact. i think the holes are the debugging interface.