Z-Wave chips are in 100 million smart gadgets, from lights to heating systems, but the risk is greater for things with security applications, such as locks. See: Special report: Harnessing IoT in the enterprise (free PDF) They note that an attacker within about 100 meters could, after the downgrade attack, then steal the keys to the smart lock. The researchers have posted a video demonstrating the downgrade attack - dubbed Z-Shave - on a Conexis L1 Smart Door Lock from lock manufacture Yale. S2 fixed this problem by employing the Diffie-Hellman algorithm for securely sharing secret keys, but the downgrade removes that protection.
So, an attacker could capture traffic on the network and easily decrypt it to discover the key. The problem with S0 is that when two devices, like a controller and a smart lock, are pairing, it encrypts the key exchange using a hardcoded key '0000000000000000'. Hackers may be able to remotely unlock your smart lock if it relies on the Z-Wave wireless protocol.Īccording to researchers at UK firm Pen Test Partners, Z-Wave is vulnerable to an attack that forces the current secure-pairing mechanism, known as S2, to an earlier version with known weaknesses, called S0.
#DEADBOLT Z WAVE HOW TO#
How to delete yourself from search results and hide your identity online The 5 best browsers for privacy: Secure web browsing How to find out if you are involved in a data breach - and what to do next The best VPN services: How do the top 5 compare? How to find and remove spyware from your phone
0 kommentar(er)
