Bluetooth gun safe can be easily hacked

Links to popular or interesting stories in the news.

Please post links rather than copies of stories due to honoring copyright rules.

Moderators: mpallett, bakerjw, renegade, Hush

Post Reply
johndoe3
Silent But Deadly
Posts: 2710
Joined: Tue Feb 27, 2007 3:02 am
Location: N. Colorado

Bluetooth gun safe can be easily hacked

Post by johndoe3 »

https://arstechnica.com/information-tec ... in-needed/

The Vaultek VT20i individual pistol safe is a top-selling Amazon.com gunsafe, used to lock up a bedside handgun or in a vehicle. It can be opened using fingerprints, bluetooth phone connection or key.

Two Six Labs is a commercial testing/hacker company which tests consumer goods, and they've found that the Vaultek VT20i gunsafe is easily hacked and opened when the Bluetooth capability is turned on in the gunsafe. For those who own the Vaultek VT20i, Two Six Lab researchers recommend turning off the Bluetooth capability so that unauthorized people cannot access and take your handgun.
With that, the developer could build a smartphone app that could silently break into any existing VT20i safe in seconds, as long as Bluetooth was turned on.

Vaultek officials said they are in the process of introducing changes to their safes after receiving a private report two months ago about Two Six Labs' findings. "Vaultek takes personal security very seriously and we constantly monitor our products and will make every effort to continually improve," Vaultek officials wrote.

Daniel Su, Two Six Labs' research engineer, told Ars he doesn't believe the bug can be fixed in existing safes. That assessment, he said, is based on the fact that the flaw resides in the firmware that runs on the safe. "We have not seen any evidence of there being a firmware update mechanism," he said. E-mails from Vaultek left Ars' questions about the lack of an update mechanism unanswered.

Two Six Labs also reported two other vulnerabilities in the popular safe. One, stemming from a lack of encryption in the Bluetooth communications, allows attackers within range to obtain the unlock PIN.

A second weakness allows anyone to make an unlimited number of attempts to pair a Bluetooth device with the safe.
You can fool all of the people some of the time, and some of the people all of the time...and those are pretty good odds.
Brett Maverick, gambler on TV (also used by Progressive leaders everywhere)
poikilotrm
Silent But Deadly
Posts: 3851
Joined: Tue Apr 27, 2010 12:52 pm

Re: Bluetooth gun safe can be easily hacked

Post by poikilotrm »

Remember Kryptonite bike locks? :lol:
The moments I was censored was the moment that I won. That's twice, now.Thanks jwbaker, et al, for my victories.
johndoe3
Silent But Deadly
Posts: 2710
Joined: Tue Feb 27, 2007 3:02 am
Location: N. Colorado

Re: Bluetooth gun safe can be easily hacked

Post by johndoe3 »

Remember Kryptonite bike locks? :lol:
I had my hybrid bike stolen in the past year, with a Kryptonite bike lock.

Actually, I was using the very heavy Kryptonite cable with a heavy masterlock. Around 6 pm at a heavily trafficked supermarket, the bike rack was just beside the main doors, and someone cleanly cut the heavy cable leaving it on the ground and took my bike while I was inside buying groceries.

There was a video camera pointed at the bike rack, but the store said it was down for maintenance. (thanks Fred Meyers (Kroger))
You can fool all of the people some of the time, and some of the people all of the time...and those are pretty good odds.
Brett Maverick, gambler on TV (also used by Progressive leaders everywhere)
User avatar
doubloon
Silent But Deadly
Posts: 11897
Joined: Wed Dec 31, 2008 11:02 pm
Location: Houston-ish

Re: Bluetooth gun safe can be easily hacked

Post by doubloon »

16 ga steel ... just sayn

Image
http://www.youtube.com/watch?v=BDtd2jNIwAU MUSAFAR!
http://www.youtube.com/watch?v=8CrOL-ydFMI This is Water DavidW
Complete Form 1s http://www.silencertalk.com/forum/viewtopic.php?f=10&t=79895
User avatar
ick
Silent But Deadly
Posts: 4616
Joined: Fri Mar 28, 2008 2:17 pm
Location: Johnstown, PA

Re: Bluetooth gun safe can be easily hacked

Post by ick »

johndoe3 wrote:https://arstechnica.com/information-tec ... in-needed/

The Vaultek VT20i individual pistol safe is a top-selling Amazon.com gunsafe, used to lock up a bedside handgun or in a vehicle. It can be opened using fingerprints, bluetooth phone connection or key.

Two Six Labs is a commercial testing/hacker company which tests consumer goods, and they've found that the Vaultek VT20i gunsafe is easily hacked and opened when the Bluetooth capability is turned on in the gunsafe. For those who own the Vaultek VT20i, Two Six Lab researchers recommend turning off the Bluetooth capability so that unauthorized people cannot access and take your handgun.
Excellent. This way the government can get into my gun safe at any time without a warrant.

What a great product feature.
-----
Ick
Post Reply