29: Are Web Connected Locks Secure?

Full show notes, including links, can be found at http://www.thelocksportscast.com  In this week’s episode: -Panda-Frog is providing more services for the community via his website. -A plan for how to accept nominations and votes for the Locky Awards -LockpickingDev is selling off some locks and custom picks -Flaws in IoT devices revealed at Blackhat Europe and that might include some smart locks. -Criminals -Sales -Giveaways Contact Information: Email: [email protected] Twitter https://twitter.com/charlescurrent  Reddit: currentc57 on r/locksport Discord: Lockpickers United as Current, Extraordinary League of Pickers as Current, CBC as Current Join the Discord at http://discord.thelocksportscast.com Donate:   http://paypal.thelocksportscast.com   https://patreon.com/thelocksportscast   https://www.buymeacoffee.com/locksportscast  Executive Producers: -m3ddl3r -Panda-Frog -Michael Gilchrist -Starrylock -WilliamsBrain  -2BDCy4D  Content Producers: -MrBlack-Magic -Chirael -Panda-Frog -Joshua Gonzalez  -HVLogic  -Michael Gilchrist -Starrylock -Pocket Women Thank you to everyone that contributed to this episode. And to everyone that has shared this podcast with others.   If you feel you are getting value from this show, please help us by supporting the show in one of the following ways (listed in order of importance) -Help me make this podcast a resource for the community by sending me any news or information you would like to share.   -Share this podcast with your lock picking buddies.   -Leave a good review in your favorite podcast app. -Contribute financially Corrections and Additions: Deadlocks should have been mentioned as a content producer on episode 28 Panda-Frog should have been mentioned as a content producer on episodes 27 and 28 Announcements: I want to wish everyone happy holidays Reminder of LPU charity raffle.  They are accepting prize donations Chirael was the winner of the November Paclock A Month Recent stories related to locksport:  https://www.bbc.co.uk/sounds/play/m000q9c2  Community News: Multipick giveaway SN check https://multipick.challenge-lock.com/en  Lock Noob’s new channel Side Noob  MrBlack-Magic [11] Fingerpin Tutorial - What they are and How to Pick them (Smooth & Serrated)  MrBlack-Magic [6] Basi K10 (DOM iX 10kg) 9 Fin-Pins + 1 Interactive Element Picked and Gutted  Theboneinthebox Disection Table---Primus 29sL Part 1  Theboneinthebox Disection Table---Primus 29sL Part 2 Theboneinthebox Disection Table---Primus 29sL Reassembly   Wooden model of Chubb LockpickingDev locks and picks for sale https://twitter.com/LockpickingDev/status/1339428106826698753  Criminals: CAUGHT ON CAMERA: Irvington family has 2 cars stolen in same day Suspicious driving results in Georgia fugitive's arrest | Local News  Man on probation charged by police with Bridgeton break-in Belmont Man Sentenced to 24 Months for Conspiracy to Commit Bank Fraud  How TCP/IP Stacks Breed Critical Vulnerabilities in IoT, OT and IT Devices: BlackHat page https://www.blackhat.com/eu-20/briefings/schedule/index.html#how-embedded-tcpip-stacks-breed-critical-vulnerabilities-21503  Paper How TCP/IP Stacks Breed Critical Vulnerabilities in IoT, OT and IT Devices  Slides How Embedded TCP/IP Stacks Breed Critical Vulnerabilities   Security Now 797 Covers this topic better   -Show notes https://www.grc.com/sn/SN-797-Notes.pdf    -Podcast coverage starts at 52:40 Next Episode Security Now 797 SolarWinds Dec 15th 2020    -On YouTube: SolarWinds - Chrome Throttling Ads, Google Outage, 2020 Pwnie Awards, JavaScript's 25th Birthday  Sales: -Southord 25% Discount November 25th through December 23rd code CHEER25 -Commando Locks 15% off all locks code FALL2020 - Expires 2021-01-01 11:59PM EST -MAKO Locks 15% off with code BUYMAKO Unknown exp -MAKO Locks Black Friday Specials Also the code above works on these deals! -UKLockPickers 10% off with code GIFT Giveaways and Contests: -Michael Gilchrist    - #Norlin250 subscriber giveaway  -Panda-Frog    - (ENG-108) Lockpicking - Roomtour and Giveaway announcement  #xmasPF2020 -Starrylock - #shoutoutMonday    -Starrylock     -Pocket Women -Charles Builds Crap on YouTube - To encourage you to send me information for this show, I’m changing the rules for my PAM Giveaway (see rules below) or https://www.thelocksportscast.com/p/paclock-a-month-giveaway/ https://www.youtube.com/user/MrCharlesCurrent   “PacLock a Month” Rules: This year (2020), I’m giving away one of my custom PacLock 100A padlocks a month.  To be entered, you must:   1.Provide me with locksport or locksport community news that I can use on my weekly podcast.     -Submit your news via one of the following:       +Email: [email protected]       +Reddit: currentc57 on r/locksport       +Discord: You can find me on the following servers as “Current”         ~Lockpickers United          ~Extraordinary League of Pickers          ~CBC     -You will receive 1 entry for each news item I use in the podcast that month.   2.Share the podcast on social media     -Make sure I know about it by tagging me and/or emailing me a screenshot or other proof. The winner will be drawn and announced the following month.  The winner will have 1 week to contact me via email to claim the prize. I will pay for shipping within the U.S.  If you live outside the U.S., you can still enter, but must pay to ship if you win. I reserve the right to change these rules as I need to during the course of the year. I reserve the right to disqualify anyone for any reason.  My decisions are final. This giveaway is a thank you to the subscribers that watch my videos, listen to my podcast, and help me produce it.   YouTube is in no way a partner to this contest and all applicants agree to release YouTube from any and all liability related to this contest. Personal data collected as a part of this contest will be used only for the purposes of this contest and will not be released to third parties. Any entries that violate YouTube's community guidelines will be disqualified: http://www.youtube.com/t/community_guidelines