{"guid":"8a1fc764-6901-537d-8531-e23b4088c608","title":"Electronic Locks: Bumping and Other Mischief","subtitle":null,"slug":"mch2022-264-electronic-locks-bumping-and-other-mischief","link":"https://program.mch2022.org/mch2022/talk/KBVXRU/","description":"Modern electronic locks are often optimized for cost, not security. Or their manufacturers don’t do security research. Or they ignore it. \nFor whatever reason, many current electronic lock systems are susceptible to surprisingly simple attacks. We’ll look at some of them, and at the underlying basics, so that you can do your own research.\n\nIn this talk, we look at a number of modern electronic locks and their security flaws. Surprisingly many current systems are susceptible to very simple attacks, like the equivalent of using bump keys. Of course, there are electronic and/or SW-based attacks, too.\nWe’ll look at some of them, and at the underlying basics, so that you can do your own research. \nSome of the problems have been fixed by manufacturers, but typically only for future production runs, so you will get some practical advice on how to test your own hardware for these critical flaws.","original_language":"eng","persons":["Michael Huebler (mh)"],"tags":["mch2022","264","2022","MCH2022 Curated content"],"view_count":1136,"promoted":false,"date":"2022-07-23T18:40:00.000+02:00","release_date":"2022-07-24T00:00:00.000+02:00","updated_at":"2026-02-28T18:45:04.374+01:00","length":1777,"duration":1777,"thumb_url":"https://static.media.ccc.de/media/events/MCH2022/264-8a1fc764-6901-537d-8531-e23b4088c608.jpg","poster_url":"https://static.media.ccc.de/media/events/MCH2022/264-8a1fc764-6901-537d-8531-e23b4088c608_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/MCH2022/264-8a1fc764-6901-537d-8531-e23b4088c608.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/MCH2022/264-8a1fc764-6901-537d-8531-e23b4088c608.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/mch2022-264-electronic-locks-bumping-and-other-mischief","url":"https://api.media.ccc.de/public/events/8a1fc764-6901-537d-8531-e23b4088c608","conference_title":"May Contain Hackers 2022","conference_url":"https://api.media.ccc.de/public/conferences/MCH2022","related":[],"recordings":[{"size":213,"length":1777,"mime_type":"video/webm","language":"eng","filename":"mch2022-264-eng-Electronic_Locks_Bumping_and_Other_Mischief_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2022-07-24T20:03:33.565+02:00","recording_url":"https://cdn.media.ccc.de/events/MCH2022/webm-hd/mch2022-264-eng-Electronic_Locks_Bumping_and_Other_Mischief_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/60244","event_url":"https://api.media.ccc.de/public/events/8a1fc764-6901-537d-8531-e23b4088c608","conference_url":"https://api.media.ccc.de/public/conferences/MCH2022"},{"size":76,"length":1777,"mime_type":"video/webm","language":"eng","filename":"mch2022-264-eng-Electronic_Locks_Bumping_and_Other_Mischief_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2022-07-24T19:45:05.873+02:00","recording_url":"https://cdn.media.ccc.de/events/MCH2022/webm-sd/mch2022-264-eng-Electronic_Locks_Bumping_and_Other_Mischief_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/60241","event_url":"https://api.media.ccc.de/public/events/8a1fc764-6901-537d-8531-e23b4088c608","conference_url":"https://api.media.ccc.de/public/conferences/MCH2022"},{"size":27,"length":1777,"mime_type":"audio/mpeg","language":"eng","filename":"mch2022-264-eng-Electronic_Locks_Bumping_and_Other_Mischief_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2022-07-24T19:28:03.855+02:00","recording_url":"https://cdn.media.ccc.de/events/MCH2022/mp3/mch2022-264-eng-Electronic_Locks_Bumping_and_Other_Mischief_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/60236","event_url":"https://api.media.ccc.de/public/events/8a1fc764-6901-537d-8531-e23b4088c608","conference_url":"https://api.media.ccc.de/public/conferences/MCH2022"},{"size":18,"length":1777,"mime_type":"audio/opus","language":"eng","filename":"mch2022-264-eng-Electronic_Locks_Bumping_and_Other_Mischief_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2022-07-24T19:27:03.489+02:00","recording_url":"https://cdn.media.ccc.de/events/MCH2022/opus/mch2022-264-eng-Electronic_Locks_Bumping_and_Other_Mischief_opus.opus","url":"https://api.media.ccc.de/public/recordings/60235","event_url":"https://api.media.ccc.de/public/events/8a1fc764-6901-537d-8531-e23b4088c608","conference_url":"https://api.media.ccc.de/public/conferences/MCH2022"},{"size":74,"length":1777,"mime_type":"video/mp4","language":"eng","filename":"mch2022-264-eng-Electronic_Locks_Bumping_and_Other_Mischief_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2022-07-24T19:15:06.068+02:00","recording_url":"https://cdn.media.ccc.de/events/MCH2022/h264-sd/mch2022-264-eng-Electronic_Locks_Bumping_and_Other_Mischief_sd.mp4","url":"https://api.media.ccc.de/public/recordings/60233","event_url":"https://api.media.ccc.de/public/events/8a1fc764-6901-537d-8531-e23b4088c608","conference_url":"https://api.media.ccc.de/public/conferences/MCH2022"},{"size":233,"length":1777,"mime_type":"video/mp4","language":"eng","filename":"mch2022-264-eng-Electronic_Locks_Bumping_and_Other_Mischief_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2022-07-24T18:51:13.221+02:00","recording_url":"https://cdn.media.ccc.de/events/MCH2022/h264-hd/mch2022-264-eng-Electronic_Locks_Bumping_and_Other_Mischief_hd.mp4","url":"https://api.media.ccc.de/public/recordings/60226","event_url":"https://api.media.ccc.de/public/events/8a1fc764-6901-537d-8531-e23b4088c608","conference_url":"https://api.media.ccc.de/public/conferences/MCH2022"}]}