Amazon’s Smart Lock and Key System’s Integrity put to Challenge
A special Amazon key is an electrified lock and wireless-connected that delivery workers can tentatively disable while dropping things to businesses or homes of members of Amazon Prime. The Prime members get their ordered items devoid of covering a physical distance to collect the parcels. Contrarily, Amazon accomplishes the volume of sales that mayn't be possible otherwise. Also, the delivery boys are tracked via certain wireless video camera for confirming that they handed over the packages.
Thereafter, the delivery boy with the help of a smart-phone application asks for unlocking the door, puts the package in the house, and then leaves after running the application for locking the house door. A communication occurs between the application and Amazon while the company links up with the camera online that remotely dispatches commands for 'unlocking/locking' to that special key.
But recently, a hacker indirectly challenged this security system's integrity via showing it was possible for embezzling with the system and thereby enabling anybody to gain admission into any Amazon property, protected with the company's Key. Techradar.com posted this, February 5, 2018.
Another attack by a hacker against the Key has been demonstrated as well. This one lets crooks open the house door, which the Key already locked, despite a delivery boy trying locking the door wirelessly.
Using Amazon's smart-phone, the deliverer for a while opens the door's lock, places parcels, locks by utilizing the Key application followed with leaving the house. Nevertheless, by placing an electronics containing box beside the house or somewhere nearby, definitely within the wireless range, that stops Amazon's command for locking by blocking it from reaching the camera, as a result, the door doesn't at all get the instruction for locking itself. Certain thief then easily slips in following departure of the delivery boy. This is security flaw of 'Rhino Lab' where an electronics containing box doesn't let the door to be locked instead of any mischievous parcel deliverer doing so.
Amazon's latest flaw apparently exploits a "Dropbox," which is one mobile PC having wireless connection that regulates the Key to not let it re-lock itself alternatively just get itself unlocked.
» SPAMfighter News - 13-02-2018
We are happy to see you are reading our IT Security News.
We do believe, that the foundation for a good work environment starts with fast, secure and high performing computers. If you agree, then you should take a look at our Business Solutions to Spam Filter & Antivirus for even the latest version of Exchange Servers - your colleagues will appreciate it!