Amazon’s Door Lock Is Amazon’s Bid to Control Your Home

Interesting essay about Amazon’s smart lock: When you add Amazon Key to your door, something more sneaky also happens: Amazon takes over. You can leave your keys at home and unlock your door with the Amazon Key app — but it’s really built for Amazon deliveries. To share online access with family and friends, I had to give them a… Continue reading Amazon’s Door Lock Is Amazon’s Bid to Control Your Home

Man-in-the-Middle Attack against Electronic Car-Door Openers

This is an interesting tactic, and there’s a video of it being used: The theft took just one minute and the Mercedes car, stolen from the Elmdon area of Solihull on 24 September, has not been recovered. In the footage, one of the men can be seen waving a box in front of the victim’s house. The device receives a… Continue reading Man-in-the-Middle Attack against Electronic Car-Door Openers

Man-in-the-Middle Attack against Electronic Car-Door Openers

This is an interesting tactic, and there’s a video of it being used: The theft took just one minute and the Mercedes car, stolen from the Elmdon area of Solihull on 24 September, has not been recovered. In the footage, one of the men can be seen waving… Continue reading Man-in-the-Middle Attack against Electronic Car-Door Openers

Vulnerability in Amazon Key

Amazon Key is an IoT door lock that can enable one-time access codes for delivery people. To further secure that system, Amazon sells Cloud Cam, a camera that watches the door to ensure that delivery people don’t abuse their one-time access privilege. Cloud Cam has been hacked: But now security researchers have demonstrated that with a simple program run from… Continue reading Vulnerability in Amazon Key

MIDISWAY Promises to Step Up Your Live Show

If you like to read with gentle music playing, do yourself a favor and start the video while you’re reading about [Hugo Swift]’s MIDISWAY. The song is Promises, also by [SWIFT], which has piano phrases modulated during the actual playing, not in post-production.

The MIDISWAY is a stage-worthy looking box to sit atop your keys and pulse a happy little LED. The pulsing corresponds to the amount of pitch bending being sent to your instrument over a MIDI DIN connector. This modulation is generated by an Arduino and meant to recreate the effect of analog recording devices like an …read more

Continue reading MIDISWAY Promises to Step Up Your Live Show

Domain Admin in Active Directory, Guy Franco – Paul’s Security Weekly #520

Guy came on the show and gave a live demo on how to become Domain Admin in an Active Directory environment, and keep those privileges for 20+ years. Guys shows us how to abuse service accounts to get yourself a golden ticket. Then shows how the Javelin Networks technology can be used to detect, prevent […]

The post Domain Admin in Active Directory, Guy Franco – Paul’s Security Weekly #520 appeared first on Security Weekly.

Continue reading Domain Admin in Active Directory, Guy Franco – Paul’s Security Weekly #520

NSA Brute-Force Keysearch Machine

The Intercept published a story about a dedicated NSA brute-force keysearch machine being built with the help of New York University and IBM. It’s based on a document that was accidentally shared on the Internet by NYU. The article is frustratingly short on details: The WindsorGreen documents are mostly inscrutable to anyone without a Ph.D. in a related field, but… Continue reading NSA Brute-Force Keysearch Machine