Hacker News new | past | comments | ask | show | jobs | submit login

Basically no commercial locks provide a perfect (or even very good) audit trail facility -- guaranteeing the device isn't tampered with. Even the government/military X09 standard lock (from Kaba-Mas; it's a pretty awesome self-powered combination lock) can be forced, then replaced with a new lock with a faked serial number and internally trojaned electronics. You could detect this on internal destructive inspection later, but you might even be able to hack the electronics with self-deleting firmware.

The standard for secure facilities is 24x7 monitoring and roving patrols which are frequent enough to prevent defeating the lock/door initially. If it takes 1h to cut through a vault door, and you do patrols every 15 minutes, it doesn't matter as much that once you compromise the door, you can subvert the lock for future access.

That said, there's more potential to make an electronic locking system (and seal/tamper evidence) really secure than there is to make a mechanical keylock secure -- keylocks are basically deprecated for even moderately high security, and mechanical combination locks for high security -- the future is all electronic systems with online checking of credentials. A system like lockitron has a lot of room to grow.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: