On: Lockitron: Keyless entry using your phone

[run4yourlives]

Come on, there are probably hundreds of locksmiths in your city right now that could gain access to your front door in a matter of seconds.

Given the portability of the device, it's doubtful that lockitron even knows what it's unlocking at any given time.

[larrys → run4yourlives]

"it's doubtful that lockitron even knows what it's unlocking"

What about if they have a security breach and a command is issued to unlock all locks (or a large number of locks) not a specific target.

Then you have a bunch of doors that are open and the chance certainly exists that random people will enter those doors because they are unlocked.

[tedunangst → larrys]

While I have seen people walking around and trying doors, it's rare and it attracts a lot of attention. There's something of a herd immunity effect from door locking. As long as most doors are locked, a couple unlocked doors don't matter.

http://www.nytimes.com/2010/01/14/garden/14nolock.html?_r=0

[mbreese → run4yourlives]

While a trained locksmith could probably get past my deadbolt, a random hacker from $current_unpopular_country can't. (Note: this isn't counting non-locksmiths that can also pick a lock). So, using something like this does carry a bigger (if slight) risk. I'm not sure if I'd necessarily trust a relatively new company with controlling my deadbolt.

Then again, I also have a similar setup using an HID tag reader/arduino/relay to control access to my garage door, so it's not like I'm against the technology. It's more that I'm worried about outsourcing the security of my house.

Honestly, the threat profile to me personally is pretty low, but it's still not something I'm 100% comfortable with.

[bdunbar → mbreese]

I might be missing something.

J. Random Hacker from Waziristan hacks your account at the lock company.

So? He is _there_ and you are _here_. Annoying but not fatal.

Unless you're worried that he has a cousin in town?

[larrys → bdunbar]

He does it just for kicks. And he does it for multiple targets. The more targets, the more chance he gets to read about his success in the news.

[run4yourlives → larrys]

This is more a business problem for Lockitron than a credible threat to my security as a customer.

99.99% of the time, the only people that touch my front doorknob have keys.

[larrys → run4yourlives]

"99.99%"

I understand the point you are making. But I think the perception here is important as well. And even though the probability of someone opening the door is quite slim people still lock doors anyway. Irrationality plays into this. People lock bathroom doors even though only part of the time they are exposed in any way shape or form. Most of the time they are only sitting down on the toilet seat (or if a many perhaps standing for a brief period).

Personally on the one hand I agree with you and rationally it isn't a credible threat. But what if I am away on vacation and the door is unlocked during that week that I am away and I don't know about it? How comfortable do I feel with my office door being unlocked for a week? It's a small chance of a big thing happening. (Even if 99.99%).

[tripzilch → mbreese]

Hey, some of my best friends are from $current_unpopular_country!!

[samstave → run4yourlives]

There are some people even who carry lockpicks and locks and practice picking for sport and they are all over, like on /r/lockpicking and on places like HN....

I don't know who these people might be - but I know they are out there.