A video posted on YouTube this week showed how potential thieves defeated the SimpliSafe wireless home security system-and issued a warning to consumers reminding them of the reality of wireless systems. CR’s director of consumer and technology policy, Justin Brookman, said: “Because these systems are based on wireless signals, there is always the possibility of being hacked.” This applies to any device connected to the Internet, including other security products. For example, in recent years, researchers have discovered loopholes in many smart lock systems. “Secure, secure, efficient, and wireless communication is not easy,” said Robert Richter, who is responsible for consumer reports security and privacy audits. “It turns out that this is usually a problem with IoT devices.”
How the SimpliSafe system was defeated, using cheap wireless remote controls on Amazon, YouTubers using LockPickingLawyer handles can interfere with the signal of the SimpliSafe door sensor. If the signal is suppressed, he can divide the sensors that the system base station cannot recognize into two halves, thereby simulating door opening without triggering an alarm. LockPickingLawyer pointed out that when he was conducting experiments, the system sometimes sent him push notifications stating that a malfunction has been detected.
SimpliSafe issued a statement refuting the claims in the video and pointed out that its system is designed to detect such portable jammer. The company explained: “You will need to first understand the location of the motion sensors, door sensors and base stations in [customers] houses, and how to move around in the house, in order to safely select a sample that can detect both blocked and unblocked The strength. “SimpliSafe explained in an additional statement that it plans to update to further protect against this type of vulnerability. “This update is currently in beta and will be released remotely in about a month.”
The following is the complete statement of the company:
- This video is misleading and not suitable for the way security systems work in real life.
As shown in the video, the SimpliSafe system is specifically designed to detect such interference. - In this video, the video producer found the precise frequency, signal strength, and direction of the system components, which they can puncture to prevent system communication without triggering an alarm.
- In real life, this is unlikely. Due to the unpredictable decrease in signal strength depending on distance and landscape, it is difficult for anyone to achieve the “correct” strength without triggering an alarm.
Consumer Reports recently rated 10 wireless home security systems for DIY enthusiasts, including SimpliSafe, for their security and smart home features, motion detection, ease of setup, usability, and video quality from other security cameras. All DIY systems we evaluated operate on radio frequencies disclosed in public documents published by the Federal Communications Commission on the Internet. We plan to investigate potential weaknesses related to signal interference in the laboratory. Experts weighed in, and we asked CR and experts in the entire home security industry to investigate the matter. Consumer electronics CR test engineer Henry Parra said that SimpliSafe’s answer is correct.
“SimpliSafe is right to say that people who want to bypass the system must have prior knowledge of how to set up the system,” Parra said. “If the transmitter power is too high, the base station can detect the jammer, and the power level required to block the signal will depend on the location of the base station.” Parra added that like the one used in the LockPickingLawyer video, the low-power transmitter will be In real life work, the materials on doors, windows, walls and floors are different, and the distance between sensors is also different, and may or may not affect the base station. There is nowhere to escape wireless technology. Kirk MacDowell, president of MacGuard Security Advisors, a home security consulting firm, said that most home security systems today (including professionally installed and do-it-yourself systems) use wireless devices. They are easier and faster to install, and do not require drilling for wiring.
He said the industry has begun to make changes to prevent such attacks. MacDowell said: “The alarm industry has responded to 128-bit, encrypted frequency hopping sensors that reduce interference problems.” “And most professional alarm dealers use this technology.” Frequency hopping does sound like it. It’s like this: The sensor changes the frequency at which it sends its signal and hops from one hop to another to avoid possible interference. According to FCC documents, the sensors of the SimpliSafe safety system use only one frequency. With this information, all you need is a transmitter that emits the same frequency to try to interfere with them.
We also looked up documentation on competing systems. For example, the “Reconnaissance Alert Security System” FCC record indicates that the frequency range is in use. However, based on these records, we do not know whether the reconnaissance alert system (and the CR rate of other systems) uses frequency hopping. We contact the manufacturer of each system evaluated. So far, only one brand has responded to this: Ooma told CR that its security system provides “encryption and frequency hopping of communication between base stations and sensors.” The reality of breaking in at home is annoying that most intruders do not use this method to break into your house. Most of them are low-tech countries.
MacDowell said: “Most intruders can only enter through doors or windows, and will not try to bypass the alarm system electronically.” In fact, the most common method of intrusion is to use force, such as kicking a door with a method. According to data from the Federal Bureau of Investigation (FBI), thefts accounted for 57.5% in 2017. LockPickingLawyer warned in its YouTube video not to display the advertising signs attached to the system, saying that it would inform potential intruders of the system you have and known vulnerabilities. But this may not be a good idea.
In some communities, you must first display a sign indicating that there is an alert for this attribute. The logo of the alarm company is sufficient to persuade potential thieves that no one enters the house. Bernie Deitrick, CR’s home security product test engineer, said: “You can always use a universal security system shield.” “That way, you can still stop potential intruders without having to abandon the system you are using.”
[LockPickingLawyer] SimpliSafe Alarm Bypassed With a $2 Device From Amazon
by u/jercubsfan in simplisafe