Top-selling handgun safe can be remotely opened in seconds—no PIN needed

Enlarge (credit: Two Sixes Labs ) One of Amazon’s top-selling electronic gun safes contains a critical vulnerability that allows it to be opened by virtually anyone, even when they don’t know the password. The Vaultek VT20i handgun safe, ranked fourth in Amazon’s gun safes and cabinets category , allows owners to electronically open the door using a Bluetooth-enabled smartphone app. The remote unlock feature is supposed to work only when someone knows the four- to eight-digit personal identification number used to lock the device. But it turns out that this PIN safeguard can be bypassed using a standard computer and a small amount of programming know-how. As the video demonstration below shows, researchers with security firm Two Six Labs were able to open a VT20i safe in a matter of seconds by using their MacBook Pro to send specially designed Bluetooth data while it was in range. The feat required no knowledge of the unlock PIN or any advanced scanning of the vulnerable safe. The hack works reliably even when the PIN is changed. All that’s required to make it work is that the safe have Bluetooth connectivity turned on. Read 11 remaining paragraphs | Comments

Follow this link:
Top-selling handgun safe can be remotely opened in seconds—no PIN needed

iOS 11’s Control Center buttons don’t fully turn off Bluetooth or WiFi

If you’ve updated to Apple’s new iOS 11 , you might have played around with the new Control Center. You also might think that toggling Bluetooth and WiFi “off” in the Center might actually, you know, turn them off. Turns out, you’d be wrong. As noted over at Motherboard , hitting these buttons really only disconnects you from any WiFi or Bluetooth devices you might be connected to. To be fair, Apple says this in its own documentation , but that doesn’t mean the toggles aren’t confusing to many users. The idea is that when you use the Control Center toggles, your iPhone will still be able to connect for AirDrop, AirPlay and Location Services. It can also stay connected to Apple’Pencil, Apple Watch and use Continuity features like Handoff and Instant Hotspot. If you want to turn off WiFi and Bluetooth for real, something that can help your iPhone use less battery and avoid some security bugs, you’ll need to drop into the Settings app. We’ve reached out to Apple for comment on this matter and will update the post when we hear back. Via: Motherboard Source: Apple

Originally posted here:
iOS 11’s Control Center buttons don’t fully turn off Bluetooth or WiFi

Hackers can take control of your Segway hoverboard

We can list so many reasons why you should never set foot on a hoverboard . Now, we’ve got yet another: Cybersecurity company IOActive has figured out how to hijack the Segway MiniPro ” self-balancing personal transporter ” through its Bluetooth connection. It seems like only yesterday that we were discussing how hoverboards had a tendency to spontaneously combust and wondering who exactly was actually buying these products. But clearly some of you out there are interested, because Segway has kept cranking them out. The MiniPro, which retails for $600, allows for remote control of the hoverboard-scooter hybrid (seriously, who thought this was a good idea?) through a Bluetooth app. And there’s no way to turn off the Bluetooth if your hoverboard is hacked. While people can’t cause battery explosions (I guess we should be thankful for the little things), “an attacker could bypass safety systems and remotely take control of the device, including changing settings, pace, direction, or even disabling the motor and bringing it to an abrupt and unexpected stop while a rider is in motion, ” says the press release . Hackers could even track and discover the location of the hoverboard user through this exploit. IOActive did let Segway know about these issues (they discovered them last year; results were partially released today), and they have patched some of the vulnerabilities in the product. Still, this is an increasing problem as devices are becoming more connected . Without proper security (or let’s be honest: even with it), these devices and their users are incredibly vulnerable. At this point, not implementing security for connected devices is shoddy at best and dangerous at worst. Via: CNet Source: IOActive

Read this article:
Hackers can take control of your Segway hoverboard

Tile’s slimmest Bluetooth tracker won’t bulk up your wallet

Tile , which raised over a million dollars on Kickstarter over three years ago, is a popular Bluetooth tracker that helps you find your missing stuff. Aside from Bluetooth, it also uses a crowd-finding feature where other Tile app users can ping you the whereabouts of a Tile that’s out of Bluetooth range. There was an update last year to Tile 2.0 , which has a louder alarm plus it’ll help find your phone as well. The problem with the existing Tile, however, is that it’s a little chunky. That’s why Tile has now introduced the Tile Slim, a much thinner version of the tracker that’ll fit more comfortably in tight spots like wallets and passport holders. But that’s not all. Tile has also announced a new initiative that just might bring Tile’s location-finding smarts to anything and everything. But let’s talk about the Slim first. As the name suggests, it is a lot wider and flatter than the original Tile, measuring 54 by 54 by 2.4mm (or as Tile says, about the width of two credit cards). The design is also a touch different. There’s a center Tile logo doubling as the button while the rest of the Slim surface has a pleasant embossed pattern. The rear is all grey, with a tiny cavity where the sound can get through. Unlike the original Tile however, there’s no loop, so you can’t use it as a keychain. But that’s because the Slim wasn’t designed to replace the original Tile; it’s just another product in the Tile stable. So you can have the original Tile for your keys, say, and the Slim for your wallet. I’ve used the original Tile with my wallet for over a year now, and it’s always left a pretty sizable dent. I switched to the Slim a few days ago and now I can barely tell it’s there. If you want, you can also adhere it to your laptop, your tablet, your ID badge or any place where a slim profile is key. Another feature that sets the Slim apart is that you can select one of four different ringtones for the alert. They’re called Bionic Birdie, Classic Call, Pep in your Step and Blues for Slim. This capability is only for the Slim and is mostly just for fun, though it could prove useful if you have multiple Tile trackers and want a way to differentiate them. To coincide with the announce of the Slim is also a redesigned app. It’s mostly just a brighter reskin to match the company’s current branding, but there’s also now a slightly different flow when adding new Tiles. It’ll ask you which Tile you’re adding — the Slim or the classic — and then it’ll coach you through the rest of the activation process. Slim works a lot like the original Tile, but here’s a brief primer in case you need a reminder on how it works. Once you’ve associated and attached a Tile tracker with an object — say your keys or your wallet — you can now use the app to find it. If the item is within Bluetooth range, the app will show it with a green circle. Tap it and the tracker will emit an alarm. If it isn’t, it’ll show you the location where it was last seen, so you can retrace your steps to look for it. Either that or you can select “Notify when Found, ” where it’ll now turn to the aforementioned crowd-finding feature to help you find it. If anyone with the Tile app running goes near the object, you’ll then get a location ping. There are around 6 million Tiles on the market in over 200 countries, so chances are pretty good that this will happen. The Slim will retail for $30/£30 each, which is $5/£10 more than the original. You can also pay $100/£95 for a 4-pack. The Slim has a guaranteed battery life of a year. We should note that, just like all the other Tiles, the battery is not replaceable — if the juice is running out, the app will let you know that you should replace it. The company does offer something called a reTile discount program that’ll let you replace your existing Tile with a new one at a discounted rate. So instead of paying $30 for a new Slim, you could just pay $21 to replace the old one. But imagine if you don’t need to buy a Tile at all. Imagine if that same Tile location-tracking smarts was simply just built into whatever it is that you don’t want to lose. That is the idea behind Tile’s other big announcement today: The Tile Platform. “We want to blanket the world in smart location, ” says Mike Farley, Tile’s CEO and co-founder. “Everything that moves should have smart location built into it.” So with that concept in mind, Tile is kicking off the Platform announcement today with three partners: EcoReco, an electric scooter company; Nomad, which makes a variety of backup battery packs and power banks; and Zillion, a maker of smartphone wallets with that battery pack built right in. Starting today, all three of these companies will start offering products with the Tile Platform. That means you would be able to use the Tile app to locate, say, a missing EcoReco scooter or a Nomad battery pack. Just add them to the app like you would with a Tile tracker and you can find them in the same way. Tile has already partnered with Land Rover to build the tech into the 2017 Discovery Sport . Eventually, Farley says he wants the Tile Platform to be in even more things. “Any product that’s mobile is fair game, ” he says. “The lowest hanging fruit is if it has Bluetooth in it already.” So, a pair of Bluetooth headphones would be ideal, or a fitness tracker like a Fitbit, or maybe a smartwatch. In the future, he could even see the Tile tech integrated into everyday items like a remote control, a car’s key fob, or perhaps a regular pair of glasses. “We spend so much time every day finding misplaced stuff. That doesn’t even factor in the cost and time it takes to replace them, nor the stress and anxiety, ” says Farley. “Our vision is that the world will be a simpler and happier place when the world has smart location.”

Read the original post:
Tile’s slimmest Bluetooth tracker won’t bulk up your wallet

Fitbit trackers can be hacked in ’10 seconds’

Fitbit trackers have a whopper of a vulnerability that can let somebody within Bluetooth range quickly hack them, according to security company Fortinet . Worse yet, once the attackers are in, the device will infect any computer that tries to sync with the device. Via Twitter , Senior Fortinet researcher Axelle Apvrille told Engadget “you don’t need physical access (to the tracker), but you do need to be close (Bluetooth range). It does not matter if it is paired (to another device) or not.” When in range, a bad actor could infect the device in as little as 10 seconds. Apvrille informed Fitbit of the vulnerability back in March, but the wearable outfit has yet to fix the issue, according to the Register . In addition, the vulnerability remains in the wearable even after it’s reset. Once infected, the device can install a virus, trojan or other vulnerability on your computer, even days later. “An attacker sends an infected packet to a fitness tracker nearby at Bluetooth distance then the rest of the attack occurs by itself, without any special need for the attacker being near, ” Apvrille said . While the Fitbit uses encryption, the Bluetooth transmitter itself is apparently wide open, allowing attackers in. If you want to find out more, Apvrille will present her findings via a video demonstration at the 2015.Hack.lu conference tomorrow in Luxembourg. @AaronIsSocial you don’t need physical access, but you need to be close (bluetooth range). It does not matter if it is paired or not. — Axelle Ap. (@cryptax) October 21, 2015 Via: The Register Source: Axelle Apvrille (Twitter)

View post:
Fitbit trackers can be hacked in ’10 seconds’

Lifelock failed to protect user data, says FTC

According to the Federal Trade Commission, the privacy-protecting firm Lifelock has failed to adhere to the terms of a 2010 settlement to improve its ability to protect personal data . Read the rest

Visit site:
Lifelock failed to protect user data, says FTC

There’s a Massive 26,000 mAh Battery Hidden Inside This Briefcase

The bigger a portable charger you carry, the longer your gadgets can run while away from a power outlet. But backup batteries are heavy, so it’s a tradeoff between capacity and what’s comfortable to stash in your pocket. Unless you throw a bag like the Phorce over your shoulder, which makes it easy to haul around your toys, a laptop, and 26, 000 mAh of extra power Read more…

Excerpt from:
There’s a Massive 26,000 mAh Battery Hidden Inside This Briefcase

Bluetooth Is Getting an Intelligence Boost to Save Your Battery

Since Bluetooth was given an overhaul in 2010 with the 4.0 standard, it’s surged in popularity, being used in everything from wireless speakers to smartwatches. Now, the connection is getting a shot in the arm—and it should help save your battery. Read more…        

More here:
Bluetooth Is Getting an Intelligence Boost to Save Your Battery

Kwikset introduces Kevo, a smartphone-friendly lock powered by UniKey

It’s not the first time that Kwikset ‘s dabbled in wireless locks , but today the company’s introducing Kēvo, a smartphone- (and tablet-) friendly lock powered by UniKey. The concept is pretty simple: pair a handset (running a special app) with Kēvo via Bluetooth, and simply touch the deadbolt to lock or unlock your door. A keychain fob is also available for those who have not yet joined the smartphone revolution. Kēvo only responds to touch when an authorized device or fob is detected nearby. A triple tap lets anyone lock your door, which is useful if a visitor leaves after you. The deadbolt is battery-powered using four AA cells that last more than a year with normal operation. It features a ring of RGB LEDs for feedback and a standard physical key for backup. Most of the magic is made possible by tech developed by UniKey. The key (natch) to the entire system is the Kēvo app which lets you manage eKeys. Once logged into the app, you can send and delete eKeys, or transfer them to another device (this also deletes the eKeys associated with a lost handset, for example) — you can even create eKeys that only work once. Currently, the app is only available for iOS, which is a major limitation, but it supports push, email and SMS notifications and keeps a detailed log of which eKeys have accessed Kēvo and when. Pricing and availability remain a mystery, but all in all the system looks pretty clever. Stay tuned for more details, and check out the link below. Filed under: Cellphones , Household , Tablets , Wireless , Software , Mobile , Apple Comments Source: Kwikset

More here:
Kwikset introduces Kevo, a smartphone-friendly lock powered by UniKey