29: Are Web Connected Locks Secure?

The Lock Sportscast

Full show notes, including links, can be found at

http://www.thelocksportscast.com

In this week’s episode:

-Panda-Frog is providing more services for the community via his website.

-A plan for how to accept nominations and votes for the Locky Awards

-LockpickingDev is selling off some locks and custom picks

-Flaws in IoT devices revealed at Blackhat Europe and that might include some smart locks.

-Criminals

-Sales

-Giveaways

Contact Information:

Email: [e-mail]

Twitter https://twitter.com/charlescurrent

Reddit: currentc57 on r/locksport

Discord: Lockpickers United as Current, Extraordinary League of Pickers as Current, CBC as Current

Join the Discord at http://discord.thelocksportscast.com

Donate:

http://paypal.thelocksportscast.com

https://patreon.com/thelocksportscast

https://www.buymeacoffee.com/locksportscast

Executive Producers:

-m3ddl3r

-Panda-Frog

-Michael Gilchrist

-Starrylock

-WilliamsBrain

-2BDCy4D

Content Producers:

-MrBlack-Magic

-Chirael

-Panda-Frog

-Joshua Gonzalez

-HVLogic

-Michael Gilchrist

-Starrylock

-Pocket Women

Thank you to everyone that contributed to this episode. And to everyone that has shared this podcast with others.

If you feel you are getting value from this show, please help us by supporting the show in one of the following ways (listed in order of importance)

-Help me make this podcast a resource for the community by sending me any news or information you would like to share.

-Share this podcast with your lock picking buddies.

-Leave a good review in your favorite podcast app.

-Contribute financially

Corrections and Additions:

Deadlocks should have been mentioned as a content producer on episode 28

Panda-Frog should have been mentioned as a content producer on episodes 27 and 28

Announcements:

I want to wish everyone happy holidays

Reminder of LPU charity raffle. They are accepting prize donations

Chirael was the winner of the November Paclock A Month

Recent stories related to locksport:

https://www.bbc.co.uk/sounds/play/m000q9c2

Community News:

Multipick giveaway SN check https://multipick.challenge-lock.com/en

Lock Noob’s new channel Side Noob

MrBlack-Magic [11] Fingerpin Tutorial - What they are and How to Pick them (Smooth & Serrated)

MrBlack-Magic [6] Basi K10 (DOM iX 10kg) 9 Fin-Pins + 1 Interactive Element Picked and Gutted

Theboneinthebox Disection Table---Primus 29sL Part 1

Theboneinthebox Disection Table---Primus 29sL Part 2

Theboneinthebox Disection Table---Primus 29sL Reassembly

Wooden model of Chubb

LockpickingDev locks and picks for sale https://twitter.com/LockpickingDev/status/1339428106826698753

Criminals:

CAUGHT ON CAMERA: Irvington family has 2 cars stolen in same day

Suspicious driving results in Georgia fugitive's arrest | Local News

Man on probation charged by police with Bridgeton break-in

Belmont Man Sentenced to 24 Months for Conspiracy to Commit Bank Fraud

How TCP/IP Stacks Breed Critical Vulnerabilities in IoT, OT and IT Devices:

BlackHat page https://www.blackhat.com/eu-20/briefings/schedule/index.html#how-embedded-tcpip-stacks-breed-critical-vulnerabilities-21503

Paper How TCP/IP Stacks Breed Critical Vulnerabilities in IoT, OT and IT Devices

Slides How Embedded TCP/IP Stacks Breed Critical Vulnerabilities

Security Now 797 Covers this topic better

-Show notes https://www.grc.com/sn/SN-797-Notes.pdf

-Podcast coverage starts at 52:40 Next Episode Security Now 797 SolarWinds Dec 15th 2020

-On YouTube: SolarWinds - Chrome Throttling Ads, Google Outage, 2020 Pwnie Awards, JavaScript's 25th Birthday

Sales:

-Southord 25% Discount November 25th through December 23rd code CHEER25

-Commando Locks 15% off all locks code FALL2020 - Expires 2021-01-01 11:59PM EST

-MAKO Locks 15% off with code BUYMAKO Unknown exp

-MAKO Locks Black Friday Specials Also the code above works on these deals!

-UKLockPickers 10% off with code GIFT

Giveaways and Contests:

-Michael Gilchrist

- #Norlin250 subscriber giveaway

-Panda-Frog

- (ENG-108) Lockpicking - Roomtour and Giveaway announcement #xmasPF2020

-Starrylock - #shoutoutMonday

-Starrylock

-Pocket Women

-Charles Builds Crap on YouTube - To encourage you to send me information for this show, I’m changing the rules for my PAM Giveaway (see rules below) or https://www.thelocksportscast.com/p/paclock-a-month-giveaway/ https://www.youtube.com/user/MrCharlesCurrent

“PacLock a Month” Rules:

This year (2020), I’m giving away one of my custom PacLock 100A padlocks a month.

To be entered, you must:

1.Provide me with locksport or locksport community news that I can use on my weekly podcast.

-Submit your news via one of the following:

+Email: [e-mail]

+Reddit: currentc57 on r/locksport

+Discord: You can find me on the following servers as “Current”

~Lockpickers United

~Extraordinary League of Pickers

~CBC

-You will receive 1 entry for each news item I use in the podcast that month.

2.Share the podcast on social media

-Make sure I know about it by tagging me and/or emailing me a screenshot or other proof.

The winner will be drawn and announced the following month. The winner will have 1 week to contact me via email to claim the prize.

I will pay for shipping within the U.S. If you live outside the U.S., you can still enter, but must pay to ship if you win.

I reserve the right to change these rules as I need to during the course of the year.

I reserve the right to disqualify anyone for any reason. My decisions are final.

This giveaway is a thank you to the subscribers that watch my videos, listen to my podcast, and help me produce it.

YouTube is in no way a partner to this contest and all applicants agree to release YouTube from any and all liability related to this contest.

Personal data collected as a part of this contest will be used only for the purposes of this contest and will not be released to third parties.

Any entries that violate YouTube's community guidelines will be disqualified: http://www.youtube.com/t/community_guidelines