Security Alarm System: Feeling of Security or Cause for Alarm?
summary
Builds a compact M5Stack prototype that taps the COMBUS via ground, clock and data wires, logs four-digit PINs and emulates a keypad to arm, disarm and cancel arming successfully in live demos. Observes RF at ~433.9 MHz with 120-bit packets and 200 μs bit timing, payloads stored as fixed 16-byte fields with a trivial checksum (mod 0x100). Notes EEPROM holds config/installer codes, MCU is Renesas R5F, and a slow brute force (~100 attempts/day) is feasible.
AI-written summary · about
chapters (4)
- 0:00Start
- 16:46ATTACK TOOL
- 35:59SUMMARY
- 37:42Continue testing RF attacks • Pull configuration (including codes) from EEPROM
related talks
44mBreaking the Security of Physical Devices
36mOpen Sesame - Or How Secure Is Your Stuff In Electronic Lockers
47mMiniaturization
36mAlarm.DISARM - Remotely Exploiting & Disarming Popular Physical Security System from Public Internet
01h 00mHacking and Securing C++
24mEnhancing Physical Perimeter Defense Using SDR
21mApplications and practicality for device security
35mWireless Hacking With HackCUBE-Special