After dismissing security flaw, Amazon patches Key smart lock anywayAmazon downplayed the attack as "not a real-life delivery scenario," but it was serious enough to fix anyway.By Zack Whittaker for Zero Day | February 12, 2018 -- 13:36 GMT (05:36 PST) | Topic: Security7
http://www.zdnet.com/article/after-dismissing-security-flaw-amazon-patches-key-smart-lock-anyway/
(Image: CNET/CBS Interactive)Just how secure is Amazon Key, the company's smart door lock?
Amazon says it's very secure. But for the
second time since Key first launched, the company has fixed a flaw that could bypass the lock mechanism. This time around, Amazon won't concede that the latest lock bypass technique is a bug.
In case you missed it: a surprise video posted
last week by a security researcher purported to show him accessing a house protected by Amazon Key.
Amazon Key is
a regular door lock with a twist: Amazon delivery drivers can unlock your door, place a parcel inside, and lock the door again, all while being recorded and streamed to your phone by the
corresponding Amazon Cloud Cam for peace of mind.
It's part of an effort to save your parcels from being pinched off your porch.
It's that smart lock that the security researcher, who identified himself only as MG, claims he can bust open with a few dollars worth of equipment: a Raspberry Pi microcomputer, a battery, and a wireless dongle. In his video, he's shown opening an Amazon Key-equipped door after a delivery driver leaves a parcel and closes the door behind him.
The hack effectively blocks the bolt from locking once it's opened, allowing the hacker to later walk right into the victim's home.
[...]
