BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//sched.securitybsides.org.uk//bsides-london-2023//talk//T
 UHM7Q
BEGIN:VTIMEZONE
TZID:GMT
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:GMT
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T020000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:BST
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsides-london-2023-TUHM7Q@sched.securitybsides.org.uk
DTSTART;TZID=GMT:20231209T105500
DTEND;TZID=GMT:20231209T114000
DESCRIPTION:Locks\, at their core\, are some of civilisation's oldest secur
 ity devices\; and\, much like any other security product\, not all of them
  are created equal. The current boom in IoT devices makes "smart locks" a 
 tempting proposition\, with many options promising affordable and robust s
 ecurity. But how good are they actually? How would you even find that out?
 \n\nIn this talk\, Alex and Miłosz shine a light on a popular line of sma
 rt locks commonly recommended on major UK marketplaces. Although the build
  quality of the locks makes them relatively resistant to picking and commo
 n physical attacks\, multiple issues with their "smart" functionality mean
 s that a small amount of reverse engineering of the associated smartphone 
 app allows anyone to construct valid unlock requests without any knowledge
  of authorisation material\, and without alerting the owner.\n\nThis talk 
 is beginner-friendly and no prior knowledge will be assumed. We will discu
 ss the process of discovering the vulnerabilities\, explain how the manufa
 cturer got things wrong (and how they could have done it better)\, and fin
 ally tempt the Demo Gods with a live demonstration of unauthorised unlocki
 ng of the devices.\n\nTopics covered will include: Bluetooth Low Energy co
 mmunications\, reverse-engineering of Android applications\, basic API/Web
  security
DTSTAMP:20260715T224046Z
LOCATION:Clappy Monkey Track
SUMMARY:"Open\, Sesame!" - unlocking Bluetooth padlocks with polite request
 s - Miłosz Gaczkowski\, Alex Pettifer
URL:https://sched.securitybsides.org.uk/bsides-london-2023/talk/TUHM7Q/
END:VEVENT
END:VCALENDAR