Hacking Wireless Security Systems

DW · Jul 21, 2003

How hard is it to "hack" a wireless security system? For example, if I
installed one of the wireless key fobs or had a wireless handheld
keypads, would it be difficult for a sophisticated burglar to simply
disarm the security system?

What security mechanisms, if any, are in place to protect against this
type of attack. Are their security codes you need to put into the key
fob/handheld. Do these keys rotate or are they static. How many
possible codes are there (to prevent an attacker from trying all
codes).

I expect buglars with advanced techniques to do this is unlikely. I'm
just curious from an academic point of view.

I'm not sure if this is the appropriate venue to discuss the topic,
but, if a burglar would attempt to do this. What would they need? Some
sort of RF sniffer? Or just a programmable fob?

Thanks in advance, I know this issue may be controversial considering
all the other postings I've on wireless vs hard-wired.

DW

Frank Olson · Jul 21, 2003

DW said:
How hard is it to "hack" a wireless security system? For example, if I
installed one of the wireless key fobs or had a wireless handheld
keypads, would it be difficult for a sophisticated burglar to simply
disarm the security system?

A perp couldn't use just any wireless keypad of the same brand as your
system. They have to be "enrolled" to your particular panel. If a perp
were to obtain the wireless keypad for *your* system it would take him
awhile to discover the four digit code you use to disarm. Some panels
employ an anti-hacking feature that your installer can enable (three or four
wrong code entries and the system "locks" for a period of time programmed by
your installer *and* transmits a code to the Central Station). He could
also inadvertently enter a "duress" code with some rather embarassing
results (for him). A keyfob with a single button "off" wouldn't present any
difficulty (which is why I normally recommend people use fobs to *arm* the
system, but not *disarm* it). If you *do* manage to lose a wireless keypad
or fob, though, make sure you contact your security company so they can
disable it (this can be accomplished by downloading the information to your
system without having a service man actually visit).

What security mechanisms, if any, are in place to protect against this
type of attack. Are their security codes you need to put into the key
fob/handheld. Do these keys rotate or are they static. How many
possible codes are there (to prevent an attacker from trying all
codes).

On a system that employs a four digit access code, there are 10,000
combinations. That number goes down with the number of different codes you
have programmed in.

I expect buglars with advanced techniques to do this is unlikely. I'm
just curious from an academic point of view.

It's a question I frequently get asked.

I'm not sure if this is the appropriate venue to discuss the topic,
but, if a burglar would attempt to do this. What would they need? Some
sort of RF sniffer? Or just a programmable fob?

An RF sniffer won't help him. A programmable fob or wireless keypad would
have to be enrolled in the system to work with it. You can only do this
through installer level programming or by downloading the fob's/keypad's
unique serial number to the panel. Both these methods are beyond the
capability of any burglar.

Thanks in advance, I know this issue may be controversial considering
all the other postings I've on wireless vs hard-wired.

No problem...

Trublechuter · Jul 21, 2003

the best way to find all the info you want is to go to all the main
producers of wireless and check out there sites. The combinations are huge
and doubtful a burglar would have the equipment or patience for a simple
home invasion.

Frank Olson · Jul 21, 2003

Don't know what movies you've been watching... The only one that mentioned
anything about "replay" I enjoyed recently was "The Fifth Element"... I
mean we're talking the same level of "expertise" as the ex-KGB guys in that
Cindy Crawford movie. That's way out of league of the "perp on the street".
Even if he did manage to "hack" the serial number of the keypad (highly
unlikely), he'd have to use an *identical keypad* and the arming code to
disarm the system... If you ask me, it's simpler for him to kick in the
front door, run to the master bedroom, grab what loot he can that's easily
transportable, and get the heck out... Like three to five minutes...

Frank

J. Sloud · Jul 21, 2003

How hard is it to "hack" a wireless security system? For example, if I
installed one of the wireless key fobs or had a wireless handheld
keypads, would it be difficult for a sophisticated burglar to simply
disarm the security system?

Any system can be compromised. Even systems installed to DCID 6/9
specs, which are used to protect top secret level classified
materials, aren't absolutely secure. It's interesting to note that
such specs prohibit wireless technology unless in is absolutely
necessary and the wireless technology is "impervious to jamming,
manipulation, and spoofing."

As a general rule hardwired systems are more secure, but for a
residential application, the likelihood that someone could or would
"hack" a wireless system is so remote that it shouldn't be a concern.

J.

RH.Campbell · Jul 22, 2003

Careful John ! You've just branded yourself as a "low level technician" like
the rest of us....hehehe.....

RHC

RH.Campbell · Jul 22, 2003

Oh yeah, but I made up for it with my other post... jeez...I wouldn't want
anyone to think I can answer in one sentence when 100 will do it a bit
better....

)))

RHC

Mark Leuck · Jul 22, 2003

Macy Hallock said:
As quoted from "Frank Olson"

What ever do you mean?
We all know from watching "Mission Impossible" that all Greg Morris
(as Barney Collier) had to do was put in the right wire jumper from
the red wire to the green wire to defeat the alarm. (short tip and ring?)
Worked every time. Still does and also defeats bomb timers, too.

Has anyone seen Greg Morris on TV in the last 20 years? Might be a good
reason why.....

Hooferi · Jul 23, 2003

Heh, heh, heh. That's the spirit.

Yep, an another standard Bassism.

Frank Olson · Jul 23, 2003

Hooferi said:
Yep, an another standard Bassism.

Nah... It's more "cuddly" ...

G. Morgan · Jul 23, 2003

X-NO-Archive: NO

Someone named "Robert L. Bass" <[email protected]> Proclaimed

I'd rather have the sack of shit...

Apparently.
[/QUOTE]
I see you are adding my name instead of the default reply. You must
love me. I feel so special. You are a scumbag Robert L. Bass.

G. Morgan · Jul 23, 2003

How do you know what "everyone else's" reaction is???

So you'd what?? Run over it again just to "help"???

OoooOOoo... Aren't you the precious one???

Just what we would expect from a "lay minister". He say's he does not
hate me, his actions prove otherwise.

-G

Artemis Gordon · Jul 24, 2003

Apparently.

Great the way you appear on command, Basshole.

Relish n Mustard! · Jul 24, 2003

Just what we would expect from a "lay minister". He say's he does not
hate me, his actions prove otherwise.

He only does the lay minister to get close to teen boys.

G. Morgan · Jul 25, 2003

Time for a group hug....

piffff......

Mark Leuck · Jul 25, 2003

G. Morgan said:
piffff......

Hey Graham what IS your boss's number?

Just curious

G. Morgan · Jul 25, 2003

Hey Graham what IS your boss's number?

Just curious

Ask Basswipe.

**** you too

Mark Leuck · Jul 25, 2003

G. Morgan said:
Ask Basswipe.

**** you too

Thanks thats a good idea, I just thought we'd all get a kick from calling
your boss

Moore's Lobby Podcast

Menu

Categories

Platforms

Content

Connect With Us

Network

Hacking Wireless Security Systems

Hacking Wireless Security Systems

DW

Frank Olson

Trublechuter

Frank Olson

J. Sloud

RH.Campbell

RH.Campbell

Mark Leuck

Hooferi

Frank Olson

G. Morgan

G. Morgan

Artemis Gordon

Relish n Mustard!

G. Morgan

Mark Leuck

G. Morgan

Mark Leuck

Similar threads