Knox Boxes Hacked

An IPVMU certified member emailed this story to us: Security expert warns fire department lockboxes can be hacked

The impact of this 'hack' - essentially reverse-engineering a great-grand master key that fits all boxes - is especially troubling, because the point of these boxes is to be an external facing vault that stores a facility's particular master keys.

If you can unlock one Knox Box, you can theoretically open thousands of buildings.

I expect that one of the recommendations in dealing with this issue will be to install intrusion alarm contacts on the vault door. Layers of security are important.

I'm curious to read you thoughts!

Login to read this IPVM discussion.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

***** ***** **** *** *******:

"[******/******] **** ** ******* *** **** ** * **** *** lock **** * ****** ******, ****** *** *** ****, ******** them, ******** *** *******, **** ****** *** * *** **** the ****. ** ************ ********* *** *** ****** ** ******* it ** * ****** **** *** ** *** *** **********."

********,********** ******** / ***** ** **** *****.

**** ******** ** ****** *** * ****** ******. * ******* it **** ******* **** *** **** *** ** *** *** the *** *** *** ****. ****, *** *** ****** ** mounted ** * ****** ******* **** **** ******** * ***** ladder ** ******. ** **** ***, * *** *** **** be **** ******* ** ** ****** *** *** ****** *** box. *******, * ***** ******* **** *** ********** ******* ** used, ****** ** ********* ********* ** ******.

* ** ********. ** * **** * ******* ********** ***** grandfather *** *** * ** ** * **** ***, *** will * ****** ****** ****** **? * ***'* **** ** rip *** *** *** *** **** **** * **** **** hacked ***, **?

****** ****** ****** ******** **** *** **** *** **** ** opened ** *** *****, ********* **** * ***. ** ***** is * **** ********* ** *** ******** **** ******** ******* the ***, ******* *** *** ********* ***** *******'* ** * problem ** ******/********* ********** **** ******* ** ***** **** ********* is ********* ** *** ********.

*** **, ** ****** **** *** ****** ******* ****** ******* if **** ****** ****** **** *** ** ******* **** * hacked ***** *********** ***?

*** **, ** ****** **** *** ****** ******* ****** ******* if **** ****** ****** **** *** ** ******* **** * hacked ***** *********** ***?

****** ******** ***** ** ********* ***** ******* ****** ******* ********** the ***. ** **** *** ******, ** *** **** ** minutes ** ******, ** **** ******* ** ***. ** **** smaller ****** *** *****, ****** ******** ***** *** ** * minutes ** ****.

********, ** ***** ***** * ******* **** * *** ** a **** ***, *** ******* ******* ****** ***** ******* ** alarm **** *** *** ****** ******, *** **** ********** ****** on *** ***** **** *** ******** ****** *********. * **** central ******* ******** ***** (** ******) **** **** **** *** the ******* ** ** ****** ******** ****** **** * ***** alarm *** ****** **** **** ** *** ****** **********, ********* reducing ******** *****.

*** ** *** ******** **** **** ****** ** ** ******* uses * *** ** * **** ***** **** ** **** set *** * ****** **** ***** *** * ***** **** respond.

**** *******, *** **** ***** *** ******* ******* * ** 10 **** ***** ***** *****, * ****** **** **** **** a ****** ** * ****** **** **********. **** * **** to *** **** ***** *** **** ************, ** ********* ******* the **** **** *** ****** ****** *** ********* ** ** a *********** ***** ** *** **** ***** *****. **** **** alarms *** ****** ******** ** * ****** ********** ******* *** generally ******* **** ********* **** ********* ****** ** ***** ***********.

** *** ** *** **** ********. *** ******* *** ****** in *** **** *** ** *** **** ***** ***** ** the ********** ******* ********** *** **** ********** ******* ** *** police?

**, ** ***** *** ** ** **** *** ********** ******* to ******** *** ******, ** **** ** ****** *** **-**** owner's **************. **** *********** ********* ***'* ******* ** *********** *******. A **** ***** ****** ******* ********* *** "**'* ******* ******* system ***** *****" ********. ** *** ****** ********* ******* (*******, water ******, ***.), *** ***** ** ********* *** ***** *** police ** *******'* ******** ******* ** ** ***** ** * facility ***** ** ***** ******** ********** ** ***** ****** **** the ******.

*** *** **** ****, **'* *********** ******* ***** ******* **** the ****** *** **** ** ******* **, ** **** ******* are ***** ****** **** ** *** ****. **** ****** *** requiring ************ ** ** ***** ** * *********** ******, ******* by ***** ** *****, ****** **** **** ******** * *********. Commercial ******* ******* ******* *** * ********, ********** ** **'* something **** * **** ** ******* *****.

***** ***, **** * *** * ******* **********, * *** to ******* * *** ** ***** *** ** *********** ** broken *****. ******** **** ****** ****** *** **..

***,

*** **** *** **** ***** ****** ** ********* ** *** burglar ***** *** *** ****** ** ** ****** ***** ***** like * ****** ** * **** *******, ***..., ** *** be * *********** ******. *** ****** ***** **** *** **** is ******. ** **** *** **** ** * *** ** used ** *** **** ** ****** ***, ** *** **** is *******. **** *** **** ***** *** *** **** ***. There ** ** *********** ** **** * **** *** *** a **** ***** *****. ** **** *** **** * *********** to **** * **** *** ** ***** ******** *****. ******* many *** **** ******* * **** ***** ****** ** * facility **** ** ** *******. ** *** *** ***'* ****** co-exist **** **** *****.

*** **** ******* ** * **** *** ** ** ** event ** ***** **** ***** *** **** **** *** **** to ***** **** * **** ** **** ***** ** ***** out * ******** **** ****** ******** *****. ** *** ***** a **** *********** ******** ** * **** ***** ** **** of * **** *** **** ***** ** *** **** ***** is ******* ***** ** *****, *** **** ********** ** *** going ** **** ****** ** * ****** ** *** **** crew ** **** *** **** ** *** *** * ****** go ** ** *** ******** ** ****, ***** *** *** box, ***** *** ****** ** ******* *** ********, ****** *** key ** ****** **** ******, ***** **** *** *** ****** and **** ** ** *** ***** **** *** ****** **. Every **** ********** ** *** ***** *** *** ****** *** already. *** ****** *** **** **, **** ***. ** *** when **** **** ***** **** **** **** *****.

* **** **** *** **** ** **** ***** *** ********* idea ** *** *******. *** *** ********* ****** **** ******* the ********* ***'* ****** **** ******* *******, *** ** ******** by *** **** ******* ** ** ********* **** ***** *** live *** *** ******* *** *******. *** ****** ******'* *** that! *** * ****** ******* *** ********** * ********** ***!

*'** ****** ******** **** ***** ****** **** ******* *** *** day ********** *** ***** ** *** **** ***. * ******* those ********** **** ******** **** ***** ** * *** *******?