Why buying a “smart” padlock is a bad idea

[harlan4096]

Recently I’ve been binge-watching the LockPickingLawyer channel on YouTube. There’s a whole lot to learn from these videos, especially if you were never into the lock-picking business. But one particular thing made a big impression: how badly “smart” padlocks perform when it comes to physical security.

Disclaimer: I think it would be excessive to use ironic quotation marks throughout this text, so I’m not gonna do it. Just keep in mind that every time I use the word smart, I’m using mental air quotes — “smart.” And for that matter, lock might as well be “lock.”

Let’s start with the eGeeTouch smart luggage lock, which is supposed to be unlocked with either a smartphone app or an NFC (near-field communication) tag. Never mind that a TSA master key that anyone can print on a 3D printer can open every baggage lock, thus rendering all baggage locks useless. This little padlock makes it even worse. It is so badly designed that it can be fully disassembled and easily opened with nothing more than a pocket knife — even a plastic card might do.

The same goes for this Pavlit fingerprint padlock. Remove the plastic front panel with either a screwdriver or a pocket knife and you will see the switch that unlocks the shackle. By the way, this padlock has one more critical vulnerability — it is susceptible to shimming.

Another example: the TurboLock TL-400KBL bicycle smart lock. This padlock is designed to be opened either by a smartphone app connected by Bluetooth, or by entering a PIN with a keypad. Even if you’re no physical security expert, you can spot this padlock’s weakness: It’s made of plastic and presumably isn’t hard to break or even burn. But such destructive actions won’t be necessary in this case, because the padlock can be conveniently disassembled with a screwdriver. It’s as easy as taking apart a plastic toy.

Let’s take a look at the Uervoton fingerprint padlock. It has a metal body that looks pretty solid. No way can it be opened with a pocket knife or a screwdriver, right? Unfortunately, the design is terrible: a bunch of screws on the lock’s surface are easy to unscrew. After that, the lock literally falls apart.

Continue Reading