topic Re: Amazon Key security flaws in Community Chat

Amazon Key security flaws

KingstonsMom — Fri, 17 Nov 2017 18:21:12 GMT

A high tech solution that gives Amazon delivery drivers access to your home could be exploited by criminals, computer security experts have warned.

Amazon Key lets staff from the retail firm enter your property, using an app to unlock your door, while the delivery is recorded via a web-connected camera.

A bug in the software could enable hackers to freeze the images shown on your door being closed securely, while they are really making off with your prized possessions.

Researchers from Seattle based network vulnerability firm Rhino Labs discovered the flaw, which utilises a common issue with many WiFi connected gadgets.

Their demonstration shows a delivery person unlocking the front door to a property with the Amazon Key app.

They open the door, deliver the parcel, and then close the door behind them.

Amazon's delivery drivers would then lock the door via the app.

For the purposes of the demonstration, however, experts show how a simple device composed of a Raspberry Pi minicomputer and a WiFi antenna can be used to freeze the camera on a frame of the locked door.

This would allow a thief to re-enter your home and steal your belongings, while the camera would show that everything was normal.

The service is currently available in 37 cities and their surrounding areas across the US, with more locations expected to be added.

It is not yet known if the firm plans to expand Key globally.

Speaking to Wired, Rhino Labs founder Ben Caudill said: 'The camera is very much something Amazon is relying on in pitching the security of this as a safe solution.

Re: Amazon Key security flaws

spot555 — Fri, 17 Nov 2017 18:25:56 GMT

I'm totally shocked- NOT.

Re: Amazon Key security flaws

Kachina624 — Fri, 17 Nov 2017 18:28:37 GMT

When I first heard about this new delivery service, I could easily imagine all sorts of potential problems with it. I'd be amazed if anyone signs up for it; I know I'd think twice.

Re: Amazon Key security flaws

spot555 — Fri, 17 Nov 2017 18:31:35 GMT

Oh, I'll bet plenty of people sign up...people who are completely clueless about life on this planet.

Re: Amazon Key security flaws

GenXmuse — Fri, 17 Nov 2017 18:35:05 GMT

Gee, none of us saw that coming!

Re: Amazon Key security flaws

Nightowlz — Fri, 17 Nov 2017 22:30:25 GMT

I would never use that service. What are they thinking?

Nobody is in our house unless one of us if here.

We now people who let plumbers, electricians etc in their homes while they are not there. Not happening at our house.

Re: Amazon Key security flaws

jlkz — Sat, 18 Nov 2017 00:46:16 GMT

I think Amazon clearly did not think this approach through very carefully, especially in light of all the hacking and other technological interference that can occur.

There are better ways to solve this problem...have read about several. Perhaps Amazon is suffering from a corporate superiority problem that may tarnish its image and success in the future.