Bad news: KeyWe Smart Lock is easily bypassed and can't be fixed

Bad news: KeyWe Smart Lock is easily bypassed and can't be fixed

Good news? There is no good news


File this one under "not everything needs a computer in it". Finnish security house F-Secure today revealed a vulnerability in the KeyWe Smart Lock that could let a sticky-fingered miscreant easily bypass it.


To add insult to injury, the device's firmware cannot be upgraded either locally or remotely. This means the only way to conclusively remediate this problem is to rip the damned things from your door and replace them with a bog-standard lock.


The KeyWe Smart Lock is primarily used in private dwellings, and retails for circa $155 on Amazon. It allows users to unlock their doors through a traditional metal key, via a mobile app, or with Amazon Alexa.


Its Achilles' heel is what F-Secure describes as "improperly designed communications protocols". These ..

Support the originator by clicking the read the rest link below.