SimpliSafe burglar alarms may not be keeping you safe at all

simplisafe burglar alarm screen shot 2016 02 19 at 2 17 08 pm
A burglar alarm system has one job, and one job only — to sound an alarm when intruders venture into your property. Unfortunately, SimpliSafe has failed its singular task in rather epic proportions. According to reports, the home alarm setup is riddled with an “unfixable flaw” that renders it practically useless when it comes to actually protecting you and your valuables from an intruder who is familiar with the flaw. The security system, used in over 200,000 homes, is cheaper than many on the market, but this is a real case in point of getting what you pay for. So when it comes to safety, please don’t be cheap — or at the very least, stay away from SimpliSafe.

According to a blog post published Wednesday by IOActive researcher Andrew Zonenberg, a clever and digitally savvy thief would be able to disable a SimpliSafe alarm relatively easily, and from quite a distance away. In fact, intruders could be up to 100 feet removed from your home and still be able to deactivate your security system, creating an in for themselves. More frightening still, Zonenberg writes, “This attack is very inexpensive to implement — it requires a one-time investment of about $250 for a commodity microcontroller board, SimpliSafe keypad, and SimpliSafe base station to build the attack device.” So basically, the intruder would be able to use the security system to … disarm itself.

So is there any solution to this massive flaw? Apparently not, the security expert writes.

“Unfortunately, there is no easy workaround for the issue since the keypad happily sends unencrypted PINs out to anyone listening,” Zonenberg says. “Normally, the vendor would fix the vulnerability in a new firmware version by adding cryptography to the protocol. However, this is not an option for the affected SimpliSafe products because the microcontrollers in currently shipped hardware are one-time programmable. This means that field upgrades of existing systems are not possible; all existing keypads and base stations will need to be replaced.”

Yikes.

SimpliSafe has responded to IOActive’s criticisms by noting, “While any wireless system is susceptible to this type of attack from a sufficiently savvy and motivated intruder, our systems can be backed up with a land line or an Internet connection for no additional cost.” The company also claims that the sort of attack described by the blog “represents such a small percentage of total break-ins that the FBI does not even keep a count.”

SimpliSafe continues, “This is because the majority of break-ins are a quick forced entry and not the sophisticated type of attack that requires diligent planning as well as highly illegal and cost-prohibitive equipment. Assuming an intruder has the requisite technology, he would need to know the frequency ranges he needs to jam, and also know the layout of your home beforehand, as he would have to avoid motion detectors even in the unlikely event that he bypassed a door sensor.”

So better hope your burglars aren’t so tech savvy, or replace your alarm system.

Product Review

Alexa, annoy my neighbors! The Echo Sub brings the boom you've been missing

Amazon’s Echo Sub is aimed at Echo speaker owners looking to inject some room-moving bass into their smart speaker experience. We quickly learned that it’s a niche product, but one that does its odd job extremely well.
Mobile

Huawei and Leica’s monochrome lens is dead, so we celebrate its life

The Huawei Mate 20 and Mate 20 Pro do not have a dedicated monochrome camera lens, unlike the P20 Pro, and various Huawei and Leica phones before it. It's the end of an era, and also the start of a new one, as Leica has worked on its…
Product Review

Never invite a Shark robot into your house. Unless it’s this vacuum

Robot vacuums can definitely make chores suck a lot less, but they aren’t capable of cleaning places that are off the floor. Shark has an answer for your couch cushions and your carpets with its new S87 cleaning system, which comes with a…
Product Review

The Kasa Cam Outdoor delivers smart security monitoring at a great price

While it may lack the sexier features of Nest Cam IQ Outdoor, the weatherproof TP-Link Kasa Cam makes home security easy, with full-HD video streaming at a great price
Smart Home

May the force cook with you: New slow cooker sports Star Wars figures

We can't say it will make your pot roast tastier, but Uncanny Brands' $50 Star Wars Slow Cooker, decorated with cartoon figures of Luke, Leia, Darth Vader, and other characters, might make cooking it more fun.
Smart Home

Gas dryers vs. electric dryers: Knowing the difference could save you some dough

Whether you buy an electric dryer or a gas dryer may depend solely on your setup, unless you want to spend money to get a gas hookup for your home. But if you have a choice, there are some differences to take into account.
Smart Home

Is your smart home lighting too confusing? Intellect simplifies your controls

Leviton introduced Intellect, a new controls platform for smart home lighting. Intellect is the fifth brand to join Leviton's portfolio, alongside ConTech, Intense, Birchwood, and JCC.
Smart Home

These awesome treehouses will make you question life on solid ground

Check out these truly awesome treehouses from around the world. From a three-story treehouse in the Costa Rican jungle to a mirrored cube hidden among the trees of Sweden, we’ve got you covered.
Smart Home

Nest gets more colorful with three new options for its smart thermostat

Nest Parent company Alphabet announced this week that its Nest Learning Thermostat will soon be made available in three new, fancier colors: Mirror black, brass, and polished steel.
Smart Home

Publish a new Alexa skill this month and Amazon will give you an Echo Dot

Amazon' Alexa group announced a promotion encouraging new developers to publish a new Alexa skill in any country First-time developers who publish a new an Alexa skill prior to midnight October 31, 2018, will get a free Echo Dot.
Smart Home

August Smart Lock satin nickel model comes bundled with Wi-Fi Connect bridge

The August Smart Lock--one of our favorite smart locks--is now available in a satin nickel finish. August is selling the new model in a $220 bundle with the Wi-Fi bridge needed for remote access and voice command features.
Smart Home

LG’s Colosseo smart sofa is the comfiest piece of tech in your home

LG has partnered with Italian furniture brand Natuzzi to produce the Colosseo, a connected sofa with five custom scenarios to provide maximum comfort for watching TV, reading, or just relaxing.
Smart Home

Simplisafe steps outside the smart home with its Video Doorbell Pro

SimpiSafe is pushing into the smart home market by introducing a new high-tech video doorbell that includes 1080p HD monitoring and a dual-sensor motion trigger that combines a body heat detector and a motion detector.
Smart Home

Facebook’s new Portal device can collect your data to target your ads

Facebook confirmed that its new Portal smart displays, designed to enable Messenger-enabled video calls, technically have the capability to gather data on users via the camera and mic onboard.