Hotel door locks: from the 2012 Onity flaw to SALTO CVEs
A probe on a service port opened Onity hotel locks in 2012. Four SALTO ProAccess SPACE CVEs show physical security is still the weak layer in hotels.
Oct 27, 20264 min read
Guest tech
Wifi, keycards, smart locks, in-room TVs and guest services: the technology guests touch, and how well it holds up.
3 stories
Kr00K: the Wi-Fi flaw hiding in hotel access point firmware
Kr00K (CVE-2019-15126) made Broadcom and Cypress Wi-Fi chips encrypt frames with an all-zero key. Patches shipped in 2019-2020. Open question: AP firmware.
Oct 27, 20264 min read
Unsaflok and the MIFARE backdoor: hotel keycards cloned in minutes
Unsaflok opened any Dormakaba Saflok hotel lock with two forged cards. A separate hardware backdoor hits MIFARE Classic cards used in hotels worldwide.
Oct 27, 20264 min read