Flutterby™! : Chirp Systems "smart" locks compromised

RT BrianKrebs @briankrebs@infosec.exchange

The U.S. government is warning that smart locks securing entry to an estimated 50,000 dwellings nationwide contain hard-coded credentials that can be used to remotely open any of the locks. The lock's maker Chirp Systems remains unresponsive, even though it was first notified about the critical weakness in March 2021. Meanwhile, Chirp's parent company, RealPage, Inc., is being sued by multiple U.S. states for allegedly colluding with landlords to illegally raise rents.

https://krebsonsecurity.com/20...-systems-in-smart-lock-key-leak/

BrianKrebs @briankrebs

BTW in case you need help with Chirp Systems products, here is their user guide:

"User Guide

What do we want this to say? Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua."

https://www.chirpsystems.com/user-guide-copy

Via Lesley Carhart @hacks4pancakes@infosec.exchange who notes:

I told everyone. And nobody cared.