0.8 seconds to hack the gun safe: manager codes, encryption keys, and debug ports of the strongbox lock. 🗄️👨🏽‍🏭💥💵

Security experts Mark Omo and James Rowley shared their highly interesting research last week on safes from Liberty Safe - a US government contractor and a popular manufacturer of gun storage safes.

The analog version of the lock was quite secure; researchers were unable to find any vulnerabilities there. But there is a digital version of the lock, named “Prologic” - and this part of the presentation is fun and full of very interesting bugs.

Some interesting facts that caught my eye:

🗄️ In earlier versions of the locks, the master key was shared with law enforcement authorities.

🗄️ The person who sells or installs your safe will have a master key to open it (in case you forget your code).

At the end of the day, those safes are not very safe, huh?

More detail:

Cash, Drugs, and Guns: Why Your Safes Aren't Safe [PDF]: https://media.defcon.org/DEF%20CON%2033/DEF%20CON%2033%20presentations/Mark%20Omo%20James%20Rowlery%20-%20Cash%2C%20Drugs%2C%20and%20Guns%20Why%20Your%20Safes%20Aren%27t%20Safe.pdf