Insecurities in hotel door locks

Unsaflok is a vulnerability in a particular brand of electronic door lock which is commonly found on hotel room doors, the kind that uses an NFC/RFID key card to open it. An attacker can rewrite a pair of these cards to open one of these locks, even if the deadbolt is locked. This attack may be possible even without rewriting a pair of cards—some devices capable of NFC emulation (e.g., some android phones, Flipper Zero) can also transmit the signals that unlock the door.

The most optimistic outcome of this is that it takes months or even years for hotels to replace all of their door locks. The reality is that some hotels will never replace these locks, leaving this vulnerability in place indefinitely.

Does a character in your story need to gain access to a hotel room? Looks like she only needs one keycard from the same hotel, which she might find in a trash can in the parking lot.

And if you’re staying in a hotel that might use locks like these, you may want to type something like “hotel door locks for travelers” into the search feature of your favorite retailer.

Unknown's avatar

Author: carl

A web programmer and Linux system administrator who would like to be a writer.