Hello, tech enthusiasts! Let’s dive into a concerning discovery in the world of security technology that might just have you double-checking your door locks.
A security researcher has found that the default password in a popular door access system allows easy remote access to locks and elevators in numerous buildings across the United States and Canada.
The company that owns this system, Hirsch, refuses to address this vulnerability. They maintain that it’s up to customers to change the default password, which has left many buildings dangerously exposed.
This oversight means that residents and office workers in these buildings could be at risk of unauthorized access simply because the default settings were never adjusted.
Default passwords aren’t a new phenomenon, but relying on users to change them is a significant security risk that products like Hirsch’s should inherently address.
Eric Daigle, who discovered this glaring flaw, found 71 systems still using the default credentials by scanning the internet. These systems not only allow access to doors but also control critical areas such as elevators and common spaces.
The ease of hacking into these systems is alarming; anyone with access to the installation guide could infiltrate the building in mere minutes, leaving those inside completely unaware.
Hirsch has acknowledged the issue but seems unwilling to take meaningful action. They have not set up effective ways for users to report vulnerabilities, pointing to the importance of manufacturers providing straightforward security measures.
The implications of such design flaws serve as a reminder of the importance of adhering to modern security practices. In a world increasingly reliant on technology, ensuring user safety must remain a priority.