The folks over at Somerset Recon have published the second half of their look into Securam bluetooth enabled locks. The first part is a great teardown, and the second is the inevitable fully automated remote attack. Despite being targeted at the commercial market, the Prologic B01 lacks basic encryption. A quick Google search shows a number of safe and locksmith companies promoting these modules for installation on customer safes.
As the “Internet of Things” continues to take over every aspect of our lives, we need to start carrying bluetooth sniffers on every engagement. You never know where you’ll find insecure devices.