Hacking Hotel Locks - The Saflok Vulnerabilities Expanded

Learn about expanded vulnerabilities in Saflok hotel and apartment locks through this 38-minute DEF CON 33 conference talk. Dive deeper into the security flaws of these widely-deployed North American lock systems that rely on poorly-secured offline authentication mechanisms, making them vulnerable to attackers with basic system knowledge. Explore previously undiscussed aspects of the Saflok system including the handheld programmer, lock programming interface, and detailed analysis of bit fields and unencrypted data in credentials. Build upon the foundational "Unsaflok" research presented at DEF CON 32 by Lennert Wouters and Ian Carroll to understand why security-through-obscurity approaches fail in security products. Gain insights into the technical details of how these authentication vulnerabilities can be exploited and understand the broader implications for physical security systems in hospitality and residential environments.