Engineer wrote:Phones are being stolen all the time here in the UK, which does make it seem like an unneccessary risk, as using internet access might also be.
If you do like the idea of using your phone as your key, what I had in mind was something like this:
Where mobile/cell phones are being used more and more as electronic payment systems. I see no reason why the same idea could not be used as a key for your door - Assuming you did want such a system in the first place. I personally would not, not even for the convenience of opening my front door from the car when it raining.
I am also a bit puzzled about all these postings about CID spoofing. Ridinplugspinnaz kindly told me about it being possible even on the mobile/cellular phone (which I didn't know about before), but I don't see how that would help you to get in, unless you knew the PIN to enter when you called the lock? I mean if you are going to shoulder surf me in my car as I phone my door, then you can just mug me anyway, or take a picture of my normal key and cut one from that.
One could imagine using the CID spoofing in an active attack against the user in the reverse direction... namely, spoof CID in the reverse direction, and trick the user into thinking that the lock is phoning him to change the PIN with a computer-generated voice or something. Sure it sounds hokey, but I'd be willing to bet that at least 2/3rds of people who would buy such a system to lock something up would also believe that the lock is capable of calling them and prompting them to change the PIN because it's "been too many days since your last reset" or some other BS. All it should take is CID spoofing their home phone number.