Get the latest tech news
A single default password exposes access to dozens of apartment buildings
An unchanged credential allows anyone to virtually control door locks and elevators at dozens of apartment buildings across North America, a security researcher found.
But relying on a customer to change a default password to prevent any future malicious access still classifies as a security vulnerability within the product itself. In a blog post, Daigle said he found the vulnerability last year after discovering one of the Hirsch-made Enterphone MESH door entry panels on a building in his hometown of Vancouver. TechCrunch intervened because Hirsch does not have the means, such as a vulnerability disclosure page, for members of the public like Daigle to report a security flaw to the company.
Or read this on TechCrunch
