Skip to content

Comment on Bitlock replaces your bike key with your phone

Comments

What's the advantage over a traditional lock?

one less thing to carry. no more lost keys or searches to find them. Ease of use. With the bluetooth 4 ease of connectivity, interaction between your smart phone and locks will be invisible. sharing access: something you can't do with physical keys.

sharing access: something you can't do with physical keys.

Except by, you know, sharing the physical key, or having more than one copy, or using more than one lock linked together, etc.

One less key to carry, I imagine. Practically speaking, I wouldn't really mind having my wallet and keys integrated with my smartphone. It is the security implications that make me uneasy.

Sure. It seems like this is taking a problem space (physical security) and adding complexity by introducing another problem space (digital security), while further increasing my dependence on my phone.

Is one less key that big of a deal? I have about a dozen keys on my key chain, but can easily identify my U-Lock's key because it is very distinct and bright green.

My first thought is security. But is the lock opening a security flaw in existing quality bike locks, or are they vulnerable primarily from some other angle (like leverage)?

There are two sides when it comes to the lock security. First is the structural security.

Comparing to the locks in the market in terms of structural security we are well above average. We can't beat Kryptonite New Yorker but we are as good as other Kryptonite U-Locks. Note that every lock in the market can be easily compromised with an angle grinder. The amount of extra (structural) security you get per dollar has a diminishing return. For example, a $60 lock is probably six times more secure than a $10 lock, but $100 lock maybe hardly twice as secure as a $60 lock.

In terms of electronic key security (or keying security), there is no way to hack the lock. Everything is encrypted using 128-AES (access control industry standard). Plus we make sure our keys have are completely random and have maximum entropy. On a side note, I have a PhD on embedded system security, so you can probably on this one. We are also going to send BitLocks to a group of hackers in Germany and challenge them to compromise the security of the locks.

A final note, encryption even the lousy ones are way more secure that the mechanical keying systems. Most locks can be picked by professional lock pickers.

How do you protect the compartment containing the electronics, battery and motor?

Is there some mechanical interlock so the lock must be unlocked before opening this compartment?

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.