We're ethical hackers who spent our spare time over a decade coming up with a hack that created a master key for hotel rooms around the world. Ask us anything!
EDIT: Thank you for all the questions! It's 7:05PM in Finland and we are off for the weekend :).
Some people play football. Some people play golf. We like to solve mysteries. This is Tomi Tuominen, Practice Leader at F-Secure Cyber Security Service, and Timo Hirvonen, Senior Security Consultant at F-Secure. About a decade ago we were at an infosec conference in Berlin. We learned that a laptop of a fellow researcher was stolen from a locked hotel room while they were out. There were no signs of forced entry, not a single indication of unauthorized room access -- nothing physical and nothing in the software logs. The hotel staff simply refused to believe it happened. But we never forgot. We figured that it might be possible to exploit the software system and create a master key basically out of thin air. It took a decade of countless hours of our own time but last month we finally revealed our research, after working with the manufacturer to fix the vulnerability.
Now, for the first time, we're here to answer all the questions we can without violating ethical agreements with manufacturers and customers about our day jobs hacking businesses for a living and our hobby of hacking hotels.
You can find out more about the hack and why it took so long on this podcast: https://business.f-secure.com/podcast-cyber-security-sauna-episode-7
You can also find out more about ethical hacking by checking out this AMA by our colleague Tom: