OpenSesame - hacking garages in seconds using a Mattel toy

samy kamkar · 526K views · 2015 · 11:14

Open on YouTube

Security & hackingEmbedded systems & DIY electronicsdemodated

Why Hacker News recommends it

HN people cite it as a memorable example of a clever low-cost hardware hack and as a reason to admire Kamkar's work.

What it is

Samy Kamkar demonstrates OpenSesame, a device that opens many fixed-code garage doors in seconds by exploiting a newly found attack, built around a Mattel toy. The video explains the attack and which brands are affected.

Recommended by 1 HN commenters across 1 different months, 2016 to 2018.

What Hacker News said

Recommends pizza · 2016-05 · on “Ask HN: Which hackers do you look up to the most?”

Samy Kamkar! Here is a video where he demonstrates how to open garage doors with a wireless Mattel toy: [this video] He also wrote that one XSS worm for myspace several years ago. Hi Samy, in case you happen to read this ;)

Cites feld · 2017-04 · on “iPhone App will not stay open - just flashes when trying to launch”

I'm using their product. Let me tell my story. I have an old garage door opener -- ancient Craftsman. It doesn't even have a secure RF opener; no rollover codes or faux-crypto. My wife lost her garage door opener remote. I looked for replacements and couldn't find any that were less than $40 new or $30 used. Ridiculous. I have an outdoor keypad on the garage, which is detached. It doesn't work very well in the extreme cold because the 9V battery gives out. This solves a unique problem for me: I do not want to buy a new garage door opener. Mine was recently rebuilt with new gears and should be good to go for years. Further, would be a few hundred dollars without labor, and I don't want to do

Cites rmetzler · 2018-12 · on “Thieves boosting signal from key fobs inside homes to steal vehicles”

I just read "Garage opener" and automatically I have to think about Samy Kamkar's OpenSesame Hack [0]. Regarding the keyfobs, I've seen demonstrations on video where the RF signal was relayed. I can search for them, but they were in German. [0]: [this video]