Stefan Mileschin

Tapplock blasted

An electronic padlock which unlocks with a fingerprint or an app connected by Bluetooth to your phone does not work, according to the FCC.

Tapplock’s product is full of digital and physical vulnerabilities that leave users' stuff, and data, at risk.

The FTC's complaint (PDF) against Tapplock, alleges that the company misrepresented itself, because it marketed its products as secure and tested when they were neither.

While a product being pants is not normally a worry for the FTC saying untrue things about your product in your advertisement or privacy policy, is part of the Commission’s remit.

Tapplock's website said that its lock is built with "7mm reinforced stainless steel shackles, strengthened by double-layered lock design with anti-shim and anti-pry technologies".

While this is true, a researcher unlocked the lock "within a matter of seconds" by unscrewing the back panel.

The complaint mentions several "reasonably foreseeable" software vulnerabilities that the FTC alleges Tapplock could have avoided if the company "had implemented simple, low-cost steps".


https://fudzilla.com/news/iot/50615-...ck-which-isn-t