Software Engineering Radio - the podcast for professional software developers SE Radio 640: Jonathan Horvath on Physical Security
Oct 30, 2024
In this engaging discussion, Jonathan Horvath, owner of Z-bit Physical Access Control Systems Consultancy with over 25 years in the field, delves into the intricate world of physical access control systems. He highlights the slow shift from proprietary systems to open standards like OSDP and the security risks of cloud-based systems. Horvath reveals vulnerabilities in hotel key card systems, explores advancements in credential technology, and stresses the importance of local decision-making in an increasingly interconnected security landscape.
AI Snips
Chapters
Transcript
Episode notes
Hotel Key Card Security
- Use tools like the Flipper to assess hotel key card security.
- Advocate for inherently secure open standards to improve overall system security.
Hotel Key Card Reuse
- Hotel key cards may use static identifiers, enabling cloned card access even after checkout.
- Authorization can occur at various PACS levels: credential, reader, panel, or host system.
Access Decision Placement
- Make access decisions close to the endpoint for reliability in emergencies.
- Cloud-based systems risk access failures during internet outages.