Yale Conexis door lock (initial review)

Soldato
Joined
27 Dec 2006
Posts
2,913
Location
Northampton
From initial views and impression of this lock.
This is now my 2nd day now with the lock and I want to give my opinion of the whole process as I feel people are getting mixed feelings on this product

The door lock is big and something thats a lot bigger than most conventional multi lock handles due to the components inside.
I've watched a few youtube videos, read the instructions a few times before dismantling my front door lock.I would class myself as logical thinker as everything has a reason behind why things are done in a certain way. So with that mind I began to dismantle my front door lock

I set myself an afternoon to go slowly and to make sure its done right and not rushed, installing went well I think as I only took just over an hour to check and double check it worked correctly. I was a bit nervous with closing the door for the first time but obviously check mechanics worked and the unlocking worked with the app and supplied key fobs.

As every door is slightly different I didn't have to deviate from the instructions and used 95% of the supplied parts but my original door is somehow different and I think there was only one screw which I had to reuse.

I read how many on online (including Youtube) said that the motorised did not engage all the time or didn't register the lever being pulled up but I think they didnt follow the precise instructions and perhaps missed a bit with either the length of the lock lever or something else. I made myself double check things ever set it place and when I tested it for the first time it worked smoothly and perfectly.

The rest of the install went fine, registering the key and the fobs went well. The app is a bit slow bit the actual process of unlocking on the fob or card works well. I dont know why many had issues and I think its down to placement where the reader has to keep in contact with the tags. There are improvements which the app can do such as maybe adding some sort of fingerprint authenticator for added security but I guess if you just want to open your front door you dont want flaff around too much.

Like I say its still early days but so far I can't complain as its all working as expected.

I will be ordering my Z-wave module and USB stick to make it compatible with my home assistance as I need some level of remote control.




And a short little video from the outside using the key fob and card
https://streamable.com/pghzvb
 
I still keep waiting for the Nest Yale lock I the UK.
Seems to just keep being delayed :(

If it's anything like a lot of nest stuff waiting for UK launch, then it could be a while.

I remember the nest security alarm was penned for release in the UK and several years later I think they abandoned it.
 
I can't find videos of it being hacked. There is one on youtube of a guy cloning the rfid tag that opens it, but....so what?

Is this any different to being able to pick the lock on any door though?

Picking is pretty hard to do in real life conditions quickly. Being able to hack these electronic smart ones is worse yes because a theif can sit legally nearby presumably in say a vehicle, doing all the hacking and then walk in instantly when they want.
 
I can't find videos of it being hacked. There is one on youtube of a guy cloning the rfid tag that opens it, but....so what?



Picking is pretty hard to do in real life conditions quickly. Being able to hack these electronic smart ones is worse yes because a theif can sit legally nearby presumably in say a vehicle, doing all the hacking and then walk in instantly when they want.

That's the video.

If some dude can clone a tag, then it's not safe as you think it is.
Just imagine some guys outside your place dead at night with a laptop.
 
That's the video.

If some dude can clone a tag, then it's not safe as you think it is.
Just imagine some guys outside your place dead at night with a laptop.

I watched that video and the hacker first needs to get hold of your RFI tags to scan them. Now if we dont use tags but just our phones to unlock then there wouldn't be a chance of them stealing the encryption key in the first place.
 
I watched that video and the hacker first needs to get hold of your RFI tags to scan them. Now if we dont use tags but just our phones to unlock then there wouldn't be a chance of them stealing the encryption key in the first place.


I don't think you get it :)

They can downgrade the z-wave chip while in a car on the road.

"Silicon Labs, the company behind Z-Wave, has responded to the research and insists the ability to downgrade to S0 is not a vulnerability but a feature designed to support backwards compatibility. Plus, it claims an attacker would have a very narrow window to capture the key."

:cry::cry: A feature :cry:

https://bacpress.com/the-british-company-claims-to-have-a-smart-lock-hack/?lang=en


Oh. And never leave your alexa\google hub on at night :)
 
I don't think you get it :)

They can downgrade the z-wave chip while in a car on the road.

"Silicon Labs, the company behind Z-Wave, has responded to the research and insists the ability to downgrade to S0 is not a vulnerability but a feature designed to support backwards compatibility. Plus, it claims an attacker would have a very narrow window to capture the key."

:cry::cry: A feature :cry:

https://bacpress.com/the-british-company-claims-to-have-a-smart-lock-hack/?lang=en


Oh. And never leave your alexa\google hub on at night :)


Unless i've completely misunderstood the video, they say they can only do the "downgrade" during the pairing process. Which means once a key is paired they're no longer able to hijack the traffic. That would give an attacker an extremely slim window of opportunity to hijack the pairing traffic at the point you pair your key fobs?
 
Unless i've completely misunderstood the video, they say they can only do the "downgrade" during the pairing process. Which means once a key is paired they're no longer able to hijack the traffic. That would give an attacker an extremely slim window of opportunity to hijack the pairing traffic at the point you pair your key fobs?

Best not advertise to the world or put a sign on my windows to say I'm doing the pairing process between 2-3pm on the 26th July 2021.
 
Best not advertise to the world or put a sign on my windows to say I'm doing the pairing process between 2-3pm on the 26th July 2021.


You never read the link.

Anyone can leave a z-wave catcher anywhere.
That's all the need. And just by looking the door lock one can tell it's either z-wave\zigbee\wi-fi.
 
That's the video.

If some dude can clone a tag, then it's not safe as you think it is.
Just imagine some guys outside your place dead at night with a laptop.

I'm imagining it.... yep not bothered. So they can clone TAGS. So what? Explain how it has been "hacked"? It hasn't.
 
Back
Top Bottom