It Looks Like a School Bathroom Smoke Detector. A Teen Hacker Showed It Could Be an Audio Bug
Briefly

Halo 3C devices can be easily hacked through brute-force password guessing, attaining speeds of 3,000 guesses per minute due to ineffective security measures. Once hacked, users can update firmware despite security protocols meant to enforce protection, as the necessary cryptographic key is inadequately available. Motorola Solutions has acknowledged the need for security measures and released firmware updates. The Halo 3C features a Dynamic Vape Detection algorithm and a written keyword alert system designed to enhance safety in schools and other sensitive environments.
"It's trivially possible to guess passwords as quickly as the thing can respond to you," says Nyx. That meant they could guess roughly 3,000 passwords a minute, and crack any insufficiently complex password relatively quickly.
"They're handing you a locked box where the key is taped to the underside," Nyx says. "As long as you know to look down there, you can open it up."
A Motorola Solutions spokesperson said in a statement: "Motorola Solutions designs, develops and deploys our products to prioritize data security and protect the confidentiality, integrity and availability of data.
The HALO Smart Sensor can detect specific spoken keywords that immediately alert security to a potential issue. Pre-defined keywords like 'help' are particularly valuable in environments such as schools, where bullying is a concern.
Read at WIRED
[
|
]