Yeah that's why I never mentioned WiFi ones. Which can still be secured by not letting them access the rest of the network or the internet. That's what we do in industrial automation, security standards for PLC software tend to suck, but that's irrelevant if it can't be reached.
and if you do a teardown on one of those locks you can probably get the firmware and uart to get the unlock function which you could use theoretically to unlock every single one
I don't see how that's relevant for a lock that's inside an armoured door, it's only accessible by disassembling the door, at which point unlocking it is moot.
Again, my door is armored and I live in an apartment high up enough that climbing, while possible, is challenging.Together with non-flashy vehicles and the complete absence of anything valuable (besides RAM!), we're not an interesting target. Even if someone broke in they'd have to be an electronics enthusiast to find anything worth stealing.
ZigBee, Z-wave and Thread have virtually 0 attack surface from an IoT perspective, and even then what are they gonna do, do radio hacking to turn off and on my lights? It's not like they can be used in a botnet.Locks is a bit more risky as an endeavor, but again, it's probably easier to pick the lock than hack it... Actually with the quality of many smart locks, smashing them is easier still.
Smart TVs are way more problematic devices for example, as soon as they stop receiving updates, you have a bunch of high-speed internet connected devices with unresolved exploits just sitting there waiting for the right chance.
I was considering a smart lock for my (armored) front door, but just because there are some locks manufactured here in Italy that can be set to be controlled by external contacts.Which means I could use and ESP or similar with esphome, now they also support wired, ethernet ones.That's way more secure than the shitty lock I have now, I've seen videos of people picking that with a decoder device in 30 seconds.
Can't assume I've read anything but the comments upstream to me