[Parents Corner] How would you set up a hackable safe? \ stacker news ~security

pull down to refresh

[Parents Corner] How would you set up a hackable safe?

2361 sats \ 12 comments \ @SimpleStacker 20h security

Ok, so my kid likes video games, perhaps a bit too much. He'll often wake up early to play games when he shouldn't, and it makes him tired out for the day. We could hide the Switch, or set up parental controls, but since he also likes computers, I thought it would be fun to keep the Switch in a safe that is hackable. So he'd have to overcome this interesting challenge if he wants to play the Switch.

Ideally, the safe can be programmed via a linux console to set up different kinds of challenges.

The only problem is, I am not sure how to set up this hackable safe. Are there any products out there for this? How would I go about making this?

Yes, it's a very niche thing to be talking about... so I'll reward a bounty to anyone who gives me some good ideas!

1,000 sats paid 3 times

SimpleStacker's bounties

view all past bounties

1111 sats \ 2 replies \ @holonite 19h

First of all, I'm not a parent nor does my mom allow me having a girlfriend.

Secondly, Hackable safe? I don't think any retailer would provide you a "hackable" one which is contrary to its name but I do have a few tweaks in mind. You can have Pwngotchi here that I use to practice WiFi sniffing and WPA cracking. This is a Raspberry Pi Zero W-based AI that learns WiFi hacking. My one looks like this

You could adapt a safe lock (servo + latch) controlled via a Pi running Pwnagotchi or similar firmware. You can find youtube tutorials and I can help you too.

On the other hand, I have an even better idea 😋, DIY! The core idea: use a microcontroller or single-board computer to control a lock, and require some form of hack to unlock it.

Basic Materials:

Raspberry Pi / Arduino / ESP32 (depending on complexity)
Electromagnetic lock or servo lock
Power supply or battery backup (like I said)
Mini Safe / Ammo Box / Toolbox with a latch system (like I said too)
WiFi dongle or Ethernet Optional: display panel or LEDs for feedback

You can setup demo challenges like a quest board:

Simple Bash Puzzle: A script with logic puzzles. Upon solving, writes HIGH to GPIO to trigger servo unlock.
SSH Access via Port Knocking: Requires knowledge of port sequences. Can be taught via online CTFs (HackTheBox)
WiFi Cracking (Ethical 😂): Set up a fake access point. He must capture the handshake and crack it to get the unlock code.
Puzzle-Driven API Challenge: Host a py Flask server that only returns the unlock code if queried right.
Hidden Messages in Images / Files (Steganography): Clue to unlock stored in a photo on a USB key in the house.

You can ask @ek for such security exploitation ideas, I can help you build the Pi circuit and simulate CTFs.

0 sats \ 1 reply \ @SimpleStacker OP 19h

So many great ideas, thanks!!

0 sats \ 0 replies \ @holonite 19h freebie

you're welcome!

1080 sats \ 1 reply \ @jimmysong 9h

Use a normal keypad safe whose code you can change.

Every day, post a puzzle whose solution is the code to the safe. It's a lot more flexible than a safe that he hacks once and is done with.

You can also vary the puzzle's difficulty by his level. So start off easy (57 x 23) and get harder (what's the last olympics whose year was also a square number?)

Or if that's too math-y, you can do something like "A hacker left a note in ASCII: 50 48 48 48. Decode the values to find the 4-digit number"

0 sats \ 0 replies \ @SimpleStacker OP 4h

Yeah, i might end up doing it this way as it's a simpler lift. I just thought it would be cool if the device you're hacking into can be used to control the lock directly.

1000 sats \ 1 reply \ @ek 20h

Cool idea!

You could use a Raspberry Pi to control a servo that then unlocks something like in this video:

You can program the RPi with a Linux console to only unlock when a challenge was solved.

For challenges, depending on the age of your kid, you could try to setup a few from https://overthewire.org/ on the RPi.

0 sats \ 0 replies \ @SimpleStacker OP 19h

Awesome! Also, thanks for the link, I'm always looking for accessible hacking games. I had been using picoctf.org and tryhackme.com mainly, before this.

30 sats \ 3 replies \ @Satosora 18h

Does it have to be a safe? Can you just set up a puzzle for him to solve and then he can play his switch? I know they make many puzzles, especially little brain teaser puzzles and finger puzzles.

10 sats \ 2 replies \ @SimpleStacker OP 18h

Haha, the problem is that he's waking up early to play, while we're still sleeping.

He already has unlimited access to a linux terminal with browser disabled and no games, so the thinking is that he can wake up and use the terminal to try and crack the safe if he wants access to the Switch.

0 sats \ 1 reply \ @Satosora 18h

Why dont you just talk to him and set some ground rules?

0 sats \ 0 replies \ @SimpleStacker OP 18h

We do try, but he doesn't always follow. He is on the autism spectrum, so he gets very single minded and determined about certain things.

Besides, I think if he can hack into the safe, getting to play is a fitting reward.

30 sats \ 0 replies \ @WeAreAllSatoshi 20h

I don’t have an answer for you, but this is a really fun idea and I hope someone can help you out!