BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: The Ghost Key: Illusions of "Time Management" in TTL
 ock Smart\n   Locks\n   Tags: DEF CON Official Talk | Demo 💻 | Tool ðŸ›
   | Exploit 🪲\n   When: Saturday\, Aug 8\, 10:00 - 10:59 PDT\n   Where:
  LVCCW Level 1 Hall 3 1006 (Main Track 1) and DCTV-1 - [1]Map\n\n   Descri
 ption:\n\n   Smart locks are widely used in rental\, hotel\, and residenti
 al markets.\n   As a major provider\, TTLock (Sciener) operates in over 20
 0 countries\n   and relies on Offline Time Management to issue temporary e
 Keys without\n   network access. However\, our research reveals critical s
 ecurity flaws\n   in this common offline design. From real-world anomalies
 \, we analyzed\n   TTLock’s proprietary BLE protocol and found serious w
 eaknesses in\n   its cryptographic verification and authentication. Lackin
 g proper\n   validation\, the so-called secure offline architecture is ful
 ly\n   bypassable. We uncovered three critical design flaws: full revocati
 on\n   bypass\, expired credential resurrection\, and low-cost DoS. In thi
 s\n   talk\, we will demonstrate exploitation with a Mac and custom Python
 \n   tools. We show that time management in TTLock is a mere illusion\,\n 
   turning physical security into an open digital door.\n\n   Speakers:Yang
  Liu\,Zhenghan Wang\n\n   SpeakerBio:  Yang Liu\, Hillstone Networks Co.\,
  Ltd.\n\n   Yang Liu is a Security Researcher at Hillstone Network Securit
 y\n   Research Institute\, specializing in binary vulnerability hunting\, 
 ICS\n   security\, mobile security\, and reverse engineering. With extensi
 ve\n   experience in both red-teaming and defense\, Yang has discovered\n 
   numerous vulnerabilities in complex industrial control systems. He is\n 
   a frequent speaker in the security community\, notably presenting his\n 
   ICS research at the Kanxue Security Development Conference (SDC). An\n  
  avid CTF competitor\, Yang excels in Reverse Engineering\, Mobile\, and\n
    ICS categories. He also leverages his real-world combat experience to\n
    provide professional cybersecurity training for enterprises.\n\n   Spea
 kerBio:  Zhenghan Wang\, Hillstone Networks Co.\, Ltd.\n\n   Zhenghan Wang
  is a security researcher focusing on IoT security and\n   open-source sof
 tware security. His research interests include embedded\n   system securit
 y\, protocol analysis\, reverse engineering\, and\n   vulnerability discov
 ery. He is dedicated to finding and disclosing\n   real-world security iss
 ues to help improve the safety of connected\n   devices and open-source pr
 ojects.\n\n   '\n\n   1. #LVCCW_Level1_Hall3\n\n\n
DTEND:20260808T175900Z
DTSTART:20260808T170000Z
LOCATION:DEF CON Talks - LVCCW Level 1 Hall 3 1006 (Main Track 1) and DCTV-
 1
SUMMARY:The Ghost Key: Illusions of "Time Management" in TTLock Smart Locks
END:VEVENT
END:VCALENDAR