<div dir="ltr">We have been discussing this for a few hours on Slack and #noisebridge and have come up with a few solutions. I thought I'd share a few ideas that have been thrown around so far.<div>
<br></div><div>Here's the current system, for those watching from home. At all hours of the day:</div><div>- Someone can use a key to get into the building and space.</div><div>- Someone can use a keycode to get into the building and space.</div>
<div>- Someone can buzz the intercom and be allowed in by someone inside who has a keycode. (or they can walk downstairs)</div><div><br></div><div>And now, for some new ideas...</div><div><br></div><div>Idea #1: Move the keypad from the gate to the door. Keypad only active during newly instilled associate/regular members hours. Physical key, or someone buzzing you in, required to enter the building.</div>
<div>Benefits:</div>- Robotically enforced "members-only" hours, instead of human-enforced like in the past<div>- Semblance of 2-factor auth, if you ignore the ubiquity of keys and keycodes<div><br></div><div>Idea #2: idea #1, plus replacing gate lock with RFID sensor.</div>
<div>Additional benefits:</div><div>- RFID fob can be revoked if shared, while key cannot (or it's much harder to do so).</div><div><br></div><div>Idea #3: keep lock/keypad as-is, install members-hours-only RFID sensor at door.</div>
<div>Additional benefits:</div><div>- No need to change existing setup.</div><div>- RFID sensor is less likely to be tampered with.</div><div class="gmail_extra"><br></div><div class="gmail_extra">In all three cases, it will be less easy (but nothing is impossible) for a random person looking for a way to abuse the space to find their way inside. Of course, much like how things are now, there's a significant amount of security theater that goes into these "solutions." There is no silver bullet.</div>
<div class="gmail_extra">- In all forms, someone can still shadow someone else being let in.</div><div class="gmail_extra">- With idea #2, replacing the lock with an RFID sensor could inconvenience other tenants, and RFID sensor could be subject to on-the-street vandalism.</div>
<div class="gmail_extra">- In the past, people have complained about their access/whereabouts being tracked by being tied to an RFID fob.</div>
<div class="gmail_extra">- Anyone could use the elevator to get past any form of authentication at the door.</div><div class="gmail_extra">-- The elevator is either off-limits, cost-prohibitive, or both to add an additional keypad or sensor to.</div>
<div class="gmail_extra"><br></div><div class="gmail_extra">Either way, this is what we've been discussing. If you didn't read the previous paragraph, I said that this is all ultimately in the name of security theater. But I think they're all improvements on what we have now.</div>
<div class="gmail_extra"><br></div><div class="gmail_extra">If you're interested in discussing these (beyond the discussions we've already been having on this list, on Slack, on Freenode, and now on this Etherpad I made the mistake of creating), please consider coming to a meeting of the Security Working Group. I'll defer to Naomi or someone in #security-wg on Slack for details about when that will happen.</div>
<div class="gmail_extra"><br></div><div class="gmail_extra">If you haven't read the antepenultimate paragraph or the one prior to it, this is all in the name of security theater. Please do not complain about holes in any of these systems that already exist within our current one. Thanks again!</div>
<div class="gmail_extra"><br></div><div class="gmail_extra">Jeffrey</div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, May 9, 2014 at 4:01 PM, Johny Radio <span dir="ltr"><<a href="mailto:johnyradio@gmail.com" target="_blank">johnyradio@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">Ya gotta love the "Let's somebody else do it." Classic.<br>
<div><br>
Jeffrey Carl Faden <<a href="mailto:jeffreyatw@gmail.com" target="_blank">jeffreyatw@gmail.com</a>> wrote:<br>
<br>
This thread is taking a worrying turn toward "wishful thinking" and away from "doing".<br>
<br>
On Fri, May 9, 2014 at 1:08 PM, Naomi Most <<a href="mailto:pnaomi@gmail.com" target="_blank">pnaomi@gmail.com</a>> wrote:<br>
</div><div><div>>> >> Let's do that. Who's around who likes installing keypads?</div></div></blockquote></div><br></div></div></div>