james.wilson Posted November 23, 2015 Share Posted November 23, 2015 do you think insurers, end users or installers will be concerned with your findings? securitywarehouse Security Supplies from Security Warehouse Trade Members please contact us for your TSI vetted trade discount. Link to comment https://www.thesecurityinstaller.co.uk/community/topic/39405-csl-dualcom-cs2300-r-vulnerabilities/page/3/#findComment-435486 Share on other sites More sharing options...
norman Posted November 23, 2015 Share Posted November 23, 2015 Insurers, end users no. Installers, maybe Nothing is foolproof to a sufficiently talented fool. Link to comment https://www.thesecurityinstaller.co.uk/community/topic/39405-csl-dualcom-cs2300-r-vulnerabilities/page/3/#findComment-435488 Share on other sites More sharing options...
james.wilson Posted November 23, 2015 Share Posted November 23, 2015 id of thought insurers and installers would be. end users less so as they are relying on someones insurance. their own or the installers securitywarehouse Security Supplies from Security Warehouse Trade Members please contact us for your TSI vetted trade discount. Link to comment https://www.thesecurityinstaller.co.uk/community/topic/39405-csl-dualcom-cs2300-r-vulnerabilities/page/3/#findComment-435489 Share on other sites More sharing options...
norman Posted November 23, 2015 Share Posted November 23, 2015 Insurers in the whole don't have a clue. Nothing is foolproof to a sufficiently talented fool. Link to comment https://www.thesecurityinstaller.co.uk/community/topic/39405-csl-dualcom-cs2300-r-vulnerabilities/page/3/#findComment-435490 Share on other sites More sharing options...
james.wilson Posted November 23, 2015 Share Posted November 23, 2015 agreed securitywarehouse Security Supplies from Security Warehouse Trade Members please contact us for your TSI vetted trade discount. Link to comment https://www.thesecurityinstaller.co.uk/community/topic/39405-csl-dualcom-cs2300-r-vulnerabilities/page/3/#findComment-435491 Share on other sites More sharing options...
cybergibbons Posted November 23, 2015 Author Share Posted November 23, 2015 The problem in that respect is, where does the liability fall? A lot of installers see that a product has been third-party tested, and you'll assume it's good. I'd wager that a lot of those installers don't realise that a large part of the standard is self-declared i.e. it's essentially worthless. The insurers are similar. They've taken it on trust that the products comply with the standard. Most end-users view the alarm and signalling as a grudge purchase. They don't care - unless they have a large estate of property they want to protect. That's why some of the bigger customers have had pen-tests done on systems. After today though, it seems a number of insurers are going to start asking questions around signalling. I have a blog, some of which is about alarm security and reverse engineering:http://cybergibbons.com/ Link to comment https://www.thesecurityinstaller.co.uk/community/topic/39405-csl-dualcom-cs2300-r-vulnerabilities/page/3/#findComment-435493 Share on other sites More sharing options...
Dick Posted November 23, 2015 Share Posted November 23, 2015 Insurers in the whole don't have a clue.Bag and cat spring to mind though. Things might and should change. As an end user I'd be livid with the findings too. Having said that, I'm not an end user of said equipment and I'm not surprised with what CG has released. 1 Link to comment https://www.thesecurityinstaller.co.uk/community/topic/39405-csl-dualcom-cs2300-r-vulnerabilities/page/3/#findComment-435494 Share on other sites More sharing options...
james.wilson Posted November 23, 2015 Share Posted November 23, 2015 i know as an approved installer any approval falls onto them on all kit installed. ie your nsi cert makes you liable for all approvals, assuming what you fitted is compliant at the very least puts that compliance claim back on the installer securitywarehouse Security Supplies from Security Warehouse Trade Members please contact us for your TSI vetted trade discount. Link to comment https://www.thesecurityinstaller.co.uk/community/topic/39405-csl-dualcom-cs2300-r-vulnerabilities/page/3/#findComment-435496 Share on other sites More sharing options...
BUSTER Posted November 23, 2015 Share Posted November 23, 2015 Does anyone know if any Dualcoms have ever been compromised? Any comments / opinions posted are my opinion only and do not represent those of my employer or Company Link to comment https://www.thesecurityinstaller.co.uk/community/topic/39405-csl-dualcom-cs2300-r-vulnerabilities/page/3/#findComment-435498 Share on other sites More sharing options...
james.wilson Posted November 23, 2015 Share Posted November 23, 2015 no i personally dont. But would you fit another knowing the above? securitywarehouse Security Supplies from Security Warehouse Trade Members please contact us for your TSI vetted trade discount. Link to comment https://www.thesecurityinstaller.co.uk/community/topic/39405-csl-dualcom-cs2300-r-vulnerabilities/page/3/#findComment-435501 Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now