Kindoo Access Control System

[PKSharp]

To add a little to my previous post, from Kindoo's own tech docs, if a devious person wanted to a cheap or broken screen phone of the same version could be wiped and restored from a backup of a valid user's phone, and that could be repeated for other simultaneous copies, and you'd suddenly have illegitimate phones/access out there. Yes there might be an initial phone access password needed to start the process, but it's possible. Admittedly that isn't likely, but where fobs go, while there are other issues, how often do they really get "copied" nefariously? I don't know, but would guess it's not very often, even though that argument continues to surface. And the little passive tags are dirt cheap, so replacing them can't be a cost issue when they do actually wear out or are lost (at which point the old one should be disabled anyway) compared to Kindoo. Pattern detection could possibly notice duplicates of either approach, but nefarious persons probably wouldn't bother anyway; as has been said, they'd just break the glass and do what they wanted.

[swigginton]

if a devious person wanted to a cheap or broken screen phone of the same version could be wiped and restored from a backup of a valid user's phone, and that could be repeated for other simultaneous copies, and you'd suddenly have illegitimate phones/access out there.

Kindoo knows and tracks the device ID and has software in place to deal with someone trying to access using the same account on different devices. Restoring from a phone backup doesn't copy that device ID, so Kindoo would catch that. Cloning a fob using a Flipper would be much easier and undetectable. As you inferred, a properly-sized rock or brick is a much simpler, lower cost, more convenient and lower-tech entry tool .

[bradhokanson]

Just curious, has anyone had experience with the Kindoo Remote Control device? I don't believe they were installed as a standard option, but I think its a reasonable discussion idea.

https://www.kindoo.tech/controller

This COULD potentially (if i understand it correctly) allow someone to remotely unlock a door for a member who did not have a named license based on their calling OR a temporary license given.

Of course there are valid concerns with this idea;

-You would want to have some way to VALIDATE the one requesting access was at the door and not providing access for anyone else. So there is an -element of trust there, which is there no matter what method you use to grant access.
-The additional overhead of someone being able to grant the access so an increase in user administration which i am sure the FM offices would not want to have or a Stake President.

[brysoncg]

Just curious, has anyone had experience with the Kindoo Remote Control device? I don't believe they were installed as a standard option, but I think its a reasonable discussion idea.

My stake has these, and there are both good and bad aspects (also depending on the 'model' used; the ones in my stake are raspberry pis, but I have heard of ESP32-based ones that were apparently more problematic).

Yes, they do allow remotely opening a door, but the utility of them is limited by a few things:
1. They only work for a single door, and need to be nearby (bluetooth range), which means you also need power and a place to put it; most of mine are on POE, but the placement of two of them is definitely not ideal (heat concerns during summer months)
2. The access to use it is not ideal; only site Admins and Managers (if allowed by the admin) can use them to open the door remotely
3. They are not truly reliable; there has been a number of times where the unit has crashed and needs to be power-cycled to function again (it was bad enough with two buildings that I have a timer on their power supply to power cycle them every night)

Usually when I am letting someone into a building using the controller, I am on the phone with them at the same time to make sure they get it; the controller only unlocks the door for the same amount of time as the Kindoo app (3-5 seconds).

I have found adding people as a temporary user is usually more reliable than trying to use the controller, as well as being more flexible (they are not limited to one Kindoo door on a building with more than one)