Hotel key cards, even invalid ones, help hackers break into rooms

F-Secure researcher Timo Hirvonen shows a device that is able to create a master key out of a single hotel key card in Helsinki, Finland April 19, 2018. Picture taken April 19, 2018. REUTERS/Attila

By Jussi Rosendahl and Attila Cser

HELSINKI (Reuters) – By getting hold of a widely used hotel key card, an attacker could create a master key to unlock any room in the building without leaving a trace, Finnish security researchers said in a study published on Wednesday, solving a 14-year-old mystery.

While the researchers have fixed the flaw together with Assa Abloy, the world’s largest lock manufacturer which owns the system in question, the case serves as a wake-up call for the lodging industry to a problem that went undetected for years.

Tomi Tuominen, 45, and Timo Hirvonen, 32, security consultants for Finnish data security company F-Secure, say they discovered the vulnerability about a year ago, and reported it to Assa.

“We found out that by using any key card to a hotel … you can create a master key that can enter any room in the hotel. It doesn’t even have to be a valid card, it can be an expired one,” Hirvonen said in an interview.

The researchers helped Assa fix the software for an update made available to hotel chains in February. Assa said some hotels have updated it but that it would take a couple more weeks to fully resolve the issue.

“I highly encourage the hotels to install those software fixes,” Hirvonen said. “But I think there is no immediate threat, since being able to develop this attack is going to take some time.”

Any fresh security risk remains low since the researchers’ tools and method will not be published, Assa noted.

The radio-frequency ID key card system in question, Vision by Vingcard, has been replaced by many hotels with new technology, but its current owner Assa Abloy estimated that the system is still being used in several hundred thousand hotel rooms worldwide.

Tuominen said the breakthrough was to figure out a weakness in how the locks are deployed and installed, together with a seemingly minor technical design flaw.

COLD CASE FILES

Sitting at F-Secure’s glass-and-steel-on-stilts headquarters by the Baltic Sea, the researchers show off a small hardware device which they have made able to write a master key out of the information of any card in the Vingcard system.

Clues date back to 2003 when a laptop disappeared from a computer security expert’s room at a high-class hotel in Berlin.

The thief left no traces in the room or within the electric lock system, hotel personnel said. The stolen laptop, which never turned up, belonged to a guest who had presented his research at a security conference.

Hearing of the theft at the conference, Tuominen and Hirvonen – then youthful computer guys in hacker-style black hoodies – asked themselves: Could one hack the locking system without leaving a trace?

For years, the two worked off and on to solve the mystery of the plastic cards, which guests often neglect to return. First it was purely a hobby, later a professional mission.

“These issues alone are not a problem, but once you combine those two things, it becomes exploitable,” Hirvonen said.

“I wouldn’t be surprised if other electronic lock systems have similar vulnerabilities. You cannot really know how secure the system is unless someone has really tried to break it.”

The researchers say they have no evidence whether the vulnerabities they found have been put to work by criminals.

Assa Abloy stresses that its newer offerings are based on different technologies, including a system that allows hotel guests to open door locks with their smartphones.

“The challenge of the security business is that it is a moving target. What is secure at a point of time, is not 20 years later,” Christophe Sut, an executive at Assa Abloy Hospitality, said in a phone interview.

The researchers asked for no money from Assa for their work or discovery, saying they were only driven by the challenge.

“Some people play football, some people go sailing, some do photography. This is our hobby,” Tuominen said.

(Reporting by Jussi Rosendahl and Attila Cser, editing by Eric Auchard and Adrian Croft)

Finland is world’s happiest country, U.S. discontent grows: U.N. report

People enjoy a sunnny day at the Esplanade in Helsinki, Finland, May 3, 2017. REUTERS/Ints Kalnins

By Philip Pullella

VATICAN CITY (Reuters) – Finland is the world’s happiest country, according to an annual survey issued on Wednesday that found Americans were getting less happy even as their country became richer.

Burundi came bottom in the U.N. Sustainable Development Solutions Network’s (SDSN) 2018 World Happiness Report which ranked 156 countries according to things such as GDP per capita, social support, healthy life expectancy, social freedom, generosity and absence of corruption.

Taking the harsh, dark winters in their stride, Finns said access to nature, safety, childcare, good schools and free healthcare were among the best things about in their country.

 

FILE PHOTO: Finland's flag flutters in Helsinki, Finland, May 3, 2017. REUTERS/Ints Kalnins/File Photo

FILE PHOTO: Finland’s flag flutters in Helsinki, Finland, May 3, 2017. REUTERS/Ints Kalnins/File Photo

“I’ve joked with the other Americans that we are living the American dream here in Finland,” said Brianna Owens, who moved from the United States and is now a teacher in Espoo, Finland’s second biggest city with a population of around 280,000.

“I think everything in this society is set up for people to be successful, starting with university and transportation that works really well,” Owens told Reuters.

Finland, rose from fifth place last year to oust Norway from the top spot. The 2018 top-10, as ever dominated by the Nordics, is: Finland, Norway, Denmark, Iceland, Switzerland, Netherlands Canada, New Zealand, Sweden and Australia.

The United States came in at 18th, down from 14th place last year. Britain was 19th and the United Arab Emirates 20th.

One chapter of the 170-page report is dedicated to emerging health problems such as obesity, depression and the opioid crisis, particularly in the United States where the prevalence of all three has grown faster than in most other countries.

While U.S. income per capita has increased markedly over the last half century, happiness has been hit by weakened social support networks, a perceived rise in corruption in government and business and declining confidence in public institutions.

“We obviously have a social crisis in the United States: more inequality, less trust, less confidence in government,” the head of the SDSN, Professor Jeffrey Sachs of New York’s Columbia University, told Reuters as the report was launched at the Vatican’s Pontifical Academy of Sciences.

“It’s pretty stark right now. The signs are not good for the U.S. It is getting richer and richer but not getting happier.”

Asked how the current political situation in the United States could affect future happiness reports, Sachs said:

“Time will tell, but I would say that in general that when confidence in government is low, when perceptions of corruption are high, inequality is high and health conditions are worsening … that is not conducive to good feelings.”

For the first time since it was started in 2012, the report, which uses a variety of polling organizations, official figures and research methods, ranked the happiness of foreign-born immigrants in 117 countries.

Finland took top honors in that category too, giving the country a statistical double-gold status.

The foreign-born were least happy in Syria, which has been mired in civil war for seven years.

“The most striking finding of the report is the remarkable consistency between the happiness of immigrants and the locally born,” said Professor John Helliwell of Canada’s University of British Columbia.

“Although immigrants come from countries with very different levels of happiness, their reported life evaluations converge towards those of other residents in their new countries,” he said.

“Those who move to happier countries gain, while those who move to less happy countries lose.”

(Reporting By Philip Pullella; Additional reporting by Reuters television in Finland; Editing by Robin Pomeroy)

Finnish police study ‘manifesto’ by knife attack suspect

FILE PHOTO: People attend a moment of silence to commemorate the victims of Friday's stabbings at the Turku Market Square in Turku, Finland August 20, 2017. Lehtikuva/Vesa Moilanen via REUTERS

HELSINKI (Reuters) – Finnish police are studying a handwritten note they believe will offer clues to what motivated a 22-year old Moroccan asylum seeker to kill two women in a knife attack.

Abderrahman Bouanane, who is in pre-trial detention pending an investigation into alleged murder with terrorist intent, told a court last week he was responsible for the Aug. 18 attack but denied his motive was terrorism.

Detective Inspector Olli Toyras, from Finland’s National Bureau of Investigation, said police found the note in Bouanane’s backpack

“It is an important part of understanding his motives,” Toyras told Reuters on Tuesday. “You could call it a manifesto, it reflects the writer’s thoughts.”

Police declined to comment on the contents of the note, or if it included political messages or references to extremist organizations.

Two women died and eight people were wounded in the Aug. 18 attack in the south-western coastal city of Turku.

Bouanane arrived in Finland in 2016, lived in a reception center in Turku and had been denied asylum.

Police released two men earlier on Tuesday who had been detained over the stabbings, leaving Bouanane and one other man in custody.

The second suspect has denied involvement in the attack.

(Reporting by Tuomas Forsell; editing by John Stonestreet)

Finns want tougher immigration policy after knife attack, poll shows

FILE PHOTO: People attend a moment of silence to commemorate the victims of Friday's stabbings at the Turku Market Square in Turku, Finland August 20, 2017. Lehtikuva/Vesa Moilanen via REUTERS

HELSINKI (Reuters) – An increasing number of Finns want the government to get tougher on immigration after last week’s knife attack by a Moroccan asylum seeker that killed two women and wounded eight other people, an opinion poll showed on Thursday.

Friday’s stabbings in the city of Turku have been treated as the first suspected Islamist militant attack in Finland, which boasts one of the lowest crime rates in the world. However, the main suspected has denied terrorism was a motive.

Some 58 percent of Finns want the government to tighten immigration policy and give police and other officials extra powers to prevent future attacks, according to the poll, which was taken after the attack and published by the Finnish newspaper Iltalehti.

A similar poll in April showed only 40 percent supported stricter policies.

Finnish police have detained four men and arrested two in connection with the Turku killings. An international arrest warrant has been issued for a fifth.

The main suspect, who is in custody, has been named as Abderrahman Mechkah, an 18-year-old Moroccan. He told a court he was responsible for the attack but denied his motive was terrorism.

At the time of the attack, Mechkah was appealing against a decision on his application for asylum, which apparently was denied.

Prime Minister Juha Sipila has urged the parliament to fast-track a bill that would give authorities new powers to monitor citizens online.

Some officials have also promoted establishing better-controlled “return centers” to monitor more closely those who had been denied asylum.

The poll showed 80 percent of Finns supporting both proposals.

(Reporting by Tuomas Forsell, editing by Larry King)

Moroccan teenager admits killing two in Finland knife rampage: lawyer

The initial remand hearing of Abderrahman Mechkah (lying in a hospital bed, attending the court session via video), 18 year-old Moroccan man suspected of killing two people and attempting to kill eight others with terrorist intent in Turku, on Friday, August 19, is held at Southwest Finland District Court in Turku, Finland, August 22, 2017. LEHTIKUVA /Martti Kainulainen via REUTERS

HELSINKI (Reuters) – A teenage Moroccan asylum seeker admitted on Tuesday killing two people and wounding eight in a knife attack in the Finnish city of Turku, his lawyer said.

In a closed-door court hearing, 18-year-old Abderrahman Mechkah confessed to carrying out Friday’s attack but did not admit to having terrorist motive, lawyer Kaarle Gummerus said.

“(My client) admits manslaughter and injuries… But what the investigator has brought up this far may not be enough to classify this as a terrorist crime,” Gummerus told Reuters.

Mechkah appeared in court via video link from hospital, where he is being treated after being shot in the leg by police following the stabbings.

The court ordered Mechkah, who has yet to be charged with any offense, to be detained in prison pending trial.

Three other Moroccan men detained over possible links to the attack are due in court later on Tuesday. A fifth Moroccan who had also been under arrest was released, the court said.

The investigation is the first into suspected terrorism-related crimes in Finland’s history.

Gummerus said it was “impossible to take a final stance at the moment” on the issue of whether the stabbings were terrorism-related.

Investigators have not made clear what role the three other Moroccans, who deny involvement in the attack, are suspected of playing.

Police said they had issued an international arrest warrant for a fifth Moroccan national.

(Reporting by Jussi Rosendahl; editing by John Stonestreet)

Finnish stabbings treated as terror, suspect ‘targeted women’: police

Finnish stabbings treated as terror, suspect 'targeted women': police

By Jussi Rosendahl and Tuomas Forsell

HELSINKI/TURKU, Finland (Reuters) – Finnish police said on Saturday that an 18-year-old Moroccan man arrested after knife attacks that killed two people in the city of Turku appeared to have specifically targeted women and that the spree was being treated as terrorism-related.

The suspect arrested on Friday after being shot in the leg by police had arrived in Finland last year, they said, adding they later arrested four other Moroccan men over possible links to him.

“Due to information received during the night, the Turku stabbings are now being investigated as murders with terrorist intent,” Crista Granroth from the National Bureau of Investigation told a news conference.

While the identity of the victims has not been disclosed by authorities, police said the attacker appeared to have targeted women during the stabbing spree in downtown Turku, a city of just under 200,000 people in southwest Finland.

“It seems that the suspect chose women as his targets, because the men who were wounded were injured when they tried to help, or prevent the attacks,” Granroth said.

Both of those killed in the attack were women, as well as six of the eight wounded, she added. The two who died were Finns and an Italian and two Swedish citizens were among the injured.

Finnish broadcaster MTV, citing an unnamed source, said the main suspect had been denied asylum in Finland. The police said only that he been “part of the asylum process”.

SCREAMING

“First thing we heard was a young woman, screaming like crazy. I thought it’s just kids having fun … but then people started to move around and I saw a man with a knife in his hand, stabbing a woman,” said Laura Laine, who was sitting in a cafe during one of the attacks.

“Then a person ran towards us shouting ‘He has a knife’, and everybody from the terrace ran inside. Next, a woman came in to the cafe. She was crying hysterically, down on her knees, saying someone’s neck has been slashed open.”

Four of the wounded were still in hospital, three of them in intensive care, while the other injured persons would be sent home on Saturday, the hospital said.

Local media said the police raided an apartment in the eastern Turku suburb of Varissuo, which is home to a large immigrant population, and located about seven kilometers from the market square where the attacks took place.

Flags were at half mast on Saturday across Finland, whose Security Intelligence Service (SIS) raised the terrorism threat level in June to ‘elevated’ from ‘low’, saying it had become aware of terrorism-related plans.

Leaders of Turku’s Iraqi and Syrian community condemned the attacks and said they would hold a rally of solidarity in the city’s main square, but canceled the plan due to security concerns.

An anti-immigration group was planning a demonstration in Helsinki.

“Terrorists want to pit people against each other. We will not let this happen. Finnish society will not be defeated by fear or hatred,” Interior Minister Paula Risikko said on Twitter.

On Thursday, a suspected Islamist militant drove a van into crowds in Barcelona in Spain, killing 13 people and wounding scores of others.

Finnish police said they were looking into any possible links between the Finnish stabbings and the attack in Spain and that they had issued an international arrest warrant for a sixth Moroccan national.

(Additional reporting by Lefteris Karagiannopoulos; Writing by Jussi Rosendahl and Niklas Pollard; Editing by Niklas Pollard and Andrew Bolton)

Two dead, at least six hurt in knife attack in Finland

Rescue personnel cordon the place where several people were stabbed, at Turku Market Square, Finland August 18, 2017. LEHTIKUVA/Roni Lehti via REUTERS

By Tuomas Forsell

TURKU, Finland (Reuters) – A man with a knife killed two people and wounded at least six in a stabbing rampage in a market square in the Finnish city of Turku on Friday, police said.

Police shot the suspected attacker in the leg and arrested him. They said they had yet to establish the identity of the man who appeared to be of foreign origin, or his motive.

They warned people to stay away from the city and reinforced security nationwide, with increased patrols and more surveillance, in case more people were involved. People were allowed to return to the city center a few hours later.

“At this stage, there is only one suspect and we are investigating whether there are more people involved … but it looks likely (he was alone),” said Markus Laine from the National Bureau of Investigation.

“At this stage, we do not investigate this (as a terrorism attack) but the possibility has not been ruled out,” he told a news conference.

Interior Minister Paula Risikko said: “We have not been able to confirm the person’s identity… we have been in contact with the immigration service as the person looks like a foreigner.”

Eyewitnesses described the panic at the scene.

“A man walked towards the ice cream stand where I work, and he hit a woman three times. He started running, went past my kiosk, and he had a knife in his hand,” Terttu Lehtinen told Reuters.

She said that some other men ran behind, apparently chasing him.

“We were sitting by the market square, just enjoying the afternoon. Suddenly people started screaming and yelling, they were hysterical,” said another witness, who gave her name only as Reetta.

“We started running towards our car and, as we got there, my boyfriend said a woman had been stabbed several times in the neck,” she told Reuters.

The six wounded were taken to hospital, police said.

Prime Minister Juha Sipila said: “My deepest condolences to the families and close-ones of the Turku victims. The events of the day are shocking us all.” He added that the government would meet later.

Finland is usually peaceful but the Security Intelligence Service raised the terrorism threat level in June, saying it had become aware of terrorism-related plans in Finland.

The government has grown more concerned about attacks, partly since an Uzbek man killed four people in neighboring Sweden in April by driving a hijacked truck into crowd in central Stockholm.

On Thursday, a suspected Islamist militant drove a van into crowds in Barcelona, Spain, killing 13 people and wounding scores of others.

European Commission President Jean-Claude Juncker said: “It is with great concern that I have learnt of the violent attacks in Turku, Finland. While details are still emerging, we strongly condemn this unprovoked attack which comes only 24 hours after the horror that unfolded in Spain.”

(Reporting by Jussi Rosendahl and Tuomas Forsell; Writing by Alister Doyle; Editing by Angus MacSwan and Robin Pomeroy)

Finland sees propaganda attack from former master Russia

A Russian SU-27 fighter violating Finland's airspace near Porvoo, Finland, early October 7, 2016. Finnish Air Force/

By Jussi Rosendahl and Tuomas Forsell

HELSINKI (Reuters) – Finland is becoming increasingly worried about what it sees as Russian propaganda against it, including Russian questioning about the legality of its 1917 independence.

The country shares a 1,340 km (833 mile) border and a difficult and bloody history with Russia, of which it was once a part. Moscow’s annexation of Crimea in 2014 and saber-rattling in the Baltic Sea have raised security concerns in the militarily neutral European Union country.

Earlier this month, Finland and Estonia both accused Russian fighter jets of violating their airspace. Russia has also started moving nuclear-capable missiles into its Kaliningrad enclave bordering Poland and Lithuania.

Sitting in his office in the government palace – built for Russia’s Grand Duchy of Finland – Markku Mantila leads a network of officials who monitor attempts to influence the country.

He says Finland is facing intensifying media attacks led by Kremlin.

“We believe this aggressive influencing from Russia aims at creating distrust between leaders and citizens, and to have us make decisions harmful to ourselves,” he said. “It also aims to make citizens suspicious about the European Union, and to warn Finland over not joining NATO.”

Finland won independence during Russia’s revolution of 1917 but nearly lost it fighting the Soviet Union in World War Two. It kept close to the West economically and politically during the Cold War but avoided confrontation with Moscow.

Mantila, who is also the head of government communications, says Russian media last month reported on “cold-blooded” Finnish authorities taking custody of children from a Russian family living in Finland “due to their nationality”.

The Finnish government denied the reports, while declining to comment on an individual case due to the legal procedure. However, the story has been replicated hundreds of times in Russia over the past few weeks.

A report by Kremlin-led NTV said “even the locals call Finland a land of ruthless and irrational child terror.”

PLAQUE HIT WITH AX

Mantila, showing on his laptop what he said were false news pictures, skewed authority statements and pro-Kremlin online discussions, said his network has verified around 20 cases of clear information operations against Finland from the past few years, and around 30 “very likely” such operations.

“There is a systematic lying campaign going on… It is not a question of bad journalism, I believe it is controlled from the center,” he said.

Kremlin and Russian foreign ministry officials were not immediately available for a comment.

Foreign Minister Timo Soini has also acknowledged the alleged propaganda, saying the government was countering false information with facts.

“All states engage in propaganda, authoritarian states even more so,” he told Reuters.

Some of the incidents have taken aim at Finland’s independence and at its historical figures.

In June, a university in St Petersburg put up a plaque commemorating Carl Gustaf Mannerheim, Finland’s most famous military officer and former president, who had served in the Tsar’s army but later led Finnish armed forces in World War Two.

The plaque quickly became a target for protesters who have called Mannerheim – regarded in Finland as a symbol of the country’s struggle against the Soviet Union – a murderer and ruthless Nazi collaborator.

“The plaque’s been shot at, hit with an ax and doused in red paint several times,” Mantila said, noting that Finland had nothing to do with the plaque project in the first place.

Mantila said he believed the whole episode was a follow-up to earlier reports that suggested that Lenin’s Bolshevik administration had no right to accept Finland’s independence.

Finland celebrates its hundred years of independence next year, also the anniversary of the Bolshevik revolution.

(Additional reporting by Tatiana Ustinova and Alexander Winning in Moscow; Editing by Jeremy Gaunt)

Estonia, Finland say Russia entered airspace before U.S. defense pact

Picture of Russian SU-27 fighter violating Finland's airspace near Porvoo, Finland,

By Tuomas Forsell and Jussi Rosendahl

HELSINKI (Reuters) – Estonia said a Russian jet violated its airspace on Friday, hours after neighboring Finland said two similar planes passed over its territory as it prepared to sign a defense pact with the United States.

Moscow denied sending planes across anyone’s borders – but one analyst said the flights could have been staged as a reminder of Russia’s influence, as countries in the region looked to strengthen ties with the West.

Estonia’s defense ministry said a Russian fighter jet entered its airspace for less than a minute with its transponder turned off at 2.38 a.m. (7.38 p.m. ET, Thursday).

Helsinki said two different SU-27 planes crossed into its airspace on Thursday afternoon and evening, over the Gulf of Finland – the body of water that separates it from Estonia.

“We take these incidents seriously,” Finland’s defense minister, Jussi Niinisto, told reporters. “Having two suspected violations on the same day is exceptional.”

Russia’s defense ministry dismissed the reports, saying SU-27 military planes had conducted training flights on Thursday and Friday over neutral waters, Russian agencies reported.

Finland has grown increasingly worried about military activities by Russia – its former ruler with which it shares a 1,300-km (812-mile) land border – particularly since Moscow’s annexation of Ukraine’s Crimea region.

In response, Finland has tightened cooperation with Sweden and fostered closer ties with NATO. On Friday it signed a defense cooperation deal with the United States, covering training and information sharing but stopping short of military assistance.

“It’s positive that United States is interested in Northern Europe’s security situation and of collaboration with the region’s countries. We see this as a stabilizing element,” Niinisto said.

He declined to speculate on whether Russia had tried to show its power before his meeting with U.S. Deputy Secretary of Defence Robert Work.

But Charly Salonius-Pasternak, analyst at the Finnish Institute of International Affairs, said it was “entirely credible, that airspace violations were a reminder from Russia: ‘Hey, we are still here’.”

“It costs them nothing, and they can see that these violations have an effect on Finland,” he told public broadcaster YLE.

In April, two Russian warplanes flew simulated attack passes near a U.S. guided missile destroyer in the Baltic Sea.

(Additional reporting by Jack Stubbs and Dmitry Solovyov in Moscow, editing by Richard Balmforth)

Finland says refugees can return to Afghanistan, Iraq, Somalia

Iraqi refugees returning from Finland arrive at Baghdad airport, Iraq February 18, 2016.

HELSINKI (Reuters) – Finland tightened restrictions on giving residence permits to asylum seekers from Afghanistan, Iraq and Somalia on Tuesday, saying it was now largely safe for them to return to their war-torn homes.

Authorities in Helsinki, where anti-immigration political groups have been on the rise, said security had improved to such an extent that refugees would generally not be at risk in any parts of the three countries, despite the running conflicts.

There was no immediate reaction from refugee agencies. But the statement by the Finnish Immigration Service came in the face of a string of international assessments of the scale of the ongoing bloodshed and refugee crisis.

“It will be more difficult for applicants from these countries to be granted a residence permit,” the immigration service said in a statement.

“It is currently possible for asylum seekers to return to all areas in Afghanistan, Iraq and Somalia without the ongoing armed conflicts as such presenting a danger to them only because they are staying in the country.”

Asylum seekers would now only be allowed to stay if they could prove that they were individually at risk.

Somalia has been slowly recovering from more than two decades of war. But the government is still fighting an Islamist insurgency by the militant group al Shabaab, which regularly launches gun and bomb attacks in the capital Mogadishu and other cities.

Islamic State still holds key cities and vast swathes of territory in northern and western Iraq which it seized in 2014.

Despite battlefield setbacks over the past year, the militants have continued to attack civilians in areas under government control including a string of attacks last week in and around the capital that killed more than 100 people.

The Taliban launched a spring offensive in Afghanistan last month, vowing to drive out the Western-backed government in Kabul and restore strict Islamic rule.

Finland’s center-right coalition government – which includes nationalist Finns party – has tightened its immigration policies since the influx of asylum seekers last year.

Groups of self-proclaimed patriots have launched regular patrols and marches, saying they want to protect locals from immigrants.

Around 32,500 people applied for asylum in 2015 from 3,600 in 2014, with most of them coming from Iraq, Afghanistan and Somalia. Numbers have come down significantly this year.

(Reporting by Jussi Rosendahl; Additional reporting by Edmund Blair in Nairobi, Stephen Kalin in Baghdad; Editing by Andrew Heavens)