【Watch The Temptation of Kimono (2009)】

"Do not hack the elevators here,Watch The Temptation of Kimono (2009) please."

Will Caruanais on stage at the annual DEF CON hacking convention in Las Vegas, and with a quick disclaimer and mischievous grin, he's implored the crowd to behave. Behaving, of course, is not why anyone went to a talk on hacking elevator phones.

According to Caruana's talk, Phreaking Elevators, the emergency phones in elevators around the world are poorly, if at all, protected from potential abuse. Why does that matter? What trouble can you get up to with an elevator phone, anyway? Quite a lot, it turns out.

For starters, anyone who is so inclined can dial into the phones — all you need is the number (which in some cases you can find online) — thus giving an attacker the ability to listen in on any conversation happening within.

Imagine all the fun stuff you might hear being discussed in the elevators of a Fortune 500 company.

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

Original image has been replaced. Credit: Mashable

But that's not all. As Caruana explained, it's quite easy to remotely gain control of elevator phones.

"No one ever changes the password," he explained as he flashed a slide of elevator default passwords. "No one."

And once you have control of the phones? Well, if you happen to be malicious, Caruana says you can prevent the phones from operating — rendering them useless in a real emergency.

Or, if you're just after cash, you can force the phones to place calls to specific numbers. To drive the seriousness of this move home, Caruana laid out a not so hypothetical scenario with a real university that has 60 elevators.

"Each of those elevators has their own telephone line," read a slide. By forcing those phones to call a predetermined 900-number that you control, 24 hours a day, you stand to make millions.

Original image has been replaced. Credit: Mashable

But the crowd of hackers who attended Caruana's talk definitely shouldn't try any of this at the hotels and casinos hosting DEF CON. As to where they should try it? Caruana didn't say, although he did include a photo of the Trump International Hotel in his presentation.

SEE ALSO: Turns out your office printer is a huge cybersecurity risk

So the next time you're in an elevator, remember to watch what you say. You never know who's listening — or using the humble emergency phone to get rich while you twiddle your thumbs and stare at the ceiling.

---

Featured Video For You

---

Friend of alleged Capital One hacker believes she ‘had no malicious intent’

---

Topics Cybersecurity

• Tech
• Entertainment
• Deals
• Social Good
• Science
• Shopping
• Life
• Games

• Philips now allows customers to 3D print replacement parts
• Colorado family's Subaru stolen by a joyriding bear who promptly took a dump in it
• Taylor Swift takes the stand in lawsuit claiming she was groped by radio DJ
• A new, big baby hippo is named after your favorite 'Game of Thrones' character
• NYT Connections hints and answers for May 18: Tips to solve 'Connections' #707.
• Apple One subscription bundles launch on October 30
• Try not to have sleepless nights after reading this man's tale about his haunted apartment
• iFixit teardown confirms the iPhone 12 and 12 Pro are mostly identical
• No Time for a Negative Peace
• Bruno Mars donates $1 million to Flint water crisis

• How 'Bluey' taught me to let go and love dad rock
• Twitter/X will bring back link headline previews, says Elon Musk
• The Unchanging, Ever
• The 15 most binge
• The Baby, the Book, and the Bathwater
• The ancestor trend on TikTok, explained.
• Massage gun Black Friday deal: $110 off TheraGun Prime in 2023
• Redux: Amos Oz, May Swenson, Gerard Kornelis van het Reve
• Black Antipastoral and the End of the World
• Redux: Dorothy Parker, Alexia Arthurs, Elena Wilkinson

• Time to Unite
• 520 elephants have new, safer homes thanks to a record relocation effort
• Try not to have sleepless nights after reading this man's tale about his haunted apartment
• A round of applause for student counter
• Mary Shows Up
• The inevitable Trump/Kim Jong
• CNN just fired it's biggest pro
• How this initiative amplifies the voting power of people with past convictions
• SpaceX's Starlink will provide free satellite internet to families in Texas school district
• Zoom's new feature makes sure you'll catch every word of the meeting

• NYT Connections hints and answers for May 10: Tips to solve 'Connections' #699.
• Waymo's self
• Chelsea Manning gets her Vogue moment and proudly shares it with supporters
• Minecraft and Rock the Vote team up to show young users what it's like to vote
• Amazon Prime Grubhub deal: Save $10 off orders of $20 or more
• Netflix is developing a live
• CNN just fired it's biggest pro
• Netflix's 'Holidate' is a silly, sexy good time
• Time to Unite
• Uber, Lyft futures on the line in Prop. 22 fight