Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>I generally agree with the author's statements, but the analogies to cars and doorknobs to me were just inaccurate. There are a number of reasons why you want round doorknobs instead of levers, one of which is security, as levered doorknobs are trivial to turn from the outside of the door.

Wait, what? I can't find anything about door levers having this kind of security risk. This kind of sounds like voodoo security where "worse UI = better security, because fewer thieves know how to use it".

>Secondly, just because everyone has access to every website on the internet does not mean you need to build your website for everyone. If someone says their website is targeted at a specific group, they build it for that specific group. You wouldn't tell a formula 1 engineer to raise the suspension on the car he's building so it can clear speedbumps in the parking lot.

Sure, but most sites aren't narrowly targeting people who can see and who have the latest hardware as part of their core reason-for-existence. News sites certainly aren't, and yet their mobile and screenreader experience is cancer.



>Wait, what? I can't find anything about door levers having this kind of security risk.

I specifically remember this talk: https://www.youtube.com/watch?v=rnmcRTnTNC8

at around 18 minutes in he shows one of his employees(?) use a long bit of wire to pull the lever and open the door in a matter of seconds.


He shows the result of it, yes, but it's not that easy to have a wire go through a small hole and reach up to grip something and pull. Most outside apartment gates operate on that assumption.


There are a handful of videos where other pen-testers show the process from start to finish, and the space needed to get the wire through is not as much as you think.


Getting the wire through isn't the problem, it's controlling it afterward. Not surprisingly, the 90 minute video you linked didn't find time to show that part.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: