Jammed the latest Simplisafe system in 2024 using a $5 garage remote

@dlpsr​ I can see that you've got everything thought out! I think I may do a motion/entry sensor system similar to yourself so that the thief needs a multi frequency jammer and time, not just a simple walkie talkie or garage remote. 

Can I ask which motion/entry sensor systems you've got that use the Z-wave or Zigbee? Feel free to send me a direct message if you'd prefer.

@Beige5​ You can ask, whether direct message is actually private, I dont know, doubtful. I'll message you, they get cranky with brand names being posted. And rightfully so I suppose.

@PrairieDweller​ No need for them to verify. It's a well known issue with pretty much every system that has wireless connectivity between sensors and the base station.  The ding on SimpliSafe is that they chose to have their sensors communicate with the base station on a frequency that is easily blocked using any number of commercially available legal devices, including inexpensive amateur band handheld radios.   

And while Ring has a similar vulnerability, they decided to use a frequency that is outside the range of amateur radios, so the vulnerability is not nearly as easy to exploit.  That's not to say you couldn't build an illegal jammer to also thwart their function, but it would require research, procurement of components, assembly, and testing.  In contrast, you only need to jump on Amazon and buy a $20 radio to thwart SimpliSafe.

And there is no easy fix.  That frequency can't be changed with a software patch.  A real fix implies the need for a new generation of base station, sensors, and all other devices that communicate with the base station.  Basically, we'd all need all new hardware/sensors, which I imagine is a non-starter for most of us, and I don't think SimpliSafe could do it at no cost.  Thus, I expect them to continue to ignore the issue.

But if they do want a solution that is in the middle, they should contact me.  ;)

@simplistuff​ Did you own the $5 garage remote or purchase it? I ask because I want to buy one for my own system to test. If you could DM what you used, please do so. It might move up my timeline in researching new alarm systems to replace SimpliSafe due to increasing monitoring costs (as opposed to at my leisure).

I was very surprised to see this subject back up on the front burner again, and a little bit late to the party.

Sorry, but I have to throw water on this one, in a practical sense.  When I read hacks to overcome SS, I go to great lengths to test myself as much as I can. Example: Invisible Fence will jam SS. Sorry, but my neighbor's dog Lexi and my system that I moved to their house for an afternoon says otherwise.

On the fob transmitter, I purchased two on Amazon, handed them to a friend who was never in my house, armed the system to away (and sent the Mrs out to lunch with a friend so I would still be married by the end of the day) and not once was he able to "Jam" the system with either fob. Next, I pointed out exactly where each sensor was on each door and the exact location of the base, and, even with that information, he jammed the sensor maybe 1 out of 8.  This kind of works if put directly in line of the base and sensor.

Soooooo I would be more concerned about illegal high powered jamming units than the, IMO, "menace" of key fob transmitters. And sleep soundly tonight. I will.

I mean, there are multiple videos of people doing this in the last 12 months. It's up to you as to whether or not you believe those videos or not but the concept is extremely plausible. It's a single frequency that never changes, ever, and we all know what that frequency is so yeah, it's not rocket science theory. :)

I've always assumed you could jam the signal at the sensor or the base station. Obviously jamming it at the base station would be problematic as it would set off the jamming detection process. I'm not 100% sure that jamming just the sensor would have the same effect however. Also, obviously, you'd need a jammer with enough power to jam the sensor but NOT so much power that it would also hit the base station which is probably the tricky part.

I think the one thing we can all agree on is that using a single fixed frequency is, to be blunt, unbelievably dumb. I hope that whenever SimpliSafe releases their next generation system it uses FHSS (frequency hopping spread spectrum) or something similar. This is one of MANY improvements I hope we'll see in the next generation system, whenever that comes out.

Please SimpliSafe, pleeeeeeeeeeeease, engage your user base for ideas and feedback on future products and services. I really really want to be part of the process and I think I (and others) have some great ideas that you all should consider.  I say this as someone who is still terrified (yes, terrified) that your implementation of "multi user accounts" is going to be disappointing since as far as I know you haven't done any focus groups, betas, etc. If that's the case, after SIX YEARS of waiting, I'm sure you can understand we're going to be apoplectic.

@simplistuff​

Hi, I'm considering buying a system and contacted them after reading your posts on here regarding jamming and replaying.  What are your thoughts on their response please, as follows?

"To address your concern, I want to assure you that our system has been designed with advanced security measures to protect against potential threats, including the kind of attacks you've mentioned. The Base Station, which serves as the central hub and 'brains' of our system, operates on a radio encrypted frequency. This means that all communications between the Base Station and the various devices in your home are encrypted, making it more difficult for unauthorised parties to intercept or manipulate the signals.

Moreover, our system incorporates sophisticated encryption protocols that not only secure the communication but also prevent replay attacks—where a hacker attempts to capture and replay signals to disarm the system."

This system looks like it will do what I need it to do, but if it really can be disarmed easily I will have to look at another solution!  Hope you can help :)