Physical Security Alert

Quote:

---

A 50-year-old lock design was rendered useless last week when a brief post to an internet forum revealed the lock can be popped open with a cheap plastic pen.
...
The vulnerable Kryptonite locks use an axial pin tumbler, a common cylindrical design used in a wide variety of products. The lock's design was invented at least 50 years ago by Chicago Lock, said attorney and security consultant Mike Tobias, who claims to have first publicized the design's vulnerability five weeks ago.

---

Read the full story here...

It took 50 years for someone to realise a pen would cut it? *Sigh*.

So is this going to be like when people found out Master locks could be popped open by pulling down on them and spinning the thing around untill it wouldn't budge, and the number 5 up from what you landed on was the first number to the combo? Ahhh memories.

Sometimes the solution is so simple it is just overlooked as being a possibility..... been there... ;)

It was done 50 years ago. Hell, that's old enough that you may have even helped work on it.

If what I say is spelled wrong, or doesn't make as much sense, it would be because it's 9:10 AM, and I haven't been to bed yet from yesterday, didn't eat for two days, working two jobs, and going to college full time, and I have to work all weekend.

Damn, I could soooo pass out. Thank God for Vicodin and strong coffee. It's the reason I'm conciouse right now.

Speaking of old, my teacher talks about how old he is sometimes, and when he used to work for a company writing Assembler on Motorola 68000 Processors, and someone in class asked when he was born, and he said "in 51". I quickly replied "Yea, 18". That got a good laugh out of everyone. (I implied he was born in 1851....Not sure if anyone would get that because I look like a Zombie right now).

Quote:

---

The lock's flaw was apparently first publicized in 1992 in the United Kingdom

---

Yeah, after that I perfected the 18" spring loaded, hardened steel pin that shoots up through the saddle :eek:

BIC pen?............nah that's pussy stuff................the only plastic a real dude would use is PE4 (I think my American colleagues refer to it as "C4"?)

:D

Quote:

---

Originally posted here by nihil
the only plastic a real dude would use is PE4 (I think my American colleagues refer to it as "C4"?)

---

But then you can't re-use the lock... ;)

If I am attempting to get passed a locked door with a lock I don't have the key for, I rarely plan on re-using the lock ;)

This type of security, and Social Engineering, is something I'm actually good at.

And for the opening price of letting me take a nap right now and paying this month's bills, I'll test YOUR security :)

Quote:

---

But then you can't re-use the lock..

---

Silly just put a shaped charge next to the door and go through the wall. That way the lock can be re-used :D

Heh, this reminds me of what I did a few months ago. TheHorse13 knows this one well because I made him piss himself laughing with it:

My Mom complained how the bills were to high from me turning the Central Air down to keep the house cold (I hate summer) and so she got this locked box, which is clear plastic, and put it over the Central Air control.

Well, one day my Aunt turned the damn thing up to 80 degrees, so the air wasn't coming on anytime soon and it was HOT outside. I don't have a key, so I was like OK, hmm, grabbed a paper clip and shoved it in the lock and twisted it to make it bent up a little, and this was after I screwed up trying to turn it down with a straw by sticking it through the vents on the box.

If you can picture me half asleep trying to pick the lock on it and realising this lock doesn't have the usual glitch most locks have, and my toys wouldn't open it. Then I see the answer. I grab a box cutter, and cut off one of the platic parts on the vent area, which you can't tell I did because I sanded the part I cut down, and it only makes that vent l arger slightly, just enough to get the paper clip inside.

Heh, I popped in the paper clip, reached the bar that you slide for temp changes, and turned the air down. Cleaned up evidence, and got away with it. Then I shut the vents almost all the way in every room but mine so the house was warmer than my room, and it would stay on longer, successfully making my room nice and cool.

Gore...


You're my hero.

Your hero is currently half asleep getting ready for work. Minimum wage, standing in a 90 degree building with no air conditioning, hoping I don't pass out on the floor. Why exactly am I your hero?

Quote:

---

Heh, I popped in the paper clip, reached the bar that you slide for temp changes, and turned the air down. Cleaned up evidence, and got away with it. Then I shut the vents almost all the way in every room but mine so the house was warmer than my room, and it would stay on longer, successfully making my room nice and cool.

---

LOL. 00-Gore.

Its that why we need to have strong security on companies. There is more danger from ppl inside that from outside :D

Gore -

Because I thought I was the only one who would go to such lengths for the sweet, sweet relief of artificially cooled air.

...plus you're like frickin' MacGuyver.

go to alt.lockpicking on usenet and try and ask a question about lock picking, if you get a reponse that doesnt accuse you of being a criminal outright then ill be amazed.

locksmiths and locksmithing is a bit of a blackart and things arent widely publised on it, which is a sHame becuase locks are truely interesting, but once you have a lock and you can take it apart and figure out how it works theres no difficulty involved in defeating it anymore.

It wouldnt surprise me if this trick has been know for years, i bet some clever locksmith figured this out weeks after it was released and the security services will almost surely of figured out how to defeat them but all information would of been kept close to there chests. It'll only of been recently that someone would of published something to get cretdiblity for them selves.

i2c

In the netherlands there is quite a large lock picking community

they host workshops and sell tools..

I've attended one of those semminars once.. Did manage to open two kinds (took hella long though)

Just received the following notice from one of my bike forum admins:

Quote:

---

Canton, MA September 22, 2004 - Kryptonite today announced that the company is offering free product exchanges to all consumers who are concerned about the security of their current Kryptonite tubular cylinder locks.

At no charge to them, consumers will be able to exchange their current Kryptonite tubular cylinder lock for a Kryptonite non-tubular cylinder lock. Kryptonite will begin exchanging products within a few weeks as it accelerates product availability.

"At Kryptonite, we understand the responsibility that comes with being the market leader. Since we learned last week about the possibility of compromising some of the industry's tubular cylinder locks, we have been working diligently to devise the best and most responsible solution to address the concerns of consumers and to meet the needs of our distributors and retailers," said Steve Down, General Manager of Kryptonite. "We decided to simplify and expand our planned product upgrade program so that we could expedite the process for consumers and eliminate any lingering doubt in their minds about their locks. Standing by our customers is the responsible thing to do for those who rely on our security products to keep their valuables safe."

Kryptonite is offering a free product exchange to consumers who currently have Kryptonite locks using tubular cylinders. To participate in the free product exchange offer, consumers can visit the company's Web site at www.kryptonite.com for registration instructions. As part of this effort, Kryptonite will initiate a swap program through direct communication with all of its distributors and retailers.

Mr. Down concluded, "At Kryptonite, we constantly remind ourselves of our responsibility to lead and offer solutions - not excuses - that strengthen Kryptonite's relationships with consumers and channel partners. By instituting the most comprehensive program possible, we believe our company has again taken the lead in providing unprecedented customer support and service."

---

A friend of mine once had a Mini Metro. Very old and in a poor state of repare. He used it just to get back and forth to work. This thing was an absolute piece of crap, still road legal mind you.

One night some mindles creatins tried to steel it. They chiselled around the lock untill the whole assembly was loose. What the hell they expected to achieve is beyond me. The frigging door was unlocked.

My point is, it is not the lock that is important, it is the state that the door is in that is, along with the mind set of the people trying to get.