Slashdot Mirror


Steel Bolt Hacking

Alec Kryten writes "Here is a book that introduces and teaches a fascinating new sport for the hacking hobbyist which doesn't necessarily involve computers. Steel bolt hacking is the art of competition lock picking that is beginning to make its mark on computer people and other geeks around the world. At DefCon this year I picked up a book titled Steel Bolt Hacking, which teaches the basics of lock picking. I bought it because I watched the lock-picking contest during the DefCon Convention and thought that I might want to participate in next year's lock-picking events." Read on for Alec's review of the book. Steel Bolt Hacking author Douglas Chick pages 114 publisher TheNetworkAdministrator.com rating 8 out of 10 reviewer Alec Kryten ISBN 0974463019 summary How to pick locks, crack combinations for LP sports groups

The beginning of the book discusses the origins of lock-picking sporting groups, crews in the U.S and Europe, competition around the country, and how to become a part of a lock-picking group. One of the groups out of Colorado Springs, DC719, are a bunch of computer geeks that have taken up the art of lock picking and sponsor a lock-picking contest every year at DefCon. According to Mr. Chick, computer people are the fastest group to pick up the art of lock picking. (I must warn you though, there are also a lot of disclaimers about the author not being responsible for the misuses of the information contained in this book.)

The book is fully illustrated with pictures of different types of lock picking instruments, tools to make your own picks as well as padlocks, deadbolt, and combination locks. There are pictures of locks that have been cut open and even how to crack push-button combination locks. (You know, the kind you find on the door to a server room.) I have to say, for a little book, (114 pages) it is brimming with valuable information for a beginner. What I didn't realize was that software isn't the only thing that has security vulnerabilities; mechanical things like padlocks and deadbolts do as well. What was scary to learn is how easy cheap locks can be picked, and that 80 percent of all locks used are cheap locks. Expensive locks are just likely to take a little longer.

I liked that the book didn't exaggerate. It didn't tell me that I was going to be a master lock picker after only a few tries. It took a little time, practice and sore fingers, but after a couple weeks of practice, I could pick every lock in my house. And as a computer person, I liked all of the jargon that was used to explain locksmith techniques. There was also enough humor to keep the book interesting; it's difficult to read any type of textbook and still maintain a reasonable interest. The illustrations are good and there is a resource section to purchase the tools you need from the Internet.

What I didn't like about the book: The most annoying point, I felt, is the considerable redundancy in methods between different types of locks to be picked. Also, the book suggests that there might be a lock-picking group in every city in the U.S., when in fact I am having a difficult time finding one in my are. And I live near D.C. -- You'd think there would be one on every corner around here. I think that the sport is still in its infancy and Mr. Chick is hoping his book will draw more people to it. The author put his e-mail address on the back of the book. He hasn't responded to my e-mail yet, but I suppose that he's probably a busy man.

All in all, I found the book informative, entertaining and worth the purchase price of 19.99.

You can purchase Steel Bolt Hacking from bn.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page.

113 of 448 comments (clear)

  1. Lock Picking For fun and Profit??? by ackthpt · · Score: 5, Interesting
    Think that Kryptonite lock is safe? Think again.

    Some other interesting discussion. Small wonder I scarcely let my racing bike out of my sight.

    "may I borrow your pen? I need to pick up some transportation."

    --

    A feeling of having made the same mistake before: Deja Foobar
    1. Re:Lock Picking For fun and Profit??? by Chris+Pimlott · · Score: 4, Interesting

      Haha, very nice videos. Will have to try that on my lost-the-key-so-long-ago bike lock at home.

      In case the videos get /.'d, the technique appears to be that you jam the open end of those cheap plastic pens into the keyhole hard enough and turn it. I'm guessing the plastic is malleable enough to conform to the 'teeth' of the lock and basically becomes a near duplicate of the original key. Pretty neat.

    2. Re:Lock Picking For fun and Profit??? by brunning · · Score: 5, Interesting

      it's my site... those two quicktimes have been downloaded close to 80,000 times today so far, but the server (dreamhost.com) appears to be going strong.

    3. Re:Lock Picking For fun and Profit??? by Woody77 · · Score: 2, Informative

      A) They didn't have good jaws

      B) They had WAY overprice jaws.

      Unless he was an idiot/improperly trained, and tried to "spread" the lock, which doesn't work with hardened steel. Now, the Hurst "heavy cutters" make very short work of hardened steel, just make sure you're not on the path that the two halves will go when they finally separate.

      (I'm a volunteer firefighter with a decently good bit of education/practice/use of Hurt's jaws).

    4. Re:Lock Picking For fun and Profit??? by wattersa · · Score: 2, Interesting

      that's because dreamhost is the bomb. i host all my sites there (no affiliation ;-)

  2. A valuable skill by erick99 · · Score: 5, Interesting
    A few years ago I bought a few books on lock picking as well as a lock pick set from England. It turned out to be a great skill to pick up. I have opened countless door locks, cabinets, etc. and saved myself and others money and aggravation. The downside is that if it's widely known that you have this skill you may well be a "suspect" when an office or house is broken into. Anyway, the book sounds good.

    Erick

    --
    http://www.busyweather.com/
    1. Re:A valuable skill by Anonymous Coward · · Score: 2, Interesting
      as well as a lock pick set from England [...] The downside is that if it's widely known that you have this skill you may well be a "suspect"

      Just so you know, you don't have to be a 'suspect'. Owning of lockpicks is illegal. Pure and simple. I guess only terrorists use them or something.

    2. Re:A valuable skill by RevDobbs · · Score: 2, Insightful
      The downside is that if it's widely known that you have this skill you may well be a "suspect" when an office or house is broken into.

      Yeah, that's why I try not to buy books like this one over the internet... nor use my credit card / B&N "member" card when buying it in person.

    3. Re:A valuable skill by lhand · · Score: 5, Informative

      You might also check out Ted the Tool's on-line book called the "MIT Guide to Lock Picking" found here among lots of other places.

    4. Re:A valuable skill by Carik · · Score: 2, Informative

      Depends where you live, actually. I'm a locksmith (which is to say, I took a correspondance course, and then did a whole lot of reasearch on my own), and according to Massachusetts (USA) law, owning a set of picks isn't illegal. Owning them with intent to commit a crime is what's illegal. Now... you can probably see the problem here. Go ahead, prove you're not intending to commit a crime...

      Basically, if the police want an excuse to harass you, they have one. If you stay out of their way, and don't make it obvious, usually no one will care. Further, if you can prove you need them for your job, you're even less likely to get hassled.

    5. Re:A valuable skill by Skye16 · · Score: 2, Insightful

      Actually, you don't have to prove you're not intending to commit a crime. That's the beauty of innocent until proven guilty.

      They could still make your life a living hell just by trying to prove it, though, so your harassment statement stands. Eep!

    6. Re:A valuable skill by wantedman · · Score: 2, Informative

      I'm not a Lawyer.

      1. It's illegal in the US, depending on your state's law. Some states don't allow you to own lockpicks, while others are more leniant.

      2. Locksmiths are not banned from using lockpicks. You don't need special certifications to be a locksmith, but you do need a business license to order from many lockpick manufacturers.

    7. Re:A valuable skill by Anonymous Coward · · Score: 3, Funny

      Felt tips are illegal because of CD security, ball points are illegal because of bike security. That leaves pencils and crayons.

      Pencils can be used as a weapon, and crayons are fire accelerants.

      hmm. I guess we should just abandon this whole civilization thing.

    8. Re:A valuable skill by Anonymous Coward · · Score: 2, Informative

      I used to get the combinations for Masterlock combo locks in college all the time.

      This site has the full details:
      http://www.people.fas.harvard.edu/~hillson/master_ lock.html

    9. Re:A valuable skill by the+chao+goes+mu · · Score: 2, Interesting
      You have to watch out. Some states have decided (by statute or precedent) that a non-locksmith possessing lock picks creates a presumption of criminal intent.

      --
      Boys from the City. Not yet caught by the Whirlwind of Progress. Feed soda pop to the thirsty pigs.
    10. Re:A valuable skill by senor_burt · · Score: 2, Informative

      You can buy some picks here, if you claim you're a locksmith.

      They don't do a 'terrorist' background check.

    11. Re:A valuable skill by Mr.+Slippery · · Score: 2, Interesting
      And I'm not sure what the definition of those tools is - a very small screwdriver? A dentist's pick?

      I once picked a lock with a bobby pin. Really. Broke it in two and bent with my multitool to made a rake and a tension tool. This with knowing nothing about lock picking except for a brief description in Feynman's story "Safecracker Meet Safecracker" in "Surely You're Joking, Mr. Feynman"

      --
      Tom Swiss | the infamous tms | my blog
      You cannot wash away blood with blood
    12. Re:A valuable skill by Dr.+Sigmund+Freud · · Score: 3, Funny
      ... nor use my credit card / B&N "member" card
      Ummm...you slipped up. Now they can track you with your /. user id # 313888.

    13. Re:A valuable skill by Sneftel · · Score: 3, Informative

      Whine about it for awhile longer. Then use the Wayback Machine.

      --
      The opinions stated herein do not necessarily represent those of anybody at all. Deal with it.
  3. Lock Hacking in Hackers by MacBrave · · Score: 5, Interesting

    I first read about serious lock hacking in the book Hackers by Steven Levy. The early hackers at MIT were notorious for hacking locks on office doors, toolboxes, safes, etc. to get to tools and information.

  4. Noticed the trend as well by Khaotix · · Score: 5, Funny

    Lockpicking and an interest in computers seem to go hand in hand. A number of the people in my college are seen practicing picking locks during boring lectures.

    One guy picked the lock on a projector and cabled another person to the projector cart

    1. Re:Noticed the trend as well by knowles420 · · Score: 2, Funny
      Lockpicking and an interest in computers seem to go hand in hand.

      lockpicking skill and an interest in computers, not so much.

      --
      -knowles
    2. Re:Noticed the trend as well by tsg · · Score: 2, Informative

      I learned how to pick locks in college. It was a valuable skill in the dorms where people were consistently locked out by their roommates. Housing charged you $25 to let you back in. I charged $20.

      An interesting side effect, I'm sure one that goes with just about any skill most people don't have, is the number of times you see people in movies doing it absolutely wrong.

      --
      People's desire to believe they are right is much stronger than their desire to be right.
    3. Re:Noticed the trend as well by Sylver+Dragon · · Score: 4, Informative
      An interesting side effect, I'm sure one that goes with just about any skill most people don't have, is the number of times you see people in movies doing it absolutely wrong.

      Boy is this true. Having worked with card-access systems for 5 years, I always chuckle at the way movie characters get past these things, and not trip any alarms in the process.
      Just some notes for those people contemplating getting past a card reader.
      • Pulling apart the reader may trigger an alarm, not always but often enough.
      • Shorting the wires together will not open the lock. What it will do is A) send lots of alarms (read fails) to the guard at the security desk. B) Very possibly short out the door control and make the door locked permanitly.
      • From the Resident Evil movie, running a needle through a card reader will get you jack. Maybe its a good thing they just let her out.
      • You will never "lock in" a single digit of a PIN combination on one a electronic combination lock by running through numbers. What you will do is send through a bunch of alarms to the guard.
      • While cutting the wires to a door alarm will technically disable the alarm, the loss of the door loop will send through its own alarm. Those wires carry a specific resistance, if that changes an alarm is sent.
      Those are about the worst offenders off the top of my head, in reality getting past an electronic lock is a pain in the ass, this is why the government/military uses them.

      --
      Necessity is the mother of invention.
      Laziness is the father.
    4. Re:Noticed the trend as well by tsg · · Score: 2, Interesting

      You will never "lock in" a single digit of a PIN combination on one a electronic combination lock by running through numbers. What you will do is send through a bunch of alarms to the guard.

      Classic blunder from "War Games": Joshua trying to crack the nuclear missile launch codes and locking in digits of the code. "He's got four numbers. Another 5 minutes and he'll have all of them!" This is a security system, not MasterMind(tm).

      --
      People's desire to believe they are right is much stronger than their desire to be right.
  5. Be patient... by switcha · · Score: 4, Funny
    The author put his e-mail address on the back of the book. He hasn't responded to my e-mail yet, but I suppose that he's probably a busy man.

    No, he just lost his password for checking his email.

    --
    You know what? ... A little club soda *did* get that out!
  6. fun links about lock vulnerabily by knowles420 · · Score: 3, Informative
    bikeforums.net's thread on picking the kryptonite U-locks with a bic pen tube.

    quicktime movie of the same.

    --
    -knowles
  7. Legal issues by alienw · · Score: 5, Informative

    In DC, basic possession of lockpicking instruments is illegal, unless you are a licensed locksmith. You don't have to prove intent. This is the same in many other states. Be careful and don't do anything stupid.

    1. Re:Legal issues by LurkerXXX · · Score: 4, Insightful

      Mod parent up. I got into it a long time ago, and found out when you take trips to certain states/districts, leave the picks at home!

    2. Re:Legal issues by idontgno · · Score: 5, Insightful
      And, given the inevitable but accurate comparisons between lockpicking and system/network hacking, how long before basic possession of network-hacking tools (unsanctioned non-"trusted"/non-DRM computers, etc.) and skills is also inherently illegal, intent be damned?

      Sigh. How far from cyberpunk dystopia are we now?

      --
      Welcome to the Panopticon. Used to be a prison, now it's your home.
    3. Re:Legal issues by jdray · · Score: 2, Funny

      So everyone should stop carrying Bic pens?

      --
      The Spoon
      Updated 6/28/2011
    4. Re:Legal issues by severoon · · Score: 5, Interesting

      Yes, this became true in CA a few years ago as well. This seems sort of ridiculous to me...how can they outlaw lockpicks? They're just tools--it's like outlawing crowbars because they're afraid someone will use them for evil.

      Anyway, in most states that have outlawed them, you can still get your hands on them by simply registering and passing the test to become a "licensed locksmith". This doesn't necessarily mean you have to hold yourself out as a business, either. It just means you passed some test and registered with the state so you can carry around your lockpick set. I've been thinking about doing this off and on, because in college I lived with a guy from Caltech for a summer, so I of course had a window into lockpicking as a result and it caught my interest.

      --
      but have you considered the following argument: shut up.
    5. Re:Legal issues by ParamonKreel · · Score: 2, Interesting

      I believe that if you are registered, and then caught using the tools to steal stuff, the penalty is much much stiffer than it would normally be.

    6. Re:Legal issues by Kehvarl · · Score: 2, Funny

      1) probably a valid point
      2) probably a valid point
      3) no
      4) profit

    7. Re:Legal issues by Jackboot · · Score: 3, Funny

      Just remember: you can pick your friends, and you can pick your locks, but you can't pick your friends' locks.

    8. Re:Legal issues by Anonymous Coward · · Score: 2, Insightful

      "This seems sort of ridiculous to me...how can they outlaw lockpicks? They're just tools--it's like outlawing crowbars because they're afraid someone will use them for evil."

      Seriously? This is how: "They", which is Us, get sufficiently fed up with break-ins and theft that we pass laws to reduce it.

      And crowsbars *are* outlawed in certain circumstances. Check your local. There may well be one on the books about "break and enter tools". It'll have time and place restrictions on it. It's designed so that when the patrol officers grab a punk with pry bars out back of your house at 1 a.m., they've got something that'll stick on him immediately. While not nailing the tradesman getting home from sealing up a window smashed by a brick downtown.

      Can it be abused? You bet! That's why you have lawyers and court overview as part of the system. Or we did. And there's the real issue about laws today: awful lot without court overview lately. That's insane.

      I don't wish to be rude, but you sound rather young. Or live in a very nice area. In the latter case check to see if you have those laws and consider that they may well be part of the reason you've got such peace of mind.

  8. Who can beat this?!!! by Thud457 · · Score: 3, Funny
    My first task at the first job I ever had that required a security clearance was to pick a lock.


    It was on a removable HD tray that jammed, but the story's better when I leave that part out.
    You believe me, right? I posted it on slashdot!

    --

    the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff

  9. So what locks ARE good?!? by Anonymous Coward · · Score: 5, Interesting

    Like computer hacking, the primary value to most people is not learning how to hack, but learning how to make things more hack-proof.

    So does this book have any recommendations along those lines? What door locks, deadbolts, padlocks, bike locks, etc, follow the locksmith version of "best security practices"?

    That, IMHO, is the REALLY important thing to discuss!

    1. Re:So what locks ARE good?!? by dr_dank · · Score: 2, Informative

      So does this book have any recommendations along those lines? What door locks, deadbolts, padlocks, bike locks, etc, follow the locksmith version of "best security practices"?

      It seems that people in the hobby are reluctant to endorse brands. I saw Barry "The Key" Wels at HOPE this year. His presentation involved the pricey (and supposedly uber-secure) Medico locks and another brand of expensive lock that he agreed with the manufacturer to keep the brand name hidden during his talk.

      When his talk shifted to his CryptoPhone project, he politely sidestepped an audience member asking what kind of lock he had on the doors of CryptoPhone's offices.

      --
      Where does the school board find them and why do they keep sending them to ME?
    2. Re:So what locks ARE good?!? by Johnny+Hardcore · · Score: 2, Interesting

      The thing about picking locks is that the dreaded 'security through obscurity' is practiced even more than elsewhere. It's usually the case that many, many weak locks are used all over the place. But unlike bad software, if word gets out that a certain lock is vulnerable it's not a simple matter to simply patch it up. It's costly to replace all the locks after all. Thus, locksmiths are usually not willing to publicly blabber whatever secrets that may know (both to keep the obscurity going and because it keeps them in business).

      So to answer your question, I'm no lock expert but the only name that always comes to mind as a good lock maker is Medeco. I'm sure there's more, but I'm sure there's MANY MANY bad ones :)

      I want to learn how to pick locks so at least I can know which ones someone with the intelligence of a baboon (i.e. me) can beat. There must be a time when locks will have to be scrutinized more for robustness. Though locks aren't everything in security, but you're only as good as your weakest link.

    3. Re:So what locks ARE good?!? by sgant · · Score: 2, Informative

      Medico is the way to go...also, very very few criminals resort to actually picking locks when a sledge hammer and a crow-bar work quicker.

      But medico is the way to go if you want an uber secure steel door with a steel frame set into concrete...but as with all things, the thing you would THINK is the weakest link in door security (like the lock) is actually the strongest. When you are thinking about installing a door, think the whole thing with frame along with the lock.

      Also, go low-tech also and a good steel bar across the bottom of the door stops many people...also stops with the kick-in.

      --

      "Leo Fender was in a 'state of grace' when he designed the Stratocaster." -- Paul Reed Smith
    4. Re:So what locks ARE good?!? by halbert · · Score: 5, Interesting

      Actually, it does discuss several options to better secure your locks, such as putting your deadbolt locks(which are as easy to pick as a padlock) upside-down, to prevent gravity from helping the lock picker. Not impossible to pick, but a LOT harder. Like the difference between hacking a windoze box and an OpenBSD box.(sorry, couldn't resist) The more expensive the lock, usually the harder it is to pick, because they cost more to make. Good book, I recommend it.

      --
      LOAD "SIG"

      RUN "SIG"

    5. Re:So what locks ARE good?!? by Sara+Chan · · Score: 2, Informative

      A Mul-T-Lock is supposed to be virtually unpickable.

    6. Re:So what locks ARE good?!? by nanojath · · Score: 2, Informative

      Really all locks are vulnerable - locks are sort of like DRM or encryption - there has to be a protocol to get through the security and protocols can be hacked. In general there are three issues with locks: the complexity of the mechanism (that reduces the effectiveness of hacks, i.e. a five number combo is better than a three number against simply trying every combo), the precision and quality of the engineering (i.e a lot of cheap combo cable locks are vulnerable to very simple hacks of "feeling out" the combo hot spots caused by cheap, poor engineering - most lock packs including picking are aided by "play" in the mechanism itself, which is exploited), and the strength and quality of the securing (versus the locking) mechanism (to resist against brute force attack, far and away the most common way theives get past locks: they simply break them. It's hard to make a mechanism that a two inch piece of metal can open truly strong).

      There's no simple answer. Ask a locksmith for help chosing the best bet for a particular job and be prepared to spend some money because top quality locks are expensive. And remember for the most part locks keep honest people honest and at best deter, slow or diver thieves (number one way thieves enter domiciles is doors and windows left open. Number two is straight force i.e. the swift kick or broken window).

      Years ago I lived in a crummy apartment and there were a bunch of storage rooms past renters had put padlocks on and then abandoned. I was to clear these out for current renters. None of the locks were top of the line but they ranged from hardware store cheapies that cost a couple dollars to heavy duty name brands that might have been upwards of ten. In each case I opened the lock by inserting a short iron prybar about 3/4 inch diameter between the shackle and the body and just wrenching the shackle right out of the body of the lock. I was amazed by how easy it was with a little force and leverage, and not caring that I was wrecking the lock.

      --

      It Is the Nature of Information to Transgress Artificial Boundaries

    7. Re:So what locks ARE good?!? by Beryllium+Sphere(tm) · · Score: 2, Informative

      Consumer Reports ran a battering ram into some locked doors. What gives first is the "strike plate", the usually flimsy piece of metal in the door frame that the bolt slides into.

      The first thing to do is to replace that with a reinforced strike plate anchored with long screws. The Mag 3 has a full bucket to enclose the bolt and transfer load to the rest of the strike plate, which has four screw holes. Use 3" long #10 wood screws (drill a pilot hole first) and you're solidly anchored to the studs.

      Then think about upgrading the lock. I have a hunch there are other brands as good as Medeco but less heavily promoted -- ask a locksmith. Medeco's engineering is brilliant, though.

      Remember to consider key control. One attack mechanism is for your housecleaner's drug-addicted boyfriend to duplicate your house key.

    8. Re:So what locks ARE good?!? by currivan · · Score: 2, Insightful

      Medeco is the most widespread "good" lock. They use a "2-dimensional" scheme where the pins have to be rotated to the right angle in addition to being at the right height. The key bumps are beveled, as are the pins, and unless they match, a sidebar can't slide in to release the cylinder.

      Another (which I own) is Mul-T-Lock, which uses 5 sets of two concentric pins, and a horizontal (actually just flat) instead of a vertical keyway. One locksmith I talked to said he'd once managed to pick a Medeco after playing with it for about ten hours in his office, but it's basically not a risk.

      That said, the real value of these locks isn't pick-resistance, since almost no one picks locks anyway. The real benefit is that they have features to resist drilling, longer bolts, anti-sawing bolts, and so forth. They also have keys that can't be duplicated except with special equipment, and then only by licensed dealers who will require you to provide the id card that came with the lock. So the valet won't be able to make a copy of your house keys at the corner hardware store.

      In general, people only pick locks if they don't want you to know they've broken in.

  10. practice? by TheMusicRebel · · Score: 2, Funny

    What? do you go to Home Depot to practice?

  11. Surely you must be joking Mr Feynman by phyruxus · · Score: 5, Interesting
    There's a great bit in the book "Surely you must be joking Mr Feynman" where he (Feynman) talks about safe-cracking. His propensity for beating locks gets him called into a boss' office where a safe containing nuclear secrets (or something ridiculously important like that) sits, but no-one knows the combination. So he sits down at the thing, presses his ear to the door and starts listening, only to have the thing pop open on the first try.

    Everyone in the room goes "Ooooo! how did you do that? Are you really that good?" And he had the presence of mind to say, "Yes." =)

    --
    "A witty saying proves nothing." ~Voltaire
    "d'Oh!" ~Homer
    1. Re:Surely you must be joking Mr Feynman by mekkab · · Score: 2, Informative

      I haven't read it in a while, but wasn't the combination the STOCK combination from the factory?!

      Feynman is my favorite wise-cracking, lock-hacking, bongo-playing, skirt-chasing Nobel physicist!

      --
      In the future, I would want to not be isolated from my friends in the Space Station.
    2. Re:Surely you must be joking Mr Feynman by seestheday · · Score: 2, Interesting

      yes, it was 5,5,5 or something similar iirc. In the book he describes how most people just left the default combo in there. it's just like people having their bank passwords set to their name.

    3. Re:Surely you must be joking Mr Feynman by rjstanford · · Score: 2, Interesting

      If I'm not mistaken, he talked about one of the safe's passwords being set to "e". He got the idea because he found a post-it with the 3.1415... written on it in the secretary's desk. That wasn't it, but he judged that the owner of the safe was exactly the kind of person to use that type of number - and tried the other obvious one. Which did the trick.

      --
      You're special forces then? That's great! I just love your olympics!
    4. Re:Surely you must be joking Mr Feynman by Euphonious+Coward · · Score: 5, Interesting

      The safe in question was my aunt's father's. She said he didn't bother changing the combination because he knew it was all theater anyway, and the way spies would get secret documents was to get people who had them to hand them over. As it happened, he was right.

      She also said that he said General Groves was a real bastard.

    5. Re:Surely you must be joking Mr Feynman by peacefinder · · Score: 5, Interesting

      The poster confused two different stories into one.

      In one, Feynman had learned a technique to pick up the last number or two of the three-number combination from open file cabinets, and he also learned that one only had to be accurate to about +/- 3 on the dial. This allowed him to drastically reduce the number of guesses needed for a lock.

      He was telling a colleague about this, and they ducked into an office so he could demonstrate. Feynman already knew the last number for this particular lock, so he was saying something like... "so I can try out the numbers really quickly. Let's assume the first number is this [sets dial] and I'll check the second number like this..." and the lock opens almost immediately. He thinks fast and continues without pause "... and that's how it's done!" And they walk out, leaving everyone in the office gaping in shock. It was a lucky guess ont he first two numbers, but he didn't let on.

      In the other story, the Boss had a BIG safe installed, and after Manhattan was closing down they needed to get into it. People asked Feynman to try it, because of his reputation, and he said he would. (How could he refuse without destroying his rep?) He goes into the office, and it's open. Feynman eventually finds out (after many amusing diversions) that the base locksmith had opened it by trying the factory combination.

      --
      With reasonable men I will reason; with humane men I will plead; but to tyrants I will give no quarter. -- William Lloyd
  12. Article at Howstuffworks.com by PHPee · · Score: 5, Informative

    If you're interested in learning a bit about lock picking, but aren't sure you want to spend $20 on this book yet, take a look at this article at Howstuffworks.com.

    It offers a great introduction to lock picking, and has some nice graphics that really helped me understand how locks work, and how they can be circumvented. If you really get into it, then I'm sure this book would offer a lot more information to help you along.

  13. There's actually two sides to it... by foxtrot · · Score: 4, Interesting

    I've found over the years, simply being self-taught, that there are very few locks I can't get into using stuff I carry on me or stuff that's easy to find (leatherman tool, paperclip, sewing needle, whatever.)

    There's a much larger number of locks that I can't get into without making it patently obvious somebody broke in. This is something I haven't been as successful in teaching myself.

    The former is engineering. The latter, that's art.

    -JDF

    1. Re:There's actually two sides to it... by dykofone · · Score: 4, Informative
      leatherman tool, paperclip, sewing needle, whatever.


      And never forget the value of the handy old credit card. A friend and I got started in lockpicking with some sets we got off ebay back in middle school, and by the end of high school were quite profficient.

      But I've found now that just about any locked door that doesn't use a deadbolt can be opened much faster with a credit card. I keep three of varying thickness in my wallet depending on the situation. I use my ID badge at work to get into the conference rooms because it's quicker than pressing in the door code.

      Also, two butter knives work pretty well too if you have a reasonable gap between the door and frame, just alternate force on them to "walk" the latch out. Best part is, you haven't touched the door handle at all, so it's about as non-invasive as you can get

  14. As with computers... by MonolithicX · · Score: 5, Funny

    the easiest way to break in is to crawl through a window.

    1. Re:As with computers... by 0111+1110 · · Score: 2, Informative

      I think you mean 14 1/2". Or sometimes 22 1/2". Not many carpenters on slashdot I guess. Also, you will need more than a pen knife to get through the 7/16" OSB sheathing that is so often used these days. On older houses you might even have 3/4" tongue and groove boards to get through instead of plywood or OSB.

      --
      Quite an experience to live in fear, isn't it? That's what it is to be a slave.
  15. Lock picking for fun and profit by Monkeyman334 · · Score: 3, Interesting

    At work we have 4 of those 8' tall cabinets with the small keys and cheap locks. My building has 80 people working in it, so it was a pain when someone used the cabinet and ran off with the key. Who could it be? I told them I could knew how to pick locks. Really I meant that I saw a tutorial on howstuffworks.com about 6 months ago. I was talking out my ass but gave it a shot anyway. In about 2 minutes I had picked their crappy lock and we could tell who took the key by the stuff that was in the cabinet. Everyone in my office kept saying "I don't want to know what you did before you worked here." I tried to keep my "skills" quiet though. Didn't want people looking to me when stuff went missing.

  16. Wait... by StevenHenderson · · Score: 3, Funny

    So now you're telling me that Douglas Chick is the master of unlocking? Well, Barry Burton told me that Jill Valentine was...

  17. This is nothing new by jambarama · · Score: 2, Insightful

    Locks just like security fixes and such only make it more difficult for someone to break in. We've covered the kensington lock vulnerability before here: http://slashdot.org/article.pl?sid=04/08/09/021822 5&tid=172&tid=184&tid=1

    Ultimately everything is hackable, hard and software, by those who have too much time and a little knowhow.

    It just sure is nice to be one of those people.

  18. Here's where you get the metal for lockpicks, free by notthepainter · · Score: 5, Informative
    Learned this at MIT a million years ago.

    Wait until the streep sweeper comes by and follow it down the street. The bristles are spring steel that is perfect for lock picks. They fall off, just pick them up off the street.

    I've never made a set of picks so I don't know if this is true or not, but there was a decent lock picking culture at MIT in the late 70s.

  19. Richard Feynman was a Stell Bold Hacker by notestein · · Score: 2, Insightful

    Pick up a copy of "Surely You're Joking, Mr. Feynman!"

    It's a good quick ready and talks about his lock picking and safe cracking while working on the Manhattan projcet at Los Alamos.

    Or read about it here

  20. Nothing's unpickable - how big a mess do you want? by Silicon_Knight · · Score: 5, Interesting

    For locks like a Medaco lock - in which the tumblers have to be rotated to a certain angle (usually 15 deg increments) as well as lifted to a certain height - AFAIK there are no tools out there that can pick that. However, even the strongest locks uses brass for the tumblers (Medacos are no exception - at least the one that I opened up to play with :) ).

    Brass is primarily a copper alloy. It is extremely reactive in the presence of strong acids. A few years back, a friend of mine wanted to look at a smart card under a microscope - just curious, that's all. I was working in a research lab then, and I mixed hydrochloric acid with nitric acid to make aqua regia. We were able to dissolve the GOLD contacts off the smart card to expose the chip underneath. (Aqua regia is used for lot assay analysis of alloys to determine alloy composition - you start by dissolving the metal, then feed it through some form of spectroscopy machine to measure the quantity and the composition of the metal). If I had squirted that into the door lock and held it in place with some bubble gum ... I could probably have opened the door with just a screwdriver after the tumblers are dissolved.

    - SK

  21. I see your karma whoring, and raise you... by mnewton32 · · Score: 3, Funny
  22. Sometimes thinking outside the box helps. by e9th · · Score: 3, Insightful
    If your aim is just to gain surreptitious entry, there may be easier ways than picking the lock.

    When my father died, he left some important papers in a locked drawer in his file cabinet. The key was nowhere to be found. But the drawer above it had no lock. I just removed that one.

    Older Steelcase desks with a center drawer actuated locking mechanism could be opened (well, except for the center drawer itself) by just reaching behind that drawer and lifting up the lever that locked all the others.

  23. MIT Guide to Lockpicking by Tassach · · Score: 4, Informative

    I'm suprised no one has linked to the (in)famous MIT Guide to Lockpicking yet.

    --
    Why is it that the proponents of "one nation under God" are so eager to get rid of "liberty and justice for all"?
  24. Re:Here's where you get the metal for lockpicks, f by BlowChunx · · Score: 3, Informative

    Speaking of MIT, why hasn't anyone mentioned the MIT lock picking guide ?

  25. Your nearest lock picking group... by dcw3 · · Score: 2, Funny

    ... http://www.cia.gov/

    --
    Just another day in Paradise
  26. The Club!!!! by Anonymous Coward · · Score: 2, Insightful

    I always love watching people secure their Clubs to their steering wheels and feel so secure. What has happened is thieves bypass the Club and hacksaw the steering wheel itself. Steering wheel broken, slide Club through hole, no more club!!

  27. here be the pdf by Anonymous Coward · · Score: 2, Informative

    .:

    Funky-type pdf

    http://www.lysator.liu.se/mit-guide/MITLock Guide.pdf

    ~!-xor

    http://www.lysator.liu.se/m it-guide/MITLockGuide.ps

    :.

  28. Re:80% of locks cheap crap? by Anonymous Coward · · Score: 5, Informative
    Abloy was bought out by Medeco, last I checked. Medeco makes a heck of a lock, but until recently the blanks were brittle and they tended to break in your hand if you twisted the key too hard in the lock.

    Abloy locks employ a sidebar and rotating disks. It's very, very difficult to pick them for several reasons; sidebar locks are intrinsically difficult to pick (such as the old GM locks, which didn't have a pick set for them until the late 1980's or early 1990's, when some smartass figured out that you could use a special spring compression tool to allow the wafers to free-float. That makes them subject to move when vibrated or rapped, and the sidebar (which is then under spring pressure) can line them up.

    Abloy has no such constraint. IIRC, the world record for picking an Abloy is 36 hours. That may have changed; I don't know.

    For high security locks like Medeco, ASSA, Abloy, etc., the fastest way through them is a grinder. Used to be an ice pick attack to the latch, and although some locks are still improperly installed, that's largely gone the way of the dodo.

    As a locksmith myself, I'd rather have Abloy on my doors more than anything else. But they're hard to find here in the US, so I use Medeco instead. Beats the hell out of a $15 Kwikset, lemme tell you.

  29. Other lock-picking resources. by Christopher+Thomas · · Score: 5, Informative

    First, the obligatory link to a mirror of the MIT Lockpicking Guide.

    Second - as another poster noted, lock pins aren't typically made from high-strength alloys. A battery-powered hand drill (and a screwdriver to turn the lock when the pins are gone) is the best and fastest lock pick that there is. Didn't even leave any visible damage when I used this approach on a filing cabinet we'd lost the key to. Just pick a bit as wide as the key entryway, and drill down the line of pins.

    Be advised that the lock tends to jam after closing again, as the remains of the pins fall back into their channels when the lock returns to its original position. But if you're drilling a lock, you're typically looking for a one-time solution anyways.

  30. Re:Nothing's unpickable - how big a mess do you wa by mkettler · · Score: 5, Interesting

    For that matter, most structures surrounding locks aren't indestructible either. When you get down too it, someone can break into a lot of places by driving sledgehammer or truck through the door.

    However, that makes lots of noise. It's hard to protect an office building from a bulldozer attack, but then again, it's pretty hard to sneak around with a bulldozer.

    Really an attack involving strong acids isn't much more practical. Not many thieves want to walk around with a bottle of highly concentrated HCL hidden in their pocket. (think spillage while trying to run from the police)

    Your best bet in any physical security is to try and make the thief do one or more of the following:
    1) make a lot of noise (defeating stealth)
    2) leave a lot of good evidence about the intrusion (defeating anonymity)
    3) use specialized or expensive tools (defeating any financial gain)
    4) use a tool too unwieldy or impractical to transport inconspicuously. (defeating stealth)

    Of course, scale the measures to fit the value of what you're hiding.

    --
    -Matt
  31. Re:Lock Picking Tools... by neverutterwhen · · Score: 2, Insightful

    I heard that rumour too. But let's face it provided you don't go carrying them around in the utility belt of your black catsuit right next to the grappling winch and pocket arc cutter you're not going to be arrested. And if it's just a hobby you won't be carrying them around anyway.

    --
    My appreciation of Douglas Adams is far deeper than yours.
  32. NOT available at B&N by still+cynical · · Score: 2, Informative

    Forget the link to B&N, try Amazon instead.

    --
    Ignorance is the root of all evil.
  33. Testing claims yourself... by Render_Man · · Score: 5, Interesting

    I've participated in the Lockpick contest for the last 2 years. It's been a blast. Quite a challenge too. The book is'nt anything hugely groundbreaking (check out Security.org for a really amazing book), but it's a good thing to read if your curious or if your like me and are not very good at explaing how to do it to others.

    I just find lockpicking facinating because it's yet another case of people proving manufacturers claims are often highly exadurated, or just full of BS. Knowing, and proving for yourself what makes a good lock vs. a bad lock fits well into the computer security dynamic (Physical security anyone?). That extra $1-2 for a master brand lock can buy you several minutes more security vs. a cheap look alike that can be shimmed in about 3 seconds, kind of useful to know. They can both be opened, but your less likely to have a thief willing to be exposed for several minutes than for a few seconds. The Kyptonite vulnerability now makes everyone re-think trusting the manufactureres claims now does'nt it?

    It's also a handy skill for those inevitable times when someone locks the server cabinet and loses the key and you don't want to pay a locksmith through the nose. I also use my skill in security audits to very dramatically show how little security that cheap lock on ther server room provides.

    I've got some descriptions of the contests and LP resources up at my site and some links to videos and the MIT guide if anyones curious.

    Just remember that there is little a set of bolt cutters, a crow bar, or a sledge hammer can't get through. Lockpicking is the 'elegant solution' to that (literal) brute force.

    --
    Where are we going, and why are we in this hand cart?
  34. Re:MIT Guide to Lockpicking by Giant+Killer · · Score: 4, Interesting
    I'm suprised no one has linked to the (in)famous MIT Guide to Lockpicking yet.
    Dang it, I was going to post that. Now I would just be redundant.

    Lockpicking was standard teaching for freshman the East Campus dorm at MIT. This guide has served as the standard since around 1991 iirc. During the yearly EC "Oddball Olympics" lockpicking was one of the main events. I remember a masterlock being picked in 9 seconds. Really, masterlock padlocks can be that easy. And I've seen master hackers (roof and tunnel in this case) spend an hour and a half on a Schlage and never get it.

    This is a great guide and a good place to start, but lockpicking is all about feel. Like anything else, it just takes practice to get good.
  35. Go magnetic by greg_barton · · Score: 2, Interesting

    Just use a magnetic lock.

  36. Everything Fun In Jersey Is Illegal by RogL · · Score: 2, Informative

    Everything Fun In Jersey Is Illegal

    I'm a recovering South Jersey boy. When my wife moved to Jersey with me, within a few months she came up with a song:

    Everything Fun In Jersey Is Illegal ...that includes lockpicks, and I've been told, carrying a prybar in your vehicle is a Bad Idea (potential police harassment for carrying "burglar tools"). Hey, I've been harassed for carrying a Victorinox (Swiss Army) pocketknife. Just a basic pocketknife w/ screwdrivers / scissors.

    Now enjoying a state that's much less restrictive.

  37. That old lock... by Brandybuck · · Score: 2, Interesting

    In high school we used to pick the cheap locks on the classroom cabinets all the time. The purpose was to steal the rival club's flag then extort community charity work out of them to get it back. My brother got pretty good at locks.

    Then we visited Germany for a month. The house where my brother was staying had a locked closet with a key missing from before the war. No one had opened it in over fifty years. But it was an absurdly easy lock and my brother had the closet open five minutes after being apprised of the problem (four minutes to find a suitably stiff paperclip).

    To this day I believe there's still a family in Germany firmly convinced that US students are taught lockpicking and safecracking and other feats of criminal legerdemain.

    p.s. No valuables found in closet beyond old moth-eaten coats the wife's old love letters. Ah, how sweet :-)

    --
    Don't blame me, I didn't vote for either of them!
  38. Holy Crap by tunabomber · · Score: 5, Interesting

    Just tried it on the Krypto-Lok sitting next to my desk and once I figured out the trick, I got it open in about 15 seconds.
    Basically, you have to shake the lock at the same time that you're turning the pen.
    My guess is that shaking and wiggling the pen causes the interface between the pins & spacers to move around, and if you're turning the pen at the same time, the cylinder will rotate a notch as soon as the interface between the leading pin/spacer pair is in the right place. Then you just repeat the same procedure for all the other pin/spacer pairs.

    --

    pi = 3.141592653589793helpimtrappedinauniversefactory71 ...
  39. Re:Here's where you get the metal for lockpicks, f by Giant+Killer · · Score: 5, Interesting

    I've made several sets, and it really is this easy. Best way really is to follow the street sweeper. The spring steel bristles that come loose have perfect properties. I've tried making them out of other materials, and the spring steel is quite easy to shape and very resilient.

    Then just find a decent pick you want to copy, and sit down at the grinder with your blank bristle. They've still got grinders in my old dorm and the lockpicking culture is indeed alive and well at MIT.

  40. Actually as near as I can tell by xyote · · Score: 2
    the pen just does a combination of allowing you to turn the lock cylinder and jiggle the lock pins so that you can align them at the splits (or whatever you call them). Just standard lock picking techniques. I'm suprised they can open the bike locks so quickly as good locks are supposed to have features that make them pick resistent such as false splits and better pin alignment. The reason you can pick locks is because the pins aren't in perfect alignment and you can torque the lock so one pin rubs in its guide. By moving the pin, it's the one harder to move since it's rubbing, you can feel it when the split hits the cylinder boundary. Once that happens the cylinder moves a little bit more and another pin starts rubbing in its guide. Repeat for all pins. Good locks have anti-picking features. This should not happen.

    If you want to practice this on a easy to pick lock, do one of the keyless cable locks. Just pull at the lock to apply pressure. Turn the numbered ring that is hardest to turn (it's rubbing) until it clicks. Repeat on other rings until lock opens.

  41. I learned lockpicking as a child by TaxSlave · · Score: 4, Interesting

    I first learned to pick locks at my childhood church, from my dad. The locks were standard household style locks, on doors that opened outward, so all I needed was a pocketknife.

    During High School, I could often be found inside the locked classroom, waiting for the teacher to arrive. I knew which doors opened using which methods, and which windows were nearly impossible to lock properly.

    I've learned a few things about physical security over the years. Walls don't always go to the true ceiling. Locks don't always work as advertised. The unknowledgeable don't always understand the proper ways to secure things, and a disgruntled soon to be ex-employee will occasionally just hand you a key you shouldn't have.

    With my knowledge of computers, I make it clear that I look the other way when people are typing in their passwords on a PC I'm working on. I want it to be clear to them that I don't know their password. If I want to gain access to a PC, I don't need to know the password before I start anyway.

    People come to me when they need to gain access to something they've locked themselves out of on their computer. They have confidence that i can help them. Quite often, I can. A little research, a little knowledge, and the ability to solve problems tends to do the trick.

    I've never studied lockpicking. I've never needed to. Locks are usually either very easy to go through, or around. Around is usually the best way.

    These days, it's all white-hat. That makes it even more fun.

    1. Re:I learned lockpicking as a child by g0bshiTe · · Score: 4, Interesting

      Nice job, I find myself in the same situation. Remeber the old bicycle locks, the kind with the ring style tumblers? That was my first lock. Since then I have worked part time for a locksmith for a few years. There isn't a car I can't get into with little more than a coat hanger. If that doesn't work a few bobbi pins will do. Though the Mercedes security locks trouble me. The only household locks I can't do are Baldwin and Medico. Pretty much everything else is fair game. In school Master combination locks made me popular. Some kid next to me would forget his locker combo and start to go get the janitor. I'd stop em and ask for one of their shoelaces and procede to open their locker with it. True security is like a dragon, it's a mythilogical beast.

      "There is no spoon"

      --
      I am Bennett Haselton! I am Bennett Haselton!
  42. Same thing, only with combo lock... by romper · · Score: 2, Funny
    My boss mentioned that he had a couple combination locks for gym lockers, etc., that were just laying around because he forgot the combinations if it wasn't used in awhile. I told him if it was a Master lock there was a simple method for getting them open and he could bring it in.

    Well, he did. The only thing is it wasn't a Master lock but some crap no-name lock made in Taiwan or someplace. The Master method didn't work on it but I decided to see if I could do it by touch (never tried before).

    Two minutes later he went back to his office and found his coffee cup padlocked to his chair.

    I got some strange looks after that...

    --
    Right is wrong when left is right.
  43. I work for a bike parts/accessories wholesaler... by Corf · · Score: 5, Interesting

    ...and I browse /. when the sales calls aren't heavily inbound. Naturally, I forwarded the link to the other six folks in the department, and everyone's buzzing about it. We will definitely bring it up with the Kryptonite rep the next time he's in the area.

    Generally, folks buying locks know that it's just a deterrent... except for the people buying exactly the retails-at-$80 lock (with heavy-duty chain) shown in the movie, who tend to be messengers and/or people with $1k+ bicycles. Personally, my bikes stay locked up in my living room when I'm not on them, and I don't take my lock with me when I seriously ride because that would tempt me to separate myself from the bike. I've got a cheap old schwinn cruiser for that. (=

    --
    The pain was excruciating and the scarring is likely permanent, but that just means it's working.
  44. Re:Off to the pop machine... by russotto · · Score: 4, Informative

    Nope. This model of lock must have either really crappy manufacturing or a design flaw or both. What they're doing is the equivalent to "raking" in a conventional lock -- that's when you put some tension on the cylinder and just run a pick along the pins without any attempt to feel the individual pins. It generally won't work in a lock with security features and tight tolerances (though sometimes you get lucky). In addition, tubular locks are usually designed so you have to turn it at least 1/4 turn to open it, which would involve picking the lock several times. The Kryptonite they show releases the shackle in an intermediate position -- bad design there. A real tubular lock pick should open those locks; a simple plastic cylinder of the right diameter should not.

  45. dipstick? by phyruxus · · Score: 2, Funny
    Wow, I didn't realize that I was the only person in the world without a photographic memory.

    Oh please, wise and brave anonymous coward, deluge me with further insults so I may one day be brave enough to anonymously insult people.

    In other words, bite me.

    --
    "A witty saying proves nothing." ~Voltaire
    "d'Oh!" ~Homer
  46. Re:Off to the pop machine... by brunning · · Score: 3, Interesting

    there's some interesting insight and speculation on the original bikeforums.net thread regarding this.

    i don't know much about lock picking, but some posters there basically speculate that most circular locks are somewhat succeptable to this kind of picking and the krpytonite happened to be especially unlucky due to the diameter of the barrel and pressure needed to compress the springs of the teeth mechanisms inside.

    the bic pen happened to hit the spot, being the proper diameter and the proper softness, collapsing where necessary, but strong enough to poke down, where necessary.

    i'll say that after practicing for a little while, i can pop a krpytonite EV disc lock (top of the line) in about 5 seconds.

  47. Feynman by Hans+Lehmann · · Score: 2, Interesting

    While you're at it, pick up a copy of Richard Feynman's "Surely you're joking, Mr. Feynman."
    In addition to winning the Nobel Prize, Feynman spent much of WWII at Los Alamos working on the atomic bomb. He devotes part of this book to his work there, including his (usually succesful) attempts to crack the many safes & locked file cabinets found at the base. He was very much a computer hacker in the days before computers.

    --
    09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
    1. Re:Feynman by (C)0N0(R) · · Score: 2
      from http://clsdemo.caltech.edu/archive/00000014/02/Fey nmanLosAlamos.htm

      One day I discovered that the workmen who lived further out and wanted to come in were too lazy to go around through the gate, and so they had cut themselves a hole in the fence. So I went out the gate, went over to the hole and came in, went out again, and so on, until the sergeant at the gate begins to wonder what's happening. How come this guy is always going out and never coming in? And, of course, his natural reaction was to call the lieutenant and try to put me in jail for doing this. I explained that there was a hole.

      You see, I was always trying to straighten people out. And so I made a bet with somebody that I could tell about the hole in the fence in a letter, and mail it out. And sure enough, I did. And the way I did it was I said, "You should see the way they administer this place (that's what we were allowed to say). There's a hole in the fence 71 feet away from such and such a place, that's this size and that size, that you can walk through."

      Now, what can they do? They can't say to me that there is no such hole? I mean, what are they going to do? It's their own hard luck that there's such a hole. They should fix the hole. So I got that one through.

      --
      The light at the end of the tunnel is a train.
  48. Legal Issue!! If you own lockpicks, please READ! by Banner · · Score: 3, Informative

    Okay, in many states you can legally own lockpicks as a hobbyist.

    HOWEVER!!

    IF YOU ARE ARRESTED FOR -ANY- CRIME, POSSESSION OF LOCKPICKS WILL CAUSE YOU TO ALSO BE CHARGED WITH POSSESSION OF 'BURGLERY TOOLS'! This could even include a speeding ticket if the Officer decides to search you. So if you are going to carry lockpicks on your person, BE CAREFUL!

  49. Make it easy, why don't you? by Chris+Tucker · · Score: 5, Funny

    So I'm at a jobsite and really REALLY needed to pee.

    I recalled seeing a bathroom on the floor and when I got there, I was confronted with a pushbutton lock.

    The pushbuttons were some kind of polymer, with the numbers PRINTED on them.

    Three of the buttons had the numbers worn away.

    Needless to say, I solved the lock in a few seconds.

    Funny thing, it was an executive-type bathroom, not to be used by scruffy hacker geeks like me.

    Or so I was told by the executive-type that found me in there using a urinal.

    "Who gave you the combination?"

    "Everyone who used the bathroom since the lock was installed, that's who." (FLUSH)

    --
    Guaranteed! This comment 100% Anthrax free!
  50. The basics are simple by kc_cyrus · · Score: 2, Informative
    Consider the simplest case, a lock with only one dial having, say, 6 numbers. How many combinations are there for such a lock? Clearly, 6. Now consider a lock with two dials, each dial having 6 numbers. For each choice of number on the first dial, we can have any of 6 different choices for the second number. Thus, this lock would have 6 * 6 = 36 lock combinations. Now consider a lock with 3 dials, each dial having 6 numbers. We just figured out that there are 36 ways to set the first two numbers; for each of these. So if you have understood this and see the pattern, you can immediately write down how many combinations there are for any such lock.

    Now the "odds" question. If there are N possible combinations, and you try one of them, the probability that it is the right one is 1/N, and the probability that it is a wrong one is (N - 1)/N.

    Now suppose the 1st try is a failure but the 2nd is a success; the odds of this are [(N - 1)/N] * [1/(N - 1)] = 1/N again. [The 1/(N - 1) factor comes from the fact that on the 2nd try there are N - 1 combinations to try, since you have tried one that does not work and, presumably, will not try it again.] The odds that you will succeed in one or two tries is the sum of the individual probabilities, because they are mutually exclusive events (that is, the first success cannot occur on BOTH the first and second tries). Generalizing to the case of a first success on the Kth try is straightforward.

  51. Porsche cars not easy to steal by SethJohnson · · Score: 2, Interesting



    In terms of hotwiring or other methods of driving away with a stolen car, Porsches are impossible to steal. They've got factory-installed burglar alarms that are engaged every time you lock the doors. The engine will not start until the alarm is properly disengaged. Someone MIGHT be able to spoof the electronic radio signal that disables the alarm. But then you've got a special key with a computer chip that the car checks before starting the engine. In the end, the best way to steal a porsche is with a flatbed truck. Then chop it and sell it for parts. A used 1997 twin turbo sells for $100k +, so most people keep those vehicles under close watch. I dunno. Thought I'd chime in after laughing at Nick Cage in Gone in 60 Seconds driving away in stolen porches. Ridiculous.

  52. Odd Texas law by MourningBlade · · Score: 2, Interesting

    Specifically, you cannot carry wire cutters in your back pocket.

    The law dates back to the conflicts between ranchers and farmers near the time of Texas independence. Back then, much of the land was not fenced in, so cattle herders would move their herd around, grazing. Needless to say, the farmers didn't care for that, so they put up barb wire around their lands.

    Incidentally, this is a case of technology exciting a reaction: previously, farmers would've been forced to build a wooden or stone fence, and the areas were very large. A barb wire fence, however, was quick and easy to put up, so they were more likely to put one up.

    Anyways, a lot of the cattle herders didn't care for these fences, so they'd cut through them with wire cutters, and go on through. Many, in fact, took to cutting barb wire fences wherever they saw them.

    So, Texas outlawed casual possession of wire cutters: they can't be in your pocket. They'd better be in a tool box. This is similar to the hassle you'll get from cops if you wander around with a spraypaint bottle poking out of your jacket.

    Anyways, that's the story.

  53. Re:Johnny Ashcroft says by onkelonkel · · Score: 2, Insightful

    So this american guy (the president) says to this french guy (also the president), "hey dude we're going to use our awesome military might to impose democracy on an arab nation (Iraq), want to join in?" And the french guy says, "No thanks buddy, we tried it already and it didn't work! (Algeria)". And the american dude gets all bent out of shape and says "bite me, you cowardly french dude". And the french guy says "Whatever, but its a real bad idea, we know this from experience" And the american dude gets more bent out of shape and says "bite me, you cowardly french dude".

    Get it now?

    Those who don't study history are doomed to repeat it.

    --
    None of them can see the clouds; The polished wings don't care.
  54. Some of that Trash Hacking... by Mulletproof · · Score: 4, Insightful

    Can we PLEASE stop fixing the word 'hacking' to the hobby of ones choice where it really REALLY holds no relevance?! Hey, tonight I'm microwave hacking, so what sort of TV dinner would you like? We can talk about the sky hacking I'll be doing with my friend's RC plane over the weekend. What? You'll be doing some lawn hacking with your mower? Too bad. After our sky hacking session we were going to do some car hacking and put a spoiler ON MY DAMN CAR.

    Using this word superfluously is starting to take on the characteristics of the word 'kool'; You sound like you have an IQ of 5, so give it a freakin' rest already.

    --
    You need a FREE iPod Nano
    1. Re:Some of that Trash Hacking... by Various+Assortments · · Score: 2

      I don't think you know what the word "hack" really means.

    2. Re:Some of that Trash Hacking... by iswm · · Score: 2, Insightful

      You sir, are an idiot.

      --
      Buckethead
    3. Re:Some of that Trash Hacking... by chgros · · Score: 2, Insightful

      Yes, let's go back to making furniture...

  55. Re:I work for a bike parts/accessories wholesaler. by WinterSolstice · · Score: 4, Interesting

    I had a bike locked with the top-end kryptonite stolen. The thief then kindly re-attached the kryptonite to the bike rack. When I tried to redeem the "lock guarantee" or whatever that ridiculous thing is called, they called me a liar. They said I didn't lock it properly or some such.

    I will never buy another lock, ever. I only trust my good bike ( A Trek Project One 5500/5600 (the OCLV 110 from a year or two ago) with campy record) to be within reach. My junker is a 1960s Schwin that cost about $60 and is in 4 colors of cheap spray paint. I just tie it in place with a double figure-eight knot :)

    -WS

    --
    An operating system should be like a light switch... simple, effective, easy to use, and designed for everyone.
  56. social engineering a better tool by slew · · Score: 2, Interesting

    This all reminds me of my old caltech days when as freshman, everyone seemed to be fascinated with lockpicking...

    And then day, a few of us somehow got the idea to "kidnap" the big-bob statue when we noticed on a late night dining trip it was just made of fibreglass (light enough to carry away) and locked to the sidewalk with a sliding metal rod key padlock.

    Instead of picking the padlock (which we probably could have done very easily as we practiced all the time), my buddy decided to just copy down model number and the serial number and take it to a local locksmith and claim we lost the key to the lock and needed a new key. After some convincing, the locksmith went to the back office and pulled out a book, looked up the serial number, cut us a key with his key cutter by pin-code. We borrowed a convertable one night, unlocked the lock, picked bob up, and brought him back to campus. And nobody had to keep lookout why we were attempting to pick the lock... That didn't turn out so well (although caltech laywers were on our side, the big-boy corporation wasn't very amused by our humorous note and eventually we negociated a return in exchange for a no prosecution agreement, but I digress).

    Sometime later in life, I ended up losing the only set of keys to my car during a business trip (I gave the other set to my friend who was out of town that weekend). Angry at myself, I took a cab home and fumed for a couple hours. Then thinking back to my college days, I hitched a ride to nearest car dealer (of the same make, but not the same one I bought the car from, don't want to single a vendor out for a security lapse) told the guy in the replacement parts department I lost my car key, but I knew the VIN code to the car (duh, you can see that through the windscreen), he looked up the VIN code in their national database (I bought my car new) found my name, I showed him my ID and he then cut me a key by pin code and I had a brand spanking new key to my car. If I was a bit more convincing, I'll bet I could have convinced him to do it for me even w/o an id, by just knowing the name of the original owner...

    The lesson I learned from all this is that the most essential tool for most things is often just your mouth (and chutzpah) when it comes to locks...

  57. There are better key locks, but they are rare by Animats · · Score: 3, Informative
    You don't see lever locks much any more, but that's a better approach. The key raises a set of hinged levers. Each lever rotates a plate with a slot, and when the slots line up, a bail drops into them, unlocking the lock. In some designs, the turn of the key locks the levers before it drops the bail, so you can't manipulate the levers once the bail is touching the slots.

    Lever locks have the combination component one step removed from the input component, which makes them harder to force. If you try to force a lever lock, you may trash the levers, but that won't open the lock.

    Safe deposit boxes are traditionally lever locks, although not always very good ones. Jail locks are usually level locks of massive size.

    Lever locks are usually big rectangular boxes, unsuitable for embedding in a door. So they're not used much unless serious security is required, as in a jail.

  58. Re:I work for a bike parts/accessories wholesaler. by Anonymous Coward · · Score: 2, Insightful

    When I tried to redeem the "lock guarantee" or whatever that ridiculous thing is called, they called me a liar. They said I didn't lock it properly or some such.

    It is standard practice, for insurance companies for example, to initially state that the claim is denied (for some given reason).

    You need to push the issue and threaten legal action to get them to pay up.

    These companies try the first tack, because MANY people just give up there and then. It never gets to a legal point because it is not worth it for them. If you are right and you push the issue, you will probably get your money.

  59. Here's a winner site by Pig+Hogger · · Score: 2, Informative
    Here's a winner website:

    http://www.lockpicking101.com/.

    Plenty of forums on lock-picking...

  60. Fun stuff with Lockpicking... by Ezmate · · Score: 2

    10 years ago, I stumbled across the MIT lock-picking guide. After reading through it, I found a place in town to purchase some lock picks. "The Spy Store" was a place with all sorts of interesting items: hidden cameras (way before nanny cams became common), knife pens, offers for armoring your vehicle, brass knuckles, hidden tape recorders, parabolic microphones, bugging equipment, and of course, lock picks (interestingly enough, they were shut down a few years later for selling items that were only supposed to go to law enforcement officials).

    Anyway, armed with only what I had read, I got home to my cheap little apartment, and proceeded to pick my house lock in 15 seconds - without ever picking a lock before. Needless to say, I was both amazed and scared.

    Over the next few weeks I practiced my new found skill on all sorts of locks and learned a wonderful secret about corporate America: their locks aren't cheap, but are generally keyed 2-3 different ways (1 security key could open all locks in the building, each floor had a floor "warden" who possessed a key to get into any office on that floor, and of course, my own personal key) making them very easy to pick.

    I had a guy in my office that loved to play pranks on people. One day, I noticed that he had left his car (Toyata Celica) in the parking garage overnight. Of course, he had it secured with one of those fancy devices known as "The Club". I eyeballed the car & thought, "what the hell...let's see what I can do." I was able to pick the outside lock after lots of effort. Once inside, I was amazed at how quickly "The Club" opened up to me...20 seconds (my first attempt on the club). The ignition lock was very tough & I was never able to pick it. After some thinking, I realized that a manual transmission car could be pushed around the parking garage, as long as I was careful not to lock the wheel. In the end (after some serious pushing back & forth) I had moved the car 20 parking spots down and on the other side of the garage. I locked the Club back into position, locked the door, & went home.

    The next day, he came into the office with a really freaked out look on his face. He told people that he thought someone had the keys to his car & was using it. After letting him sweat it out for the rest of the day, I told him the truth. He was a little pissed, but was able to get a chuckle out of it.

    From that day forward, anytime someone (even my boss) had lost a key, they'd just come see me.

    The MIT Lockpicking guide is a nice starter on lockpicking. Give it a look if you have the chance.

  61. Re:fun links about lock vulnerabily/Love those ads by ChairmanMeow · · Score: 2, Insightful

    While the relevance is good, I'm guessing they don't sell many locks on that page.

    On the contrary, they probably sell lots of locks to people practicing their lock-picking.

    --
  62. Additional Reading by Baby+Duck · · Score: 2, Funny
    --

    "Love heals scars love left." -- Henry Rollins

  63. not anarchists, just dipshits by SethJohnson · · Score: 2, Insightful

    Those are true dipshits. Not anarchists. Anarchists shouldn't be jealous of other peoples' material possessions. If they are, then they are increasing the scope of those who oppress them.

    Great. Destroy someones' bicycle. Encourage them to drive a car. Way to go "anarchists." You really have fucked the system now!

  64. Kryptonite response: Rebate or replacement by ajna · · Score: 2, Informative
    Kryptonite has responded to all this recent brouhaha (I'd hate to work there this week!) with a replacement program for locks 2 years old and newer and a rebate program for locks older than that. Details can be found at their slow and ugly http://www.kryptonitelock.com/ site or via the businesswire mirror of the press release.

    Relevant paragraphs for the lazy:

    Consumers who have purchased an Evolution lock, KryptoLok lock, New York Chain, New York Noose, Evolution Disc Lock, KryptoDisco or DFS Disc Lock in the last two years are eligible for a product upgrade free of charge from Kryptonite. Customers will need to have either registered their key number, registered for the Kryptonite anti-theft protection offer or have proof of purchase to qualify.

    Specifically, Kryptonite will provide for free cross bars featuring the company's new disc-style cylinder lock technology to consumers who have purchased Evolution and KryptoLok series products. In addition the company will replace for free recently purchased Evolution Disc Locks on New York Chain and New York Noose with its "Molly Lock", a heavy duty solid steel padlock. Kryptonite also will upgrade recently purchased disc locks.

    Consumers who have had one of the Kryptonite locks mentioned with a tubular cylinder for longer than two years will be eligible for a sizeable rebate on the upgraded products. This program will be administered through Kryptonite dealers and distributors.