A Robot At DEFCON Cracked A Safe Within 30 Minutes (bbc.com)
schwit1 shared an article from the BBC:
Using a cheap robot, a team of hackers has cracked open a leading-brand combination safe, live on stage in Las Vegas. The team from SparkFun Electronics was able to open a SentrySafe safe in around 30 minutes... After the robot discovered the combination was 51.36.93, the safe popped open -- to rapturous applause from the audience of several hundred... The robot, which cost around $200 to put together, makes use of 3D-printed parts that can be easily replaced to fit different brands of combination safe. It cannot crack a digital lock -- although vulnerabilities in those systems have been exposed by other hacking teams in the past.
Though the safe had a million possible combinations using three two-digit numbers, the last number had slightly larger indents on the dial -- reducing the possible combinations to just 10,000. And in addition, "the team also discovered that the safe's design allows for a margin of error to compensate for humans getting their combination slightly wrong" -- which meant that the robot only had to check every third number. "Using this method, they could cut down the number of possible combinations to around 1,000."
"Some SentrySafe models come with an additional lock and key, but the team was able to unlock it by using a Bic pen."
Though the safe had a million possible combinations using three two-digit numbers, the last number had slightly larger indents on the dial -- reducing the possible combinations to just 10,000. And in addition, "the team also discovered that the safe's design allows for a margin of error to compensate for humans getting their combination slightly wrong" -- which meant that the robot only had to check every third number. "Using this method, they could cut down the number of possible combinations to around 1,000."
"Some SentrySafe models come with an additional lock and key, but the team was able to unlock it by using a Bic pen."
You Tube Videos...
5 out of 6 people enjoy Russian Roulette & 6 out of 7 Dwarfs are not Happy
fat men sing in the bath tub with the blues (littlefeat)
was broken into in the less than twenty minutes between when someone kicked in my door and the Seattle police responded. They took everything in it. Sentry makes horrible safes.
Hundreds of fat and sweaty nerds watched a machine made to crack a safe that the machines owners already knew how to crack? And they cheered with incredible raptor?
What would they do if they saw a naked woman? Cream their pants and stutter uncontrollably about colored pills?
I know this isn't at the level of what you'd see in a James Bond movie, but neither is the Sentry safe.
Congratulations to the team at SparkFun!
Mimetics Inc. Twitter
Can I use APK Host File Fenerator to protect my sentry safes from these deplorable hackers?
On Her Majesty's Secret Service (1969) had that safe-cracking machine.
Domestic spying is now "Benign Information Gathering"
All entry and low-line safes have wide gates. Cracking by brute force is done on 3s or 2s if the tolerances are tighter. This wasn't an accomplishment, it was what anyone with the least amount of training possible would have done. Congratulations for being too dumb to look something up before commenting on it as an accomplishment.
Do they at least provide some measure of flame resistance for the contents?
Otherwise, you may as well leave your important/valuable stuff sitting in a closet.
Sentry safes have long been known not to be super secure. They picked low hanging fruit for this demonstration. Forget even dealing with the locking mechanism, its not that hard to pop them open with a crowbar or some other prying device. Check out YouTube. However they do provide modest security (think locking a gun away from the kids) and are fire resistant.
I personally have one, but its primarily for securing documents in a fire resistant manner. I would by no means store gold bullion or anything else of high value in one.
WTF?
I thought the BBC was a bit more up-to-date on current technologies. I guess I was terribly wrong.
#DeleteFacebook
Sentry safes are the masterlock of the safe and vault world. They use cheap direct-entry mechanisms.
30 minutes for a direct-entry minus setup would be considered middling skill. A novice can get there in a few months of casual practice.
This is like all the videos showing Master padlocks opened with hammers and zip ties and things, Let me know when their fancy-pants robot can manipulate open a top-of-the-line Sargent & Greenleaf UL 768 Group 1 rated combination lock in such a short space of time and it might be noteworthy...
All this video does is show that the Sentry Safe safes are just as crappy as any other product Master Lock makes.
Technology at its very very best. Reports suggest that the underground organizations have already devised a technique which will allow miraculous things to happen like flying a plane without fuel , or flying a car in air . Considering that powerful technologies are being kept secret, some of the effect is bound to occur in the lives of normal people. Lets hope people uses the positive aspect to a much greater use like the Team SParkFun
My safe is quite old and crappy and, to open it, you need to input the right combination formed by 4 numbers of 2 digits (around 100 million different possibilities) and use a key.
Important warning for anyone feeling like cracking my safe: it doesn't contain anything of value. As clearly stated in my profile description, I am (kind of) poor and have no interest in becoming rich, in the sense of acquiring a relevant amount of assets, material goods, enjoying expensive whatever, etc. Why does a (kind of) poor person have a safe, you might wonder? For the same reason why a surprisingly relevant number of events happen in the world: pure coincidence.
Custom Solvers 2.0 = Alvaro Carballo Garcia = varocarbas.
Wasn't this submitted a day or two ago?
the safe's design allows for a margin of error to compensate for humans getting their combination slightly wrong
Seriously? The safe is designed to say "Wrong number, but meh, close enough."
Does this mean that the next Hollywood heist will contain the line "Bite my shiny metal ass!"?
Sentry makes fire protection boxes. Those are not safes to protect again anything but the thief who only has a couple minutes to work. You can see average joes with a prybar and a sledge hammer (to force the bar into the steel coating the concrete) open these safes in less than 15 minutes.
In fact the mechanism of these "safes" is very much like a bicycle padlock, not a real safe or vault's lock.
True story: I got an old keypad safe from a company I used to work for. Nobody knew the combination or had the backup key, so it was just dead weight. When I got it home, I started running through all the possibilities that I could think of to come up with a device to crack it. Would I use an Arduino? LEGO robot? Manually push buttons until I figured it out? Nope. I just opened the battery compartment. Actually, I removed the keypad housing, too. I found a header of some sort that I thought I'd try wiring something up to, until I noticed that there were only two wires going from the inside of the safe to the outside of the safe. "Surely," I thought, "it wouldn't be THAT easy..." I attached the two wires to the positive and negative leads on the battery pack and heard a "click". The safe opened right up! I thought about doing something "cool" with it like bypass the keypad entirely with a magnetic reed switch and a special ring, but life happened and I never went back to the it. Just goes to show that locks are only there to keep honest people out!