Steel Bolt Hacking 448
| Steel Bolt Hacking | |
| author | Douglas Chick |
| pages | 114 |
| publisher | TheNetworkAdministrator.com |
| rating | 8 out of 10 |
| reviewer | Alec Kryten |
| ISBN | 0974463019 |
| summary | How to pick locks, crack combinations for LP sports groups |
The beginning of the book discusses the origins of lock-picking sporting groups, crews in the U.S and Europe, competition around the country, and how to become a part of a lock-picking group. One of the groups out of Colorado Springs, DC719, are a bunch of computer geeks that have taken up the art of lock picking and sponsor a lock-picking contest every year at DefCon. According to Mr. Chick, computer people are the fastest group to pick up the art of lock picking. (I must warn you though, there are also a lot of disclaimers about the author not being responsible for the misuses of the information contained in this book.)
The book is fully illustrated with pictures of different types of lock picking instruments, tools to make your own picks as well as padlocks, deadbolt, and combination locks. There are pictures of locks that have been cut open and even how to crack push-button combination locks. (You know, the kind you find on the door to a server room.) I have to say, for a little book, (114 pages) it is brimming with valuable information for a beginner. What I didn't realize was that software isn't the only thing that has security vulnerabilities; mechanical things like padlocks and deadbolts do as well. What was scary to learn is how easy cheap locks can be picked, and that 80 percent of all locks used are cheap locks. Expensive locks are just likely to take a little longer.
I liked that the book didn't exaggerate. It didn't tell me that I was going to be a master lock picker after only a few tries. It took a little time, practice and sore fingers, but after a couple weeks of practice, I could pick every lock in my house. And as a computer person, I liked all of the jargon that was used to explain locksmith techniques. There was also enough humor to keep the book interesting; it's difficult to read any type of textbook and still maintain a reasonable interest. The illustrations are good and there is a resource section to purchase the tools you need from the Internet.
What I didn't like about the book: The most annoying point, I felt, is the considerable redundancy in methods between different types of locks to be picked. Also, the book suggests that there might be a lock-picking group in every city in the U.S., when in fact I am having a difficult time finding one in my are. And I live near D.C. -- You'd think there would be one on every corner around here. I think that the sport is still in its infancy and Mr. Chick is hoping his book will draw more people to it. The author put his e-mail address on the back of the book. He hasn't responded to my e-mail yet, but I suppose that he's probably a busy man.
All in all, I found the book informative, entertaining and worth the purchase price of 19.99.
You can purchase Steel Bolt Hacking from bn.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page.
fun links about lock vulnerabily (Score:3, Informative)
quicktime movie [thirdrate.com] of the same.
Legal issues (Score:5, Informative)
Article at Howstuffworks.com (Score:5, Informative)
It offers a great introduction to lock picking, and has some nice graphics that really helped me understand how locks work, and how they can be circumvented. If you really get into it, then I'm sure this book would offer a lot more information to help you along.
Here's where you get the metal for lockpicks, free (Score:5, Informative)
Wait until the streep sweeper comes by and follow it down the street. The bristles are spring steel that is perfect for lock picks. They fall off, just pick them up off the street.
I've never made a set of picks so I don't know if this is true or not, but there was a decent lock picking culture at MIT in the late 70s.
Re:A valuable skill (Score:5, Informative)
MIT Guide to Lockpicking (Score:5, Informative)
Re:Here's where you get the metal for lockpicks, f (Score:3, Informative)
Re:So what locks ARE good?!? (Score:3, Informative)
It seems that people in the hobby are reluctant to endorse brands. I saw Barry "The Key" Wels at HOPE this year. His presentation involved the pricey (and supposedly uber-secure) Medico locks and another brand of expensive lock that he agreed with the manufacturer to keep the brand name hidden during his talk.
When his talk shifted to his CryptoPhone project, he politely sidestepped an audience member asking what kind of lock he had on the doors of CryptoPhone's offices.
here be the pdf (Score:2, Informative)
Funky-type pdf
http://www.lysator.liu.se/mit-guide/MITLock Guide.pdf
~!-xor
http://www.lysator.liu.se/m it-guide/MITLockGuide.ps
:.
Re:A valuable skill (Score:2, Informative)
Basically, if the police want an excuse to harass you, they have one. If you stay out of their way, and don't make it obvious, usually no one will care. Further, if you can prove you need them for your job, you're even less likely to get hassled.
Re:80% of locks cheap crap? (Score:5, Informative)
Abloy locks employ a sidebar and rotating disks. It's very, very difficult to pick them for several reasons; sidebar locks are intrinsically difficult to pick (such as the old GM locks, which didn't have a pick set for them until the late 1980's or early 1990's, when some smartass figured out that you could use a special spring compression tool to allow the wafers to free-float. That makes them subject to move when vibrated or rapped, and the sidebar (which is then under spring pressure) can line them up.
Abloy has no such constraint. IIRC, the world record for picking an Abloy is 36 hours. That may have changed; I don't know.
For high security locks like Medeco, ASSA, Abloy, etc., the fastest way through them is a grinder. Used to be an ice pick attack to the latch, and although some locks are still improperly installed, that's largely gone the way of the dodo.
As a locksmith myself, I'd rather have Abloy on my doors more than anything else. But they're hard to find here in the US, so I use Medeco instead. Beats the hell out of a $15 Kwikset, lemme tell you.
Other lock-picking resources. (Score:5, Informative)
Second - as another poster noted, lock pins aren't typically made from high-strength alloys. A battery-powered hand drill (and a screwdriver to turn the lock when the pins are gone) is the best and fastest lock pick that there is. Didn't even leave any visible damage when I used this approach on a filing cabinet we'd lost the key to. Just pick a bit as wide as the key entryway, and drill down the line of pins.
Be advised that the lock tends to jam after closing again, as the remains of the pins fall back into their channels when the lock returns to its original position. But if you're drilling a lock, you're typically looking for a one-time solution anyways.
Re:Surely you must be joking Mr Feynman (Score:3, Informative)
Feynman is my favorite wise-cracking, lock-hacking, bongo-playing, skirt-chasing Nobel physicist!
Re:Noticed the trend as well (Score:3, Informative)
An interesting side effect, I'm sure one that goes with just about any skill most people don't have, is the number of times you see people in movies doing it absolutely wrong.
NOT available at B&N (Score:3, Informative)
Re:Surely you must be joking Mr Feynman (Score:1, Informative)
Everything Fun In Jersey Is Illegal (Score:2, Informative)
I'm a recovering South Jersey boy. When my wife moved to Jersey with me, within a few months she came up with a song:
Everything Fun In Jersey Is Illegal
Now enjoying a state that's much less restrictive.
Re:A valuable skill (Score:2, Informative)
1. It's illegal in the US, depending on your state's law. Some states don't allow you to own lockpicks, while others are more leniant.
2. Locksmiths are not banned from using lockpicks. You don't need special certifications to be a locksmith, but you do need a business license to order from many lockpick manufacturers.
Re:Legal issues (Score:1, Informative)
Re:So what locks ARE good?!? (Score:2, Informative)
But medico is the way to go if you want an uber secure steel door with a steel frame set into concrete...but as with all things, the thing you would THINK is the weakest link in door security (like the lock) is actually the strongest. When you are thinking about installing a door, think the whole thing with frame along with the lock.
Also, go low-tech also and a good steel bar across the bottom of the door stops many people...also stops with the kick-in.
Re:A valuable skill (Score:2, Informative)
This site has the full details:
http://www.people.fas.harvard.edu/~hillson/master
Re:Off to the pop machine... (Score:5, Informative)
Re:There's actually two sides to it... (Score:5, Informative)
And never forget the value of the handy old credit card. A friend and I got started in lockpicking with some sets we got off ebay back in middle school, and by the end of high school were quite profficient.
But I've found now that just about any locked door that doesn't use a deadbolt can be opened much faster with a credit card. I keep three of varying thickness in my wallet depending on the situation. I use my ID badge at work to get into the conference rooms because it's quicker than pressing in the door code.
Also, two butter knives work pretty well too if you have a reasonable gap between the door and frame, just alternate force on them to "walk" the latch out. Best part is, you haven't touched the door handle at all, so it's about as non-invasive as you can get
Legal Issue!! If you own lockpicks, please READ! (Score:4, Informative)
HOWEVER!!
IF YOU ARE ARRESTED FOR -ANY- CRIME, POSSESSION OF LOCKPICKS WILL CAUSE YOU TO ALSO BE CHARGED WITH POSSESSION OF 'BURGLERY TOOLS'! This could even include a speeding ticket if the Officer decides to search you. So if you are going to carry lockpicks on your person, BE CAREFUL!
Re:Lock Picking For fun and Profit??? (Score:2, Informative)
B) They had WAY overprice jaws.
Unless he was an idiot/improperly trained, and tried to "spread" the lock, which doesn't work with hardened steel. Now, the Hurst "heavy cutters" make very short work of hardened steel, just make sure you're not on the path that the two halves will go when they finally separate.
(I'm a volunteer firefighter with a decently good bit of education/practice/use of Hurt's jaws).
Re:So what locks ARE good?!? (Score:3, Informative)
The basics are simple (Score:2, Informative)
Now the "odds" question. If there are N possible combinations, and you try one of them, the probability that it is the right one is 1/N, and the probability that it is a wrong one is (N - 1)/N.
Now suppose the 1st try is a failure but the 2nd is a success; the odds of this are [(N - 1)/N] * [1/(N - 1)] = 1/N again. [The 1/(N - 1) factor comes from the fact that on the 2nd try there are N - 1 combinations to try, since you have tried one that does not work and, presumably, will not try it again.] The odds that you will succeed in one or two tries is the sum of the individual probabilities, because they are mutually exclusive events (that is, the first success cannot occur on BOTH the first and second tries). Generalizing to the case of a first success on the Kth try is straightforward.
Re:A valuable skill (Score:2, Informative)
They don't do a 'terrorist' background check.
Re:So what locks ARE good?!? (Score:3, Informative)
There's no simple answer. Ask a locksmith for help chosing the best bet for a particular job and be prepared to spend some money because top quality locks are expensive. And remember for the most part locks keep honest people honest and at best deter, slow or diver thieves (number one way thieves enter domiciles is doors and windows left open. Number two is straight force i.e. the swift kick or broken window).
Years ago I lived in a crummy apartment and there were a bunch of storage rooms past renters had put padlocks on and then abandoned. I was to clear these out for current renters. None of the locks were top of the line but they ranged from hardware store cheapies that cost a couple dollars to heavy duty name brands that might have been upwards of ten. In each case I opened the lock by inserting a short iron prybar about 3/4 inch diameter between the shackle and the body and just wrenching the shackle right out of the body of the lock. I was amazed by how easy it was with a little force and leverage, and not caring that I was wrecking the lock.
Re:So what locks ARE good?!? (Score:3, Informative)
The first thing to do is to replace that with a reinforced strike plate anchored with long screws. The Mag 3 has a full bucket to enclose the bolt and transfer load to the rest of the strike plate, which has four screw holes. Use 3" long #10 wood screws (drill a pilot hole first) and you're solidly anchored to the studs.
Then think about upgrading the lock. I have a hunch there are other brands as good as Medeco but less heavily promoted -- ask a locksmith. Medeco's engineering is brilliant, though.
Remember to consider key control. One attack mechanism is for your housecleaner's drug-addicted boyfriend to duplicate your house key.
Re:Noticed the trend as well (Score:5, Informative)
Boy is this true. Having worked with card-access systems for 5 years, I always chuckle at the way movie characters get past these things, and not trip any alarms in the process.
Just some notes for those people contemplating getting past a card reader.
- Pulling apart the reader may trigger an alarm, not always but often enough.
- Shorting the wires together will not open the lock. What it will do is A) send lots of alarms (read fails) to the guard at the security desk. B) Very possibly short out the door control and make the door locked permanitly.
- From the Resident Evil movie, running a needle through a card reader will get you jack. Maybe its a good thing they just let her out.
- You will never "lock in" a single digit of a PIN combination on one a electronic combination lock by running through numbers. What you will do is send through a bunch of alarms to the guard.
- While cutting the wires to a door alarm will technically disable the alarm, the loss of the door loop will send through its own alarm. Those wires carry a specific resistance, if that changes an alarm is sent.
Those are about the worst offenders off the top of my head, in reality getting past an electronic lock is a pain in the ass, this is why the government/military uses them.Re:A valuable skill (Score:4, Informative)
There are better key locks, but they are rare (Score:4, Informative)
Lever locks have the combination component one step removed from the input component, which makes them harder to force. If you try to force a lever lock, you may trash the levers, but that won't open the lock.
Safe deposit boxes are traditionally lever locks, although not always very good ones. Jail locks are usually level locks of massive size.
Lever locks are usually big rectangular boxes, unsuitable for embedding in a door. So they're not used much unless serious security is required, as in a jail.
Re:As with computers... (Score:3, Informative)
Here's a winner site (Score:2, Informative)
http://www.lockpicking101.com/ [lockpicking101.com].
Plenty of forums on lock-picking...
Kryptonite response: Rebate or replacement (Score:3, Informative)
Relevant paragraphs for the lazy: