LockPickingLawyer's '[192] IFAM Huno 80 Shutter Lock v. Chinese Copy: Pick, Gut, & Compare' →

March 22, 2020 by Marc Handelman in Lock Picking, Locks, Physical Security, Information Security, LockPickingLawyer

Thanks to the LockPickingLawyer for publishing his superlative picking videos (via his LockPickingLawyer Channel) for all to see, enjoy and, of course, learn.

LockPickingLawyer's '[939] Using a "Rotar Pick” To Open A Mul-T-Lock Interactive' →

March 22, 2020 by Marc Handelman in Physical Security, Information Security, LockPickingLawyer, Locks, Lock Picking

Thanks to the LockPickingLawyer for publishing his superlative picking videos (via his LockPickingLawyer Channel) for all to see, enjoy and, of course, learn.

DEF CON 25, Nathan Seidle's 'Open Source Safe Cracking Robots' →

August 11, 2017 by Marc Handelman in Conferences, Education, Hardware Security, Hardware Flaws, Lock Picking, Locks, Safe Cracking, Puzzles

Tobias, Car Key Data →

October 12, 2015 by Marc Handelman in All is Information, Physical Security, Locks, Lock Picking

Combo Breaker →

May 22, 2015 by Marc Handelman in All is Information, Lock Picking, Locks, Information Security

via TechnoBob's Lambert Varias comes news, of the astounding Arduinio-based automated combination-lock breaker hand-crafted by Samy Kamkar.

"The Combo Breaker can guess all three numbers on its own within a few minutes, but if you manually find the first number that makes the dial get stuck when you pull on the shackle, then Samy’s device can open the Master combination lock within 30 seconds, using a maximum of only eight attempts. To be more precise, Samy’s technique will give you the exact first and third numbers of the combination, plus eight possible second numbers." - via TechnoBob's Lambert Varias

Quiando Lake, China Photo Courtesy of Felix Wong of Fort Collins, Colorado

CyberLock Versus IOActive, Targets Lock Research As DMCA Violation →

May 08, 2015 by Marc Handelman in All is Information, Information Security, Hardware Security, Locks

Reports of threats made by attorneys for CyberLock targeting security researchers at IOActive have appeared at Ars Technica. The piece, written by the inimitable Dan Goodin, details the work accomplished by the researchers. We've seen this form of bad behavior by outed lock manufacturers before, interestingly - most (if not all) to no avail.

The money quote:

'Thursday's advisory from security firm IOActive is notable not only for the serious security issues it reported in the CyberLock line of access control systems, which are certified to meet a wide range of US governmental requirements and certifications. The report is also the topic of a legal threat from CyberLock attorneys who invoked draconian provisions of the Digital Millennium Copyright Act if IOActive disclosed the vulnerabilities. A redacted version of a letter CyberLock outside attorneys sent IOActive researcher Mike Davis has reignited a long-standing tension between whether it should be legally permissible for researchers to publicly disclose unfixed vulnerabilities in the products they test.' - via Dan Goodin at ArsTechnica