ten things you should know about lockpicking locks... · things you should know about...

Deviant Ollam

http:// deviating.net / lockpicking

Ten Things You Should Know About Lockpicking

by Deviant Ollam

Event Name

XXXX-XX-XX ^

Deviant Ollam

http:// deviating.net / lockpicking

Who am i ?

Deviant Ollam

http:// deviating.net / lockpicking

Who am i ?

Deviant Ollam

http:// deviating.net / lockpicking

auditing

assessments

research

trainings

Who am i ?

Deviant Ollam

http:// deviating.net / lockpicking

auditing

assessments

research

trainings

workshops

public lectures

lockpick village

contests & games

Who am i ?

Deviant Ollam

http:// deviating.net / lockpicking

Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals

Deviant Ollam

http:// deviating.net / lockpicking

Deviant Ollam

http:// deviating.net / lockpicking

Deviant Ollam

http:// deviating.net / lockpicking

Deviant Ollam

http:// deviating.net / lockpicking

Deviant Ollam

http:// deviating.net / lockpicking

All your hard work here…

Deviant Ollam

http:// deviating.net / lockpicking

All your hard work here… gets undermined here

Deviant Ollam

http:// deviating.net / lockpicking

Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals

2. Pin tumblers are universal

Deviant Ollam

http:// deviating.net / lockpicking

Pin Tumbler Locks

Deviant Ollam

http:// deviating.net / lockpicking

Pin Tumbler Locks

Deviant Ollam

http:// deviating.net / lockpicking

Pin Tumbler Locks

Deviant Ollam

http:// deviating.net / lockpicking

The View From Outside

Deviant Ollam

http:// deviating.net / lockpicking

What’s On The Inside

Deviant Ollam

http:// deviating.net / lockpicking

What’s On The Inside

Deviant Ollam

http:// deviating.net / lockpicking

What’s On The Inside

Deviant Ollam

http:// deviating.net / lockpicking

It’s Not Just a Single Pin Stack

Deviant Ollam

http:// deviating.net / lockpicking

It’s Not Just a Single Pin Stack

Deviant Ollam

http:// deviating.net / lockpicking

The Key Has To Be Just Right

Deviant Ollam

http:// deviating.net / lockpicking

The Key Has To Be Just Right

Deviant Ollam

http:// deviating.net / lockpicking

Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals

2. Pin tumblers are universal

3. Picking is simple and fun

Deviant Ollam

http:// deviating.net / lockpicking

In An Ideal World …

Deviant Ollam

http:// deviating.net / lockpicking

In The Real World …

Deviant Ollam

http:// deviating.net / lockpicking

In The Real World …

Deviant Ollam

http:// deviating.net / lockpicking

In The Real World …

Deviant Ollam

http:// deviating.net / lockpicking

Setting a Pin

Deviant Ollam

http:// deviating.net / lockpicking

Setting a Pin

Deviant Ollam

http:// deviating.net / lockpicking

Setting the Pins

Deviant Ollam

http:// deviating.net / lockpicking

Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals

2. Pin tumblers are universal

3. Picking is simple and fun

4. Pins are pins, in any arrangement

Deviant Ollam

http:// deviating.net / lockpicking

Other Ways of Arranging the Pins

Deviant Ollam

http:// deviating.net / lockpicking

Other Ways of Attacking the Pins

Deviant Ollam

http:// deviating.net / lockpicking

A Fun Tubular Lock Story

Deviant Ollam

http:// deviating.net / lockpicking

A Fun Tubular Lock Story

Deviant Ollam

http:// deviating.net / lockpicking

A Fun Tubular Lock Story

Deviant Ollam

http:// deviating.net / lockpicking

A Fun Tubular Lock Story

Deviant Ollam

http:// deviating.net / lockpicking

Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals

2. Pin tumblers are universal

3. Picking is simple and fun

4. Pins are pins, in any arrangement

5. Other everyday designs are often weak, too

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Locks

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Locks

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Locks

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Locks

Deviant Ollam

http:// deviating.net / lockpicking

Raking & Jiggling

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Wafer Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Warded Locks

Deviant Ollam

http:// deviating.net / lockpicking

Warded Locks

Deviant Ollam

http:// deviating.net / lockpicking

Warded Locks

Deviant Ollam

http:// deviating.net / lockpicking

Warded Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Warded Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Warded Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Warded Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Warded Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Warded Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Warded Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Warded Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Warded Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Warded Lock Usage

Deviant Ollam

http:// deviating.net / lockpicking

Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals

2. Pin tumblers are universal

3. Picking is simple and fun

4. Pins are pins, in any arrangement

5. Other everyday designs are often weak, too

6. You can open locks with beer and beatings

Deviant Ollam

http:// deviating.net / lockpicking

Popular Padlocks

Deviant Ollam

http:// deviating.net / lockpicking

Terrible Padlocks

Deviant Ollam

http:// deviating.net / lockpicking

Padlock Shims

Deviant Ollam

http:// deviating.net / lockpicking

Padlock Shims… From a Catalog

Deviant Ollam

http:// deviating.net / lockpicking

Padlock Shims… From a Beer Can

Deviant Ollam

http:// deviating.net / lockpicking

Padlock Shims

Deviant Ollam

http:// deviating.net / lockpicking

Padlock Shims

Deviant Ollam

http:// deviating.net / lockpicking

Padlock Shims

Deviant Ollam

http:// deviating.net / lockpicking

Padlock Shims

Deviant Ollam

http:// deviating.net / lockpicking

Padlock Shims

Deviant Ollam

http:// deviating.net / lockpicking

Padlock Shims

Deviant Ollam

http:// deviating.net / lockpicking

Double Ball Mechanism

Padlock Shim Prevention

Deviant Ollam

http:// deviating.net / lockpicking

Which Padlocks are Protected ?

Padlock Shim Prevention

Deviant Ollam

http:// deviating.net / lockpicking

Padlock Shim Prevention

Deviant Ollam

http:// deviating.net / lockpicking

Padlock Shim Prevention

Deviant Ollam

http:// deviating.net / lockpicking

Bumping

Deviant Ollam

http:// deviating.net / lockpicking

Bumping

Deviant Ollam

http:// deviating.net / lockpicking

Bumping

Deviant Ollam

http:// deviating.net / lockpicking

Bumping

Deviant Ollam

http:// deviating.net / lockpicking

Bumping

Deviant Ollam

http:// deviating.net / lockpicking

Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals

2. Pin tumblers are universal

3. Picking is simple and fun

4. Pins are pins, in any arrangement

5. Other everyday designs are often weak, too

6. You can open locks with beer and beatings

7. Many locks are pick resistant

Deviant Ollam

http:// deviating.net / lockpicking

Pick-Resistant Keyways

Deviant Ollam

http:// deviating.net / lockpicking

Pick-Resistant Keyways

Deviant Ollam

http:// deviating.net / lockpicking

Pick-Resistant Keyways

Deviant Ollam

http:// deviating.net / lockpicking

Pick-Resistant Keyways

Deviant Ollam

http:// deviating.net / lockpicking

Pick-Resistant Keyways

Deviant Ollam

http:// deviating.net / lockpicking

Pick-Resistant Pins

Deviant Ollam

http:// deviating.net / lockpicking

Pick-Resistant Pins

Deviant Ollam

http:// deviating.net / lockpicking

Pick-Resistant Pins

Deviant Ollam

http:// deviating.net / lockpicking

Pick-Resistant Pins

Deviant Ollam

http:// deviating.net / lockpicking

Pick-Resistant Pins

Deviant Ollam

http:// deviating.net / lockpicking

Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals

2. Pin tumblers are universal

3. Picking is simple and fun

4. Pins are pins, in any arrangement

5. Other everyday designs are often weak, too

6. You can open locks with beer and beatings

7. Many locks are pick resistant

8. Some locks are wickedly secure

Deviant Ollam

http:// deviating.net / lockpicking

Similar to side pins

Restrict plug movement

Harder to pick

than pin stacks

Side Bars

Deviant Ollam

http:// deviating.net / lockpicking

Finger Pins

Side Bars

Deviant Ollam

http:// deviating.net / lockpicking

Finger Pins

Side Bars

Deviant Ollam

http:// deviating.net / lockpicking

Finger Pins

Schlage Primus

Side Bars

Deviant Ollam

http:// deviating.net / lockpicking

Sliders

Side Bars

Deviant Ollam

http:// deviating.net / lockpicking

Sliders

Side Bars

Deviant Ollam

http:// deviating.net / lockpicking

Rotating Pins

Side Bars

Deviant Ollam

http:// deviating.net / lockpicking

Rotating Pins

Side Bars

Deviant Ollam

http:// deviating.net / lockpicking

Medeco Locks

Medeco plug exposed, key pins rotating to align sidebar cuts

Top View Side View

Rotating Pins

Deviant Ollam

http:// deviating.net / lockpicking

Medeco Locks Totally shot now

Can be picked

Can be bumped

Numerous weaknesses

“Open in 30 Seconds”

Marc Tobias

Tobias Bluzmanis

Rotating Pins

Deviant Ollam

http:// deviating.net / lockpicking

Tremendous Security

Mimics a safe lock

Very Difficult To Pick

Takes much time and great skill

Specialized tools required

Rotating Disks

Deviant Ollam

http:// deviating.net / lockpicking

Tremendous Security

Mimics a safe lock

Very Difficult To Pick

Takes much time and great skill

Specialized tools required

Two-in-One Tool

Manipulates disks individually

Decodes cut positions

Barry Wels picking a rotating disk lock with Mike Glasser

Rotating Disks

Deviant Ollam

http:// deviating.net / lockpicking

Abloy Protec

Not just rotating disks

Disk blocking mechanism

False cuts everywhere

“Unpickable?”

Closest I ever come to using that word

Two-in-one tools cannot be used

Specialized Rotating Disks

Deviant Ollam

http:// deviating.net / lockpicking

Miwa

Japanese company

Array of magnetic pins

Simple North / South

Evva MCS

Austrian company

Axial-rotated magnets

Interaction with sidebar

Magnetic Locks

Deviant Ollam

http:// deviating.net / lockpicking

Miwa Magnetic Locks

Deviant Ollam

http:// deviating.net / lockpicking

Miwa Magnetic Locks

Deviant Ollam

http:// deviating.net / lockpicking

Miwa Magnetic Locks

Deviant Ollam

http:// deviating.net / lockpicking

Possibly most duplication-resistant lock out there

Evva Magnetic Code System

Deviant Ollam

http:// deviating.net / lockpicking

Mul-T-Lock

Deviant Ollam

http:// deviating.net / lockpicking

Mul-T-Lock

Deviant Ollam

http:// deviating.net / lockpicking

Mul-T-Lock

Deviant Ollam

http:// deviating.net / lockpicking

Protec

MCS

No Known Attack or Bypass

Deviant Ollam

http:// deviating.net / lockpicking

Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals

2. Pin tumblers are universal

3. Picking is simple and fun

4. Pins are pins, in any arrangement

5. Other everyday designs are often weak, too

6. You can open locks with beer and beatings

7. Many locks are pick resistant

8. Some locks are wickedly secure

9. It comes down to your attackers and defenders

Deviant Ollam

http:// deviating.net / lockpicking

Deviant Ollam

http:// deviating.net / lockpicking

Deviant Ollam

http:// deviating.net / lockpicking

Deviant Ollam

http:// deviating.net / lockpicking

Deviant Ollam

http:// deviating.net / lockpicking

Deviant Ollam

http:// deviating.net / lockpicking

Deviant Ollam

http:// deviating.net / lockpicking

Most Attacks are Brute Force

Deviant Ollam

http:// deviating.net / lockpicking

Social Engineering

Deviant Ollam

http:// deviating.net / lockpicking

Social Engineering

Deviant Ollam

http:// deviating.net / lockpicking

Social Engineering

Deviant Ollam

http:// deviating.net / lockpicking

Social Engineering Preparedness

Stop

Deviant Ollam

http:// deviating.net / lockpicking

Social Engineering Preparedness

Stop Challenge

Deviant Ollam

http:// deviating.net / lockpicking

Social Engineering Preparedness

Stop Challenge Authenticate

Deviant Ollam

http:// deviating.net / lockpicking

Social Engineering Preparedness

Stop Challenge Authenticate

Deviant Ollam

http:// deviating.net / lockpicking

Social Engineering Preparedness

Stop Challenge Authenticate

… then you follow this with “Reward”

Deviant Ollam

http:// deviating.net / lockpicking

Social Engineering

Deviant Ollam

http:// deviating.net / lockpicking

Social Engineering

Deviant Ollam

http:// deviating.net / lockpicking

Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals

2. Pin tumblers are universal

3. Picking is simple and fun

4. Pins are pins, in any arrangement

5. Other everyday designs are often weak, too

6. You can open locks with beer and beatings

7. Many locks are pick resistant

8. Some locks are wickedly secure

9. It comes down to your attackers and defenders

10. The truth is out there… or, rather, in there

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence – 250 uses

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence – 1,500 uses

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence – 5,000 uses

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence – 250 uses

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence – 1,500 uses

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence – 5,000 uses

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence – picking

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence – raking

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence – both

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence – ugh

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence – wow

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence – bumping

Deviant Ollam

http:// deviating.net / lockpicking

Forensic Evidence – bumping

Deviant Ollam

http:// deviating.net / lockpicking

Security is only as effective

… as the people behind it

Deviant Ollam

http:// deviating.net / lockpicking

Thank you very much.

Special thanks to TOOOL, Babak, and Daisy

this presentation is CopyLeft by Deviant Ollam. you are free to reuse any or all of this material as long as it is attributed and freedom for other s to do the same is maintained

http://deviating.net http://enterthecore.net http://toool.us