View
214
Download
2
Category
Preview:
Citation preview
Deviant Ollam
http:// deviating.net / lockpicking
Ten Things You Should Know About Lockpicking
by Deviant Ollam
Event Name
XXXX-XX-XX ^
Deviant Ollam
http:// deviating.net / lockpicking
Who am i ?
Deviant Ollam
http:// deviating.net / lockpicking
Who am i ?
Deviant Ollam
http:// deviating.net / lockpicking
auditing
assessments
research
trainings
Who am i ?
Deviant Ollam
http:// deviating.net / lockpicking
auditing
assessments
research
trainings
workshops
public lectures
lockpick village
contests & games
Who am i ?
Deviant Ollam
http:// deviating.net / lockpicking
Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals
Deviant Ollam
http:// deviating.net / lockpicking
Deviant Ollam
http:// deviating.net / lockpicking
Deviant Ollam
http:// deviating.net / lockpicking
Deviant Ollam
http:// deviating.net / lockpicking
Deviant Ollam
http:// deviating.net / lockpicking
All your hard work here…
Deviant Ollam
http:// deviating.net / lockpicking
All your hard work here… gets undermined here
Deviant Ollam
http:// deviating.net / lockpicking
Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals
2. Pin tumblers are universal
Deviant Ollam
http:// deviating.net / lockpicking
Pin Tumbler Locks
Deviant Ollam
http:// deviating.net / lockpicking
Pin Tumbler Locks
Deviant Ollam
http:// deviating.net / lockpicking
The View From Outside
Deviant Ollam
http:// deviating.net / lockpicking
What’s On The Inside
Deviant Ollam
http:// deviating.net / lockpicking
What’s On The Inside
Deviant Ollam
http:// deviating.net / lockpicking
What’s On The Inside
Deviant Ollam
http:// deviating.net / lockpicking
It’s Not Just a Single Pin Stack
Deviant Ollam
http:// deviating.net / lockpicking
It’s Not Just a Single Pin Stack
Deviant Ollam
http:// deviating.net / lockpicking
The Key Has To Be Just Right
Deviant Ollam
http:// deviating.net / lockpicking
The Key Has To Be Just Right
Deviant Ollam
http:// deviating.net / lockpicking
Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals
2. Pin tumblers are universal
3. Picking is simple and fun
Deviant Ollam
http:// deviating.net / lockpicking
In An Ideal World …
Deviant Ollam
http:// deviating.net / lockpicking
In The Real World …
Deviant Ollam
http:// deviating.net / lockpicking
In The Real World …
Deviant Ollam
http:// deviating.net / lockpicking
In The Real World …
Deviant Ollam
http:// deviating.net / lockpicking
Setting a Pin
Deviant Ollam
http:// deviating.net / lockpicking
Setting a Pin
Deviant Ollam
http:// deviating.net / lockpicking
Setting the Pins
Deviant Ollam
http:// deviating.net / lockpicking
Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals
2. Pin tumblers are universal
3. Picking is simple and fun
4. Pins are pins, in any arrangement
Deviant Ollam
http:// deviating.net / lockpicking
Other Ways of Arranging the Pins
Deviant Ollam
http:// deviating.net / lockpicking
Other Ways of Attacking the Pins
Deviant Ollam
http:// deviating.net / lockpicking
A Fun Tubular Lock Story
Deviant Ollam
http:// deviating.net / lockpicking
A Fun Tubular Lock Story
Deviant Ollam
http:// deviating.net / lockpicking
A Fun Tubular Lock Story
Deviant Ollam
http:// deviating.net / lockpicking
A Fun Tubular Lock Story
Deviant Ollam
http:// deviating.net / lockpicking
Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals
2. Pin tumblers are universal
3. Picking is simple and fun
4. Pins are pins, in any arrangement
5. Other everyday designs are often weak, too
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Locks
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Locks
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Locks
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Locks
Deviant Ollam
http:// deviating.net / lockpicking
Raking & Jiggling
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Wafer Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Warded Locks
Deviant Ollam
http:// deviating.net / lockpicking
Warded Locks
Deviant Ollam
http:// deviating.net / lockpicking
Warded Locks
Deviant Ollam
http:// deviating.net / lockpicking
Warded Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Warded Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Warded Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Warded Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Warded Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Warded Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Warded Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Warded Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Warded Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Warded Lock Usage
Deviant Ollam
http:// deviating.net / lockpicking
Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals
2. Pin tumblers are universal
3. Picking is simple and fun
4. Pins are pins, in any arrangement
5. Other everyday designs are often weak, too
6. You can open locks with beer and beatings
Deviant Ollam
http:// deviating.net / lockpicking
Popular Padlocks
Deviant Ollam
http:// deviating.net / lockpicking
Terrible Padlocks
Deviant Ollam
http:// deviating.net / lockpicking
Padlock Shims
Deviant Ollam
http:// deviating.net / lockpicking
Padlock Shims… From a Catalog
Deviant Ollam
http:// deviating.net / lockpicking
Padlock Shims… From a Beer Can
Deviant Ollam
http:// deviating.net / lockpicking
Padlock Shims
Deviant Ollam
http:// deviating.net / lockpicking
Padlock Shims
Deviant Ollam
http:// deviating.net / lockpicking
Padlock Shims
Deviant Ollam
http:// deviating.net / lockpicking
Padlock Shims
Deviant Ollam
http:// deviating.net / lockpicking
Padlock Shims
Deviant Ollam
http:// deviating.net / lockpicking
Padlock Shims
Deviant Ollam
http:// deviating.net / lockpicking
Double Ball Mechanism
Padlock Shim Prevention
Deviant Ollam
http:// deviating.net / lockpicking
Which Padlocks are Protected ?
Padlock Shim Prevention
Deviant Ollam
http:// deviating.net / lockpicking
Padlock Shim Prevention
Deviant Ollam
http:// deviating.net / lockpicking
Padlock Shim Prevention
Deviant Ollam
http:// deviating.net / lockpicking
Bumping
Deviant Ollam
http:// deviating.net / lockpicking
Bumping
Deviant Ollam
http:// deviating.net / lockpicking
Bumping
Deviant Ollam
http:// deviating.net / lockpicking
Bumping
Deviant Ollam
http:// deviating.net / lockpicking
Bumping
Deviant Ollam
http:// deviating.net / lockpicking
Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals
2. Pin tumblers are universal
3. Picking is simple and fun
4. Pins are pins, in any arrangement
5. Other everyday designs are often weak, too
6. You can open locks with beer and beatings
7. Many locks are pick resistant
Deviant Ollam
http:// deviating.net / lockpicking
Pick-Resistant Keyways
Deviant Ollam
http:// deviating.net / lockpicking
Pick-Resistant Keyways
Deviant Ollam
http:// deviating.net / lockpicking
Pick-Resistant Keyways
Deviant Ollam
http:// deviating.net / lockpicking
Pick-Resistant Keyways
Deviant Ollam
http:// deviating.net / lockpicking
Pick-Resistant Keyways
Deviant Ollam
http:// deviating.net / lockpicking
Pick-Resistant Pins
Deviant Ollam
http:// deviating.net / lockpicking
Pick-Resistant Pins
Deviant Ollam
http:// deviating.net / lockpicking
Pick-Resistant Pins
Deviant Ollam
http:// deviating.net / lockpicking
Pick-Resistant Pins
Deviant Ollam
http:// deviating.net / lockpicking
Pick-Resistant Pins
Deviant Ollam
http:// deviating.net / lockpicking
Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals
2. Pin tumblers are universal
3. Picking is simple and fun
4. Pins are pins, in any arrangement
5. Other everyday designs are often weak, too
6. You can open locks with beer and beatings
7. Many locks are pick resistant
8. Some locks are wickedly secure
Deviant Ollam
http:// deviating.net / lockpicking
Similar to side pins
Restrict plug movement
Harder to pick
than pin stacks
Side Bars
Deviant Ollam
http:// deviating.net / lockpicking
Finger Pins
Side Bars
Deviant Ollam
http:// deviating.net / lockpicking
Finger Pins
Side Bars
Deviant Ollam
http:// deviating.net / lockpicking
Finger Pins
Schlage Primus
Side Bars
Deviant Ollam
http:// deviating.net / lockpicking
Sliders
Side Bars
Deviant Ollam
http:// deviating.net / lockpicking
Sliders
Side Bars
Deviant Ollam
http:// deviating.net / lockpicking
Rotating Pins
Side Bars
Deviant Ollam
http:// deviating.net / lockpicking
Rotating Pins
Side Bars
Deviant Ollam
http:// deviating.net / lockpicking
Medeco Locks
Medeco plug exposed, key pins rotating to align sidebar cuts
Top View Side View
Rotating Pins
Deviant Ollam
http:// deviating.net / lockpicking
Medeco Locks Totally shot now
Can be picked
Can be bumped
Numerous weaknesses
“Open in 30 Seconds”
Marc Tobias
Tobias Bluzmanis
Rotating Pins
Deviant Ollam
http:// deviating.net / lockpicking
Tremendous Security
Mimics a safe lock
Very Difficult To Pick
Takes much time and great skill
Specialized tools required
Rotating Disks
Deviant Ollam
http:// deviating.net / lockpicking
Tremendous Security
Mimics a safe lock
Very Difficult To Pick
Takes much time and great skill
Specialized tools required
Two-in-One Tool
Manipulates disks individually
Decodes cut positions
Barry Wels picking a rotating disk lock with Mike Glasser
Rotating Disks
Deviant Ollam
http:// deviating.net / lockpicking
Abloy Protec
Not just rotating disks
Disk blocking mechanism
False cuts everywhere
“Unpickable?”
Closest I ever come to using that word
Two-in-one tools cannot be used
Specialized Rotating Disks
Deviant Ollam
http:// deviating.net / lockpicking
Miwa
Japanese company
Array of magnetic pins
Simple North / South
Evva MCS
Austrian company
Axial-rotated magnets
Interaction with sidebar
Magnetic Locks
Deviant Ollam
http:// deviating.net / lockpicking
Miwa Magnetic Locks
Deviant Ollam
http:// deviating.net / lockpicking
Miwa Magnetic Locks
Deviant Ollam
http:// deviating.net / lockpicking
Miwa Magnetic Locks
Deviant Ollam
http:// deviating.net / lockpicking
Possibly most duplication-resistant lock out there
Evva Magnetic Code System
Deviant Ollam
http:// deviating.net / lockpicking
Mul-T-Lock
Deviant Ollam
http:// deviating.net / lockpicking
Mul-T-Lock
Deviant Ollam
http:// deviating.net / lockpicking
Mul-T-Lock
Deviant Ollam
http:// deviating.net / lockpicking
Protec
MCS
No Known Attack or Bypass
Deviant Ollam
http:// deviating.net / lockpicking
Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals
2. Pin tumblers are universal
3. Picking is simple and fun
4. Pins are pins, in any arrangement
5. Other everyday designs are often weak, too
6. You can open locks with beer and beatings
7. Many locks are pick resistant
8. Some locks are wickedly secure
9. It comes down to your attackers and defenders
Deviant Ollam
http:// deviating.net / lockpicking
Deviant Ollam
http:// deviating.net / lockpicking
Deviant Ollam
http:// deviating.net / lockpicking
Deviant Ollam
http:// deviating.net / lockpicking
Deviant Ollam
http:// deviating.net / lockpicking
Deviant Ollam
http:// deviating.net / lockpicking
Deviant Ollam
http:// deviating.net / lockpicking
Most Attacks are Brute Force
Deviant Ollam
http:// deviating.net / lockpicking
Social Engineering
Deviant Ollam
http:// deviating.net / lockpicking
Social Engineering
Deviant Ollam
http:// deviating.net / lockpicking
Social Engineering
Deviant Ollam
http:// deviating.net / lockpicking
Social Engineering Preparedness
Stop
Deviant Ollam
http:// deviating.net / lockpicking
Social Engineering Preparedness
Stop Challenge
Deviant Ollam
http:// deviating.net / lockpicking
Social Engineering Preparedness
Stop Challenge Authenticate
Deviant Ollam
http:// deviating.net / lockpicking
Social Engineering Preparedness
Stop Challenge Authenticate
Deviant Ollam
http:// deviating.net / lockpicking
Social Engineering Preparedness
Stop Challenge Authenticate
… then you follow this with “Reward”
Deviant Ollam
http:// deviating.net / lockpicking
Social Engineering
Deviant Ollam
http:// deviating.net / lockpicking
Social Engineering
Deviant Ollam
http:// deviating.net / lockpicking
Things You Should Know about Lockpicking… 1. Why locks matter to IT professionals
2. Pin tumblers are universal
3. Picking is simple and fun
4. Pins are pins, in any arrangement
5. Other everyday designs are often weak, too
6. You can open locks with beer and beatings
7. Many locks are pick resistant
8. Some locks are wickedly secure
9. It comes down to your attackers and defenders
10. The truth is out there… or, rather, in there
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence – 250 uses
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence – 1,500 uses
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence – 5,000 uses
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence – 250 uses
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence – 1,500 uses
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence – 5,000 uses
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence – picking
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence – raking
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence – both
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence – ugh
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence – wow
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence – bumping
Deviant Ollam
http:// deviating.net / lockpicking
Forensic Evidence – bumping
Deviant Ollam
http:// deviating.net / lockpicking
Security is only as effective
… as the people behind it
Deviant Ollam
http:// deviating.net / lockpicking
Thank you very much.
Special thanks to TOOOL, Babak, and Daisy
this presentation is CopyLeft by Deviant Ollam. you are free to reuse any or all of this material as long as it is attributed and freedom for other s to do the same is maintained
http://deviating.net http://enterthecore.net http://toool.us
Recommended