Four Types of Lock Ollam

8/12/2019 Four Types of Lock Ollam

1/196

Deviant Ollamhttp: / / deviating.net / lockpicking

The Four Types of Locks

by Deviant OllamEvent Name

XXXX-XX-XX


2/196


Who am i ?


3/196


Who am i ?


4/196


auditing

assessments

research

trainings

Who am i ?


5/196


auditing

assessments

research

trainings

workshops

public lectures

lockpick village

contests & games

Who am i ?


6/196


Who am i ?


7/196


Who am i ?


8/196


Who am i ?


9/196


But on to locks


10/196


But on to locks why do theymatter ?


11/196


12/196



13/196



14/196



15/196


All your hard work here


16/196


All your hard work here getsundermined here


17/196


The Lowest Grade of Lock a.k.a. The Locks That You Are

Probably Using


18/196


Pin Tumbler Locks


19/196


Pin Tumbler Locks


20/196


Pin Tumbler Locks
http://localhost/var/www/apps/conversion/tmp/_media/lifting_picking.avi


21/196



22/196



23/196



24/196



25/196


Pin Stacks


26/196


Key Operation


27/196


Bitting Too Low


28/196


Bitting Too High


29/196


In a Perfect World


30/196


In the Real World


31/196


In the Real World


32/196


In the Real World


33/196



34/196



35/196


Lifting Picking


36/196


Raking


37/196


Wafer Locks


38/196


Wafer Locks

f k


39/196


Wafer Locks

f k


40/196


Wafer Locks

ki & i li


41/196


Raking & Jiggling

Shi i


42/196


Shimming

B i


43/196


Bumping

B i


44/196


Bumping

Pi k G


45/196


Pick Guns


46/196

B K Att k


47/196


Bump Key Attack

Push Method

B K Att k


48/196


Bump Key Attack

Push Method


49/196


Where are you using these weaklocks ?

O td R gg d L k


50/196


Outdoor Rugged Locks

O td R gg d L k


51/196





52/196





53/196




54/196



55/196



Desk Drawers & Filing Cabinets


56/196


Desk Drawers & Filing Cabinets

Power Panels


57/196


Power Panels

Sensitive Wiring


58/196


Sensitive Wiring

Sensitive Wiring


59/196


Sensitive Wiring

Sensitive Wiring


60/196


Sensitive Wiring


61/196


Why are most locks this bad?

Its a Problem of Standards


62/196


American National Standards Institute Classification A156 No Covert Security Ratings At All

American Society for Testing Materials Classification F883 Toughest Rating is only 15 minutes

It s a Problem of Standards

Many Times Picking is


63/196


Many Times, Picking isInstantaneous


64/196

One Step Up


65/196


One Step Up Pick Resistant Locks

Advanced Keyways


66/196


Simple straight and wide

Advanced Keyways


67/196

Advanced Keyways


68/196



Medium straight but narrowComplex thinner and curvy

Advanced Keyways


69/196

Advanced Keyways


70/196



Medium straight but narrowComplex thinner and curvy

Harder lots of angles

Fiendish overlapping wards

Advanced Keyways

Un-Shimmable Padlocks


71/196


Un Shimmable Padlocks

Pick Resistant Pins


72/196


Pick Resistant Pins

Pick Resistant Pins


73/196


Pick Resistant Pins

Pick Resistant Pins


74/196


Pick Resistant Pins

Pick Resistant Pins


75/196


Pick Resistant Pins

Pick Resistant Pins


76/196


Pick Resistant Pins

Bump-Resistant Pins


77/196


Top Gapping

Bu p es sta t s

Bump-Resistant Pins


78/196


Anti-Bump Driver Pin

p

The Next Step Up


79/196


p pHigh Security Locks

Side Pin


80/196


Schlage Everest

check pin

key (bottom) pins

driver (top) pins

pin springs

plug

check pin spring

specialized key

Side Pin


81/196


Schlage Everest

photos courtesy of Matt Blaze

Side Pin


82/196


Schlage Everest

photos courtesy of Matt Blaze

Side Pin


83/196


Schlage Everest

specialized finger tensioner modified Everest key


84/196

Side Bars


85/196


Finger Pins


86/196

Side Bars


87/196


Finger PinsSchlage Primus

Side Bars


88/196


Sliders


89/196

Side Bars


90/196


Rotating Pins

Side Bars


91/196


Rotating Pins

Rotating Pins


92/196


Medeco Locks

Medeco plug exposed, key pins rotating to align sidebar cuts

Top View Side View

Rotating Pins
http://localhost/var/www/apps/conversion/tmp/scratch_4/_media/medeco_side_view.avihttp://localhost/var/www/apps/conversion/tmp/scratch_4/_media/medeco_top_view.avi


93/196


Medeco lockscertainly not unpickable

Can be pickedCan be bumpedNumerous weaknesses

Open in 30 Seconds Marc TobiasTobias Bluzmanis


94/196

Rotating Disks


95/196


Sometimes Very Good SecurityMimics a safe lock

Difficult To PickTakes much time and great skill

Specialized tools requiredTwo-in-One Tool

Manipulates disks individuallyDecodes cut positions

Barry Wels picking a rotating disk lock with Mike Glasser

The Highest Grade
http://localhost/var/www/apps/conversion/_media/rotating_disk.avi


96/196


Dare we say unpickable locks ?

Specialized Rotating Disks


97/196


Abloy ProtecNot just rotating disksDisk blocking mechanism

Unpickable? Closest I ever come to using that wordTwo-in-one tools cannot be used

Certain Magnetic Locks


98/196


MiwaJapanese company

Array of magnetic pinsSimple North / South

Evva MCS Austrian company Axial-rotated magnets

Interaction with sidebar

Evva Magnetic Code System


99/196


Possibly the most duplication-resistant lock

No Known Attack or Bypass


100/196


Protec

MCS

What About Safes ?


101/196


photo courtesy of Don the Shadow

What About Safes ?


102/196


What About Safes ?


103/196


S&G 8400

What About Safes ?


104/196


photo courtesy of Barry Wels

What About Safes ?


105/196


But what about destructive entry ?


106/196


y


107/196



108/196



109/196



110/196



111/196


Theres one upshot you know it


112/196


p yhappened

The scarier risk is non-destructive


113/196


entry


114/196



115/196



116/196


Different locks for different


117/196


purposes

1. Basic Locks


118/196


No specia l pro tect ionsNo byp ass ing res i s t ance

Unskilled Attacker basic tools & techniques, under 5 minutesSkilled Attacker basic tools & techniques, under 5 minutes

2. Resistant Locks


119/196


Some pick-resistant pins (possibly tighter keyway)Bump resistant, Zero potential of shimming or over lifting

Unskilled Attacker basic tools & techniques, more than 5 minutesSkilled Attacker basic tools & techniques, under 5 minutes

3. High Security Locks


120/196


Advanced pick resistance, possibly wholly new mechanismsZero potential of shimming or over lifting or bumping

Unskilled Attacker no chance in less than 30 minutesSkilled Attacker special tools & techniques, at least 5 minutes

4. Unpickable Locks


121/196


Advanced pick resistance, possibly wholly new mechanismsNo potential of shimming or over lifting / Bump resistance

Unskilled Attacker no chance at allSkilled Attacker highly special tools & techniques, at least 30 minutes

(and quite possibly a lot of disturbance created)


122/196



123/196



124/196



125/196



126/196



127/196


128/196



129/196



130/196


Protecting against force or finesse?


131/196


A New Physical SecurityF k


132/196


FrameworkThree Types of Secured Area

External AccessInternal AccessSensitive Access

Which Locks Go Where?


133/196

Cross Contamination withL k


134/196


Locks



135/196


Locks



136/196


Locks



137/196


Locks



138/196


Locks

Cross Contamination withLocks


139/196


Locks

Cross Contamination withLocks


140/196


Locks

A New Physical SecurityFramework


141/196


FrameworkBasic Locks

Utterly unacceptableShould be removed, in my viewFalse sense of securityInevitable cross -contamination

X



142/196


Framework

X

External AccessPersonnel DoorsWiring / UtilitiesSusceptible to Vandals & Thugs

High Security Locks Should Be Required



143/196

Deviant Ollam

http: / / deviating.net / lockpicking

Framework

X

Internal AccessOffice DoorsClosetsProtecting Privacy & Supplies, not Data

Pick Resistant Locks Are Acceptable



144/196

Deviant Ollam


Framework

X

Sensitive AccessServer RacksNetworking Equipment

Any Termination-Worthy Data

Unpickable Locks Should Be Used


145/196

Security is only as effective


146/196

Deviant Ollam


as the people behind it

Social Engineering


147/196

Deviant Ollam


Social Engineering


148/196

Deviant Ollam


Social Engineering


149/196

Deviant Ollam


Social Engineering Preparedness


150/196

Deviant Ollam


Stop



151/196

Deviant Ollam


Stop Challenge



152/196

Deviant Ollam


Stop Challenge

Authenticate



153/196

Deviant Ollam


Stop Challenge

Authenticate



154/196

Deviant Ollam


Stop Challenge

Authenticate

then you follow this withReward

Social Engineering


155/196

Deviant Ollam


Social Engineering


156/196

Deviant Ollam


Forensic Evidence


157/196

Deviant Ollam


Forensic Evidence


158/196

Deviant Ollam



159/196

Forensic Evidence


160/196

Deviant Ollam


Forensic Evidence 250 uses


161/196

Deviant Ollam


Forensic Evidence 1,500 uses


162/196

Deviant Ollam



163/196

Forensic Evidence 250 uses


164/196

Deviant Ollam



165/196


166/196

Forensic Evidence


167/196

Deviant Ollam

http: // deviating.net / lockpicking

Forensic Evidence


168/196

Deviant Ollam



169/196

Forensic Evidence


170/196

Deviant Ollam



171/196

Forensic Evidence picking


172/196

Deviant Ollam


Forensic Evidence raking


173/196

Deviant Ollam

http: // deviating net / lockpicking

Forensic Evidence both


174/196

Deviant Ollam


Forensic Evidence ugh


175/196

Deviant Ollam


Forensic Evidence wow


176/196

Deviant Ollam


Forensic Evidence


177/196

Deviant Ollam



178/196

Forensic Evidence


179/196

Deviant Ollam

http: //

deviating net /

lockpicking


180/196

Forensic Evidence tail cam


181/196

Deviant Ollam

http: //

deviating net /

lockpicking

Forensic Evidence


182/196

Deviant Ollam

http: //

deviating net

/

lockpicking

Forensic Evidence


183/196

Deviant Ollam

http: //

deviating net

/

lockpicking

Forensic Evidence


184/196

Deviant Ollam

http: //

deviating net

/

lockpicking

Forensic Evidence


185/196

Deviant Ollam

http: //

deviating net

/

lockpicking

Forensic Evidence


186/196

Deviant Ollam

http: //

deviating net

/

lockpicking

Forensic Evidence


187/196

Deviant Ollam

http: //

deviating net

/

lockpicking

Forensic Evidence bumping


188/196

Deviant Ollam

http: //

deviating net

/

lockpicking

Forensic Evidence bumping


189/196


Forensic Evidence


190/196



191/196

Forensic Evidence


192/196


Sometimes major insurance implications

Forensic Evidence


193/196


Sometimes major insurance implications

Suspect something fishy?Dont compromise the scene Contact a professionalForensic Locksmith vs. Yellow-Pages Locksmith

Having newer locks matters Age makes for a mess, internally Also your locks should be updated as a matter of routine

The facts are out there!


194/196


195/196

Unpickable Protec (rotating disks)

So Which Locks are Which ?


196/196

MCS (magnetic)MT5 and MT5+

(electronic safe dials)

High SecurityGranit & Diskus (rotating disk)

Twin (counter-milling, finger pins)3KS (sliders), DPI (new models)

Primus (if upgraded properly)

ResistantPadlocks (heavy duty models)

Documents

Four Types of Lock Ollam