how to make friends and influence lock manufacturers · disc-detainer type mechanism looks like an...
TRANSCRIPT
![Page 1: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/1.jpg)
How To Make Friends How To Make Friends & &
Influence Lock ManufacturersInfluence Lock Manufacturers
Schuyler Towne & Jon King Schuyler Towne & Jon King DEFCON 16, 2008DEFCON 16, 2008
Reviewing this on the DEFCON 16 DVD? Be sure to check ndemag.com/DC16 for updates.Much of the material covered in this talk is on-going. This document has been prepared more than a month prior to publication. Any omissions or inaccuracies in this version will have to be
forgiven. Please consult the current version for accurate information. Thank you.
![Page 2: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/2.jpg)
07/06/08 2
LOCK-AND-KEY:LOCK-AND-KEY:n. The distinguishing device of n. The distinguishing device of civilization and enlightenment.civilization and enlightenment.
– – Ambrose BierceAmbrose Bierce
![Page 3: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/3.jpg)
6/30/08 3
Let's Talk
RoboKey System: Developed with the locksport community
Kwikset / Weiser's SmartkeyResponded to bumping with complete redesign
ABUS PlusFixed flaw found by lockpicker & issued new challenge
MedecoWorked with Jon King to mutually release exploit
Q&A / Super-secret announcement
![Page 4: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/4.jpg)
07/06/08 4
The RoboKey System
John Laughlin with Barry Wels of TOOOL
“It's easy to love your own baby, but we wanted to get this out to the community. We figured they wouldn't be shy about telling us what was wrong with it.”
–John Laughlin, Stanton Concepts
“It's easy to love your own baby, but we wanted to get this out to the community. We figured they wouldn't be shy about telling us what was wrong with it.”
–John Laughlin, Stanton Concepts
![Page 5: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/5.jpg)
07/06/08 5
Background
John & Bob LaughlinJohn was a communications engineerBob was a retired lock engineerWhen telcom bust John started working with his father
InspirationBoth have a healthy interest in securityWorld more interested in security than ever beforeOpportunity to address a lot of areas that hadn't received the scrutiny they were dueHow can we secure containers that have to change hands multiple times / survive tough environments
![Page 6: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/6.jpg)
07/06/08 6
Basic Operation
Disc-Detainer type mechanismLooks like an Abloy style cylinderHas flies like a combo lockExtremely rugged for environmental conditions
Automatic dialerOperator does not need to know combo, just has to be a valid userVarious potential forms of authentication – password, RFID, embedded dialer in cell phone, matched pair, etc.
Manual dialerPhysical lock can still be operated manually
![Page 7: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/7.jpg)
07/06/08 7
Community Scrutiny
First IntroductionsBob Laughlin met Han Fey via eBay/both avid collectorsMet in Holland in early 2006 to see RKSHan invited John to the Dutch Open
Dutch Open“The people were very generous with their knowledge”Panel on viable attacks & applications
ALOAAttended ALOA with Han & BarryShowcased RKS & other productsArticle in Locksmith Ledger as a result
![Page 8: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/8.jpg)
07/06/08 8
Open Source Future
Open source developer kitsLooking to license their productWanted to get the ball rolling while seeking a dealOpen source software and microcontrollerAdd whatever functionality you wantAiming to get total package, lock & dialer kit for ~$300
Would love to hear from youJohn has always kept in touch with folks in the locksport communityAnswering questions and fielding commentary about the NDE article at lockpickology.com
![Page 9: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/9.jpg)
07/06/08 9
Smartkey
Photo courtesy Mike Brewerton
“At least one lock maker says the hobbyists can help companies...”
–Wall Street Journal
“At least one lock maker says the hobbyists can help companies...”
–Wall Street Journal
![Page 10: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/10.jpg)
07/06/08 10
Bump In The Night
How blind were we?Walt Strader told the WSJ he heard of bumping via locksport groupsTold them this in 2006
Smartkey is launchedLock is 100% bump proofRekeyable (NOT U-Change)Subdued marketing campaign – no initial mention of bumpingRigorous testing process
![Page 11: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/11.jpg)
07/06/08 11
How Does It Work?
Breakdowns courtesy Zeke
![Page 12: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/12.jpg)
07/06/08 12
Testing
2006 Dutch OpenPrototype from an unnamed companyArthurmeister!Definite challenge
JapanDifferent culture of entryInteresting methods of testingPassed the 15 minute attacks with flying colors
![Page 13: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/13.jpg)
07/06/08 13
Smartkey 2
The new generationUpdated materials for destructive entry (DE) concernsSimilarly subdued roll-out to first generationOut now!
What does the future hold?Black and Decker employees now keep an active eye on the locksport communityLed to current advances & additional free feedbackExcited for future collaboration
![Page 14: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/14.jpg)
07/06/08 14
ABUS Plus System
Photo & Quote by Jaakko Fagerlund
“I suppose that nobody thought you could actually “look” behind the discs...”
![Page 15: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/15.jpg)
07/06/08 15
The Exploit
BackgroundZeke's ContestEveryone missed the flaw – forest for the treesCreated proof of concept
How it works:
Photos Courtesy Jaakko Fagerlund
![Page 16: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/16.jpg)
07/06/08 16
Simplification
The goalBuild the simplest version of Jaakko's tool possibleBuild the least expensive version possible
The toolAt the advice of a fellow lockpicker we used the filed down head of a nailMany impressioning mediums were tried before we settled on white glue
![Page 17: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/17.jpg)
07/06/08 17
Alerting ABUS
First ContactArranged by an LP101 member “mh”Initial response was polite, but non-commitalProof is in the pudding - Jaakko's PDF got attention
The ResponseA brief silenceUpdated all current productionChallenged Jaakko to defeat the new mixed cylinderJaakko could only get the keys to the lock if he uncovered the bitting
![Page 18: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/18.jpg)
07/06/08 18
Current Events
Jaakko's ABUS Plus PickA brief silenceCommunity fundedSuccessfully picked the challenge lock!
![Page 19: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/19.jpg)
07/06/08 19
Medecoder
Photo & Quote by Jaakko Fagerlund
“I suppose that nobody thought you could actually "look" behind the discs...”
“Who is Jon King and what is he doing with our locks?”
–Peter Field, Medeco
![Page 20: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/20.jpg)
07/06/08 20
Who is this guy?
Jon KingJK_the_CJer, JK, etc.NavyLocksport HobbiestSecurity Geek
I am NOTSpeaking on behalf of the NavySpeaking on behalf of Medeco
![Page 21: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/21.jpg)
07/06/08 21
My Obsession
Why Medeco?Holy Grail of pin tumblersPins must lift and rotateLots of attempts by the community
OK – Show me...in one picture
![Page 22: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/22.jpg)
07/06/08 22
The Problems
Open Grooves
OMG Wire!
Even Spacing
![Page 23: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/23.jpg)
07/06/08 23
Humble Beginnings
Early tool designs aimed at rotating all of the pins at once
“I suppose that nobody thought you could actually "look" behind the discs...”
![Page 24: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/24.jpg)
07/06/08 24
Let's Simplify
Maybe I'll try hooking into one pin first
![Page 25: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/25.jpg)
07/06/08 25
The Early Tools
+=
![Page 26: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/26.jpg)
07/06/08 26
Purdy
![Page 27: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/27.jpg)
07/06/08 27
The Community
Lockpicking101.comSchuyler TowneDoug FarreMitch CapperEveryone else...
Public release & NDEWanted to publicly release via NDE Magazine“Let's get a manufacturer reaction”
![Page 28: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/28.jpg)
07/06/08 28
Quite A Reaction
Peter FieldHead of R&D at Medeco drove to my houseLock talk, history, other exploits, etc.
Closed GroovesMedeco reimplements the ARX closed groove pins
![Page 29: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/29.jpg)
07/06/08 29
The Future
Keep going! Nothing is impossible!
Think before disclosure!
Don't get wrapped up, have fun!
![Page 30: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/30.jpg)
07/06/08 30
Final Thoughts
Please helpWe're getting our feet in the doorOur communities are mergingPhysical security disclosure is DIFFERENT than digital security disclosureWant to help?
And finally, that super-secret announcement...
![Page 31: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/31.jpg)
07/06/08 31
The NDE Grant
Misson Our goal is to help get tools and supplies into the hands
of hobbyists who are doing legitimate lock research.
Once an exploit is discovered and verified we work with the researcher(s) to communicate with the manufacturer.
I have privately funded a few research projects, but this is not sustainable for me financially, so I'm opening the funding up to public donations.
For more details, please visit: ndemag.com/grant
![Page 32: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/32.jpg)
07/06/08 32
Thank You!
And thanks to:Zeke79Raimundo & DBMike BrewertonLockpickology.com & LP101Jon KingPeter FieldsWalt StraderJohn LaughlinJaakko FagerlundABUS
![Page 33: How to Make Friends and Influence Lock Manufacturers · Disc-Detainer type mechanism Looks like an Abloy style cylinder Has flies like a combo lock Extremely rugged for environmental](https://reader033.vdocument.in/reader033/viewer/2022052520/6081ef3d6fdf65700f33e818/html5/thumbnails/33.jpg)
07/06/08 33
FOR LOCKSPORT!