Defcon is ehrm … different

August 10th, 2008

wow

There is a time to write, and there is a time to party. And when you are in Vegas you party …

I must say Defcon is not like any other conference I have ever been to. Not necessarily better or worse then other conferences, but different for sure. And if you ask what is different … I leave that to your imagination.

No time to write more, but I do make the promise to follow up and write some serious postings in the weeks to come … Back to the party now ….

hi

Images from ‘copying high security keys’

August 3rd, 2008

I do not like to depend on other peoples images, and try to create my own if I can. The images for my presentation at the ‘Last Hope’ conference were no difference.

Dutch phone phreak key

On this image (click on it for a high res version) you see a copy of a high security key, made by Dutch phone phreaks around 1995. Because these phreaks could not get the blank key for the target lock, they found a metalworker who ‘simply’ 3-D measured the key and cut a copy out of a solid piece of brass. What is special about this key profile is that the key has got ‘ribs’. These ribs are scanned by the lock, and on one spot there has to be metal, while on an other part there must not be metal. Sort of like checking for 0 or 1. If the expected value is not present, the lock will jam after 90 degrees and ‘eat’ the key. In most cases probing the side channel with a thin paperclip will release the lock again….

Unfortunately, for this photo-shoot I did not have the original key, so I photographed the brass copy next to a similar key (from a different system).

The bottom line I was trying to make with the presentation is that no matter how complex the manufacturer can create a mechanical key, a bad guy with enough time and motivation can create a copy.

I got a busy week ahead, so my next posting will most likely be from Las Vegas (Defcon).

The Medecoder … tomorrow in NDE #4

July 27th, 2008

I am writing, but not for blackbag. Currently finishing an article for the NDE magazine (number 4 already!).

The Medecoder

One other thing that will be covered in NDE #4 is the Medecoder tool by Jon King. I had the pleasure to experiment with it over the weekend, and so far picked a 5 pin Medeco lock with it twice. It is a nice feeling to set the pins and open the lock, but picking the pins to the normal height takes me some effort. No doubt this will improve over time …

Tomorrow NDE #4 will be released, so I will continue typing …

Hope was a blast!

July 25th, 2008

Han and I had an extremely good time in New York, and it was nice to see the people behind the nicknames and e-mail addresses. We made some new friends….

I am currently on a campsite with the family, being connected to the net over a very thin GPRS line. So I will keep this posting short for now, and continue to play with the medecoder tool Jon was kind enough to trade me.

Open, but not in 30 seconds ....

In the meantime I will share with you a picture shot by Matt Fidler. It shows Marc Tobias in high security handcuffs. What makes the handcuffs high security? They have Medeco locks on them. And no, Marc did not get out of them in 30 seconds (evil grin).

We will see Marc and Toby again in less then two weeks as ‘the last Hope’ was not the last visit of the good old US of A this year. Next stop for Han and me is Defcon in Las Vegas …

Back to picking locks at the campfire for now. I will try real hard to write something worthwhile on Sunday, so fingers crossed …

Jon King on the Medecoder, and demonstration!

July 18th, 2008

Wow … that was one impressive talk!

Jon King and Doug Farre just finished their presentation on maintaining a locksport organisation and … the medecoder tool!

Over the last months there has been a lot of speculation on how this medecoder tool worked, and today Jon King released it. Besides explaining how it works in full detail, he also had the guts to pick a six pin medeco lock on stage. It does take a lot of guts to pick a lock on stage, even if you know it inside out. A couple of hundred people watching can make you quite nervous. But he kept his cool and opened the lock.

And I shot some video of it with my photo camera, so not the best of quality, but here it is. Click above the see the youtube video, or click here for the original AVI 83 MB. I am sure you will enjoy ….

The story is Medeco will come out with special ‘ARX’ pins that will prevent this tool to work…..

Now I am heading back to the conference, but not without sharing some of the images I shot from their presentation (10 MB zip).

*Update 26/07: Video of entire presentation is online here (50 minutes!)

Being a person of questionable character …

July 16th, 2008

In the comments from ‘about me’ , Martin Newton (a UK grandmaster of safe opening tools) is angry with me. Even calling me a ‘person of questionable character’. Something that really hurts coming from a person who’s tool making abilities I admire for a long time. The problem is I can not even blame him for calling me that….

Mr. Newton claims the design of the ‘last hope’ credit card pick is a cheap rip off on a business card designed by another legend in lock opening tools: John Falle. And I do not even want to tell you how I admire Mr. Falle’s tool making skills …

Now, to our defense, we never saw a business card with ‘John Falle’ or ‘Martin Newton’ on it. Babak received a ‘pick business-card’ from a US company called MBA at the Aloa 2007 convention in the US. And I received a similar (yet not really usable) business card from Kevin Mitnick beginning of 2007 too. The minute I heard the Toool.US crowd wanted to make a special ‘last hope’ memorabilia pickset inspired on an ‘MBA design’, I mailed MBA to ask their permission/opinion about it. There were at least three mails on this topic, and reading back my mails I can only say I really tried to do the right thing.

My big mistake on the previous ‘Last Hope pickset’ posting is I did not mention MBA (and/or John Falle & Martin Newton) for the design. And that was wrong.

People who visit this blog more often know I try to give credit where credit is due. And giving credit to Babak and the people who put the drawings in CAD, but forgetting to credit MBA (and/or John Falle) was plain stupid. And I sincerely want to apologize to MBA, Mr. Falle and Mr. Newton for this.

Gonna crawl under a big and heavy rock now …

Update July 16 09:30: Crawled from under the rock and found a reply to my privately mailed apology to Mr. Newton. It seems the matter is resolved now that he knows the full story. His final word were: “Thanks for understanding my point of view, no hard feelings.”. I must say I am very relieved by that!

Your ‘Last Hope’ pickset …

July 12th, 2008

Credit card size snap off pickset

This year Toool will be presenting two picksets at the Last Hope conference in New York next week. The first pickset is the one you see above. It is a credit card sized set, and the tools can be snapped off. And already guaranteed to become a collectors item.

It is called ‘the last hope’ emergency pickset, and the main idea is to carry it in your wallet. You will most likely use it when you lost your keys, or when you are assisting others who lost their keys.

If you look at the back of the set, you see the edges of the set can be snapped off too, and are actually four separate tensioners. If you snap off all tools, you will end up with and eleven (!) piece pickset. As you can see, there are three basic picks, designed with the novice pickers in mind. For the real pro’s there is three thin and slim hook picks. Very useful for those pesky euro profile cylinders with their zig-zag keyways….

The other Toool pickset is the new and improved ‘double sided picks series’. There will be eight double sided picks in this set. For the moment I will only show you one of the picks, but you can imagine what the other seven are going to look like. Both the credit card pickset as well as the ‘double sided picks’ are made of is the finest steel on the market. Extremely strong and gives the right feedback for the job …

one out of eight ...

My role in getting these picksets to Hope was modest. Of course there was a lot of input from me on the shape of the picks (and some other stuff). But the main work has been done by Babak Javadi, one of the driving forces behind Toool.us at the moment. Do not underestimate the amount of work and financial investments that go into a project like this. I would also like to thank Babak’s girlfriend Kari for having to put up with Babak investing so much time in this project.

A project that would not have happened without the help of two engineers from MIT who helped with the CAD. Thanks to Sam Duffley and Chris Pentacoff these picks came out the way we wanted them. A lot of work, but the end result is great. I am sure the Hope audience will love them….

* update July 16 on the source of the design.

Centipede Ford Tibbe Pick

July 7th, 2008

During a little lockpick party a couple of weeks ago, I met my good friend Dr. Manfred Bölker in Hamburg.

Manfred is one of the people who also invests a lot of time and money in tools, so when ever we meet we always spend quite some time showing each other our latest treasures and tricks.

This time he showed me a tool I only knew from pictures on the internet: a chinese tool to open Ford Tibbe car locks. Now, I already did cover a Ford Tibbe pick made by John Falle (filmed at the 2006 Dutch Open), but this tool is different as it can rotate the discs in the lock individually. What is also different is the price: if you mange to order it straight from China you pay around 20 euro. Buying it from european sites will cost you around 70 euro.

All in all it is a very nice tool, and I am happy Manfred allowed me to shoot some video (Youtube or Quicktime 44 mb) of it for the kind blackbag audience.

Questions answered about my 2006 Christmas Present

June 29th, 2008

As a blogger, I always enjoy the comments on my writing a lot. I do not always follow up on them as accurately as I would like to, but trust me when I say I do enjoy them.

A couple of days ago I received mail from Vaughan Armstrong. I met Mr. Armstrong once at Aloa and learned he is a well respected authority in the field of US military locks and safes.

So I was thrilled to read Mr. Armstrong took his time to answer some of my (our) burning questions. As frequent readers of this weblog might remember, I received a nice US DoD safe (GSA security container) some time ago. When I got it, there were a lot of questions (as you can read in the original post). But thanks to Mr. Armstrong we now know a lot more:

I have read the posts regarding Barry’s Christmas present (December 2006). My thanks to all who posted; I would like to contribute some information.

The present is a field safe, a GSA (General Services Administration) approved security container, for storage of classified material in the field. Federal Specification AA-F-358 (current revision H),(18 May 2000) and its most recent Amendment (3),(20 April 2007) give the requirements for this “Class 6, Size VIII 1-drawer, for field use.” To view the Specification, visit the Department of Defense Lock Program’s website, https://portal.navfac.navy.mil/go/locks . Put your cursor on “Documents.” Several choices will appear in the drop-down; click on “Federal Specifications and QPLs,” and scroll down to AA-F-358H.

This is a Class 6 container; as with all Class 6 containers currently produced, it provides 30 man-minutes of covert entry protection, 20 man-hours of surreptitious entry protection, and is not tested for forced entry protection. (For definitions of “covert” and “surreptitious,” see paragraphs 6.4.3 and 6.4.2.) Because it is for use in the field, paragraph 3.3.8 requires that “The Class 6, Size VIII cabinet shall be provided with 2 lift type carrying handles” and paragraph 3.3.8.2 requires that it have a dial knob protector (visible in the photograph).

The red-lettered label on the front of the drawer indicates that it was made between October 1, 1990 and present. The drawerhead is removable from the rest of the drawer.

Paragraph 3.3, Table I gives maximum dimensions and weights for containers covered by the Specification; the weight of the Christmas present is within the limit (maximum weight 138 lbs.) for field safes. Paragraph 3.3.2 requires that “The weight shall be permanently marked” on the container.

Paragraph 3.4.2 addresses the lock required. It now must be approved to the requirements of Federal Specification FF-L-2937. Previously, locks meeting Underwriters Laboratories (UL) 768, Group 1R were required. The lock must have a snap-on dust cover. This is to prevent someone “dusting” the dial and dial ring to determine the combination. (Some people use a thumb as a “brake” to steady the dial when approaching a target number. This leaves half a thumbprint on the dial ring and half a thumbprint in three locations on the dial. There are only six ways that these indications can be combined: A-B-C, A-C-B, B-A-C, B-C-A, C-A-B, and C-B-A, and these can be entered in a very short time.) The original lock on this container was the S&G 8560MP.

To visit Hamilton Products Group’s website, from the home page of the DoD Lock Program website, put cursor on “Links Index,” scroll down to “Hamilton Products Group” and click on it. You’ll see that the field safe is made in a single-lock and a dual-lock version.

I hope this has been informative, and possibly interesting.

Vaughan Armstrong

I would like to thank Mr. Armstrong for taking his time to answer the open questions (especially on the dustcover) on this little humble weblog. Hopefully it will not be his last comment here.

Paper locks

June 24th, 2008

Wohoo … this is cool!

On Make magazine blog I read about a UK company called ‘flying pig’. This company came out with a collection of locking mechanisms that can be made from cardboard. Price: just £4.99 …

paper locks

From their website:

A working Yale type lock to cut out and make. Print out the pages of this model onto thin card, follow the fully illustrated instructions and make your own working model warded lock. The download consists of one acrobat file which will take no more than a couple of minutes download. The file has four pages of illustrated instructions for the easy construction of your model and four pages which make up model sheets.

I think they mixed up ‘yale type lock’ with ‘wafer lock’, but that does not make these models less cool.

My kids will have six weeks of holiday next week, and as part of their education I am going to build these locks with them for sure …