Bumping cars open…

January 24th, 2007

If you know anything about bumping locks you know it is not going to work on
lever and wafer locks. So car locks are more or less immune to bumping.

Or so you thought!

It seems specific type of Mazda cars can be bumped open real easy.
And with that I do not mean bumping the lock, but the door of the car!

mazda

According to an article in mobile magazine: “A rash of Mazda 3 owners
have fell victim to a sneaky method of forced entry to their zoom
zooms. When returning to their vehicles the passenger side door has a
dent, and all of the items once in their cars, are now gone. No glass
smashed, no door locks jimmied, just a side blow to the door will
grant entry to the thief.”

And: “According to a Mazda dealership that wishes to remain anonymous,
it works by someone creating a large blow in just the right place on
the door panel. It will leave a dent in the door of course, but this
dent goes past the door frame, to the lock assembly mechanism and
activates the linkage also tricking the computer into thinking that it
was legitimately unlocked by your key or remote.”

Wonderful … isn’t it ?!?

I found some rare video footage of the pioneers of this technique… click here.

The enigma lock … made by Chubb!

January 22nd, 2007

I think by now we all know what an enigma cipher machine is. After all
it is the star in many war movies and a classic in cryptography.

And now I finally know what type of lock it was equipped with. I think
it is quite ironical the German device was locked with a UK chubb lock.

chubb keys

The lock itself is a piece of art. It can be re-keyed on the fly. Just
open the lock with it’s key, and close it with a new key. Now only the
new key can open the lock. Simple and elegant. A pure brilliant design.

Look at the video clip to see a cutaway model of the lock in action.

* UPDATE: Oli mails there is a misunderstanding. It is not an Enigma lock after all …

> The guy from chubb told, that this lock was used by UK government to store
> high security stuff as the enigma machine, which was taken from one german
> submarine by the UK military.

> Sorry for my bad explanation in Hamburg, but that should be corrected –

** Update 04/08 we finally had our hands on a real enigma and opened the lock!

Amsterdam television station visits Toool meeting

January 20th, 2007

You sometimes have to work hard to make the best of it.

Wednesday evening we were visited by AT5, the local Amsterdam TV
station. The lady doing the interview seemed not really interested and
shot the item on routine. She did not want to learn the names of the
tools and kept referring to them as ‘them little iron thingies’.
I think native Dutch speakers can hear by the tone of her voice how
interested she really was.

As with all media she kept asking about criminals visiting Toool, if
we ever steal bikes etc etc etc. Sigh ….

The item is online at: http://blackbag.toool.nl/video/kort-amsterdams.wmv

Feel free to play it when you are having difficulties getting to sleep.
I guess it can be a great help for people suffering from that.

Still I am glad we do not have Fox news covering the Dutch lockpick scene.

Recently Fox covered lockpicking, saying ‘security experts are
outraged
‘ because of free downloadble lockpick video’s that are
available trough youtube. Funny this clip is brought to you by … Youtube!

And a small update regarding the impressioing rush: I am definitely
back to earth. I wasted four blanks on an Abus without opening it. And
the last two tries I really paid attention too.

I had to know what I did wrong and picked the Abus and took it apart.
It seems the combination was real low. The code was 8 9 8 7 6. And I
did impress it right, except for the last pin. That went too deep. Weird.

And just a few minutes ago I did not open an EVVA five pin lock (at
the first try). So it seems like I still got a lot to learn.

Ah well … that is what makes life interesting….

More impressioning

January 19th, 2007

I must admit you almost lost me. I became a poker addict and was
sucked into the wonderful world of online poker.

However, visiting Oli this week changed my ‘poker mode’ into an
‘impressioning mode’. Impressioning is at least as addictive as poker.

Yesterday evening I practised some more, opening DOM and Nemef (both
five pin locks) and … a ‘cross key lock’.

cross key

These cross key locks normally are easy to bypass with a special tool.
However, there is a new range of locks with a so called ‘profile latch’.
Instead of a ‘cross’ the key’s profile looks more like a little swastika.

Since bumping does not work on this lock (because of a loose core’) I
was focused on impressioning it. To get the first marks on the lock
was not easy, but after that it showed it’s marks relatively easy.

The lock I opened at the first try was a LIPS. My second try on an
Ikon lock did not get me my ‘starter marks’. Since I only had two
blanks that was the end of the exercise ….

The impressioning rush …

January 17th, 2007

I am in pure ecstasy at the moment! It is a rush I only had a few
times before. Bumping a wide variety of locks for the first time was
one of them. The other rushed I can not disclose on this public forum …

But seriously, I am still a little in shock too.

This weekend I did my first serious attempt to impression an Abus lock.
Looking at the book and the marks on the key I knew I was on the right track.
But I did not open the lock…

Monday Paul Crouwel and myself went to Hamburg to meet with Oliver Diederichsen.
We had a nice meeting with him and besides a private impression workshop he did
show us lots of nice things. I shot quite some video, so make sure to check
blackbag regularly these days to come. You will enjoy it … that is a promise!

When I came home from work today I stopped at a shop and bought a nice
magnifying lamp. It is a valuable tool when impressioning locks.

impression tools on table

Right after dinner I started… my goal was to open at least one lock!

My first try was immediately successful! Within ten minutes the first
Abus opened! The marks were so clear and obvious, I could not believe it.
And still I can not believe it 😉

Second was another Abus, one I did know what the key looked like a
bit. I vaguely remembered it had some ‘high low high’ combination but
I tried not to think about that too much. I focused on the marks and
when I got somewhere the key broke ‘half way’. Filing the remaining
marks on the key did not open the lock.

Because the key was very fragile I had to try something else. So instead of
moving the key up and down, I moved the key in and out, making horizontal marks
instead of pointed marks. I could clearly see the long-marks and filed two more
rounds. The next time I pulled the key in and out, the lock opened!

So I had a score of two out of two! It was time to put the kids to bed.

my first successful impressioned key ever!

When I finished that ‘job’ I optimisticly started digging trough my collection for
other locks with the correct blank. I could only find a Corbin … brrr …

Unfortunately the depths of Corbin are not in the book so I had to file in
much smaller steps. The first key I tried I went too deep to fast. But the
second key I remained my focus and … succeeded in opening the lock!
This was the ultimate rush. Unknown depth steps and still success.

Last but not least I found a CES lock and blank. Again I used the book
for depth measurements. It also opened the first try.

In two hours time I opened four locks using only five blanks, and put
the kids to bed too. Now siting at my couch thinking it all over.

I only hope it is not a dream … it feels a little like it!

Tomorrow is the Toool Amsterdam meeting. I will bring some impressioning
materials so members can try it themselves.

the score ....

Update 01:25 am : Back to earth. Tired and off to bed. Tried to open a DOM lock without success ….

Amsterdam proves to have a mayor with a vision …

January 14th, 2007

Ever since we heard about the re-certification of the SDU voting computers
we have been working real hard to prepare some counter actions.

plaattje

And the press is still on the subject, as well as some members of parliament.

All this activity did not go unnoticed to the mayor of Amsterdam. In all his
wisdom he decided it was a bad idea to bet on the SDU voting computers being
re-certified on time for the coming local elections. So Amsterdam will vote
with paper ballots. Just like it is supposed to be!

A wise decision if you ask me. I am glad Amsterdam remains the bastille of
verifiable elections this way. Let’s see what happens in the days to come …

Book reveals new impressioning techniques

January 11th, 2007

Oliver Diederichsen outdone himself on his book ‘Impressionstechnik’ (English: impressioning).

details details details

It sounds like magic: the expert wiggles a blank key into a lock,
takes it out and examines it, files a bit off the key, wiggles it
again in the lock and repeats these steps till the key turns and opens
the lock. For real experts times under ten minutes are common.

Oliver Diederichsen’s books explains how this is achieved. And if
anyone knows about this way to open locks (called impressioning) it is Oli.
After all he is the German impressioning champion of 2005. In under
7 minutes
he created a perfect fitting key from scratch to open an
Abus 5 pin lock.

But besides being an impressioning master, Oli also has another skill.
He is a great teacher, especially when it comes to lock opening techniques.

To me it seems the only reason he did not become German impression
champion 2006 was because he gave a small workshop together with Dr.
Manfred Boelker one day before the event. Some Ssdev and Toool members
were introduced to the fine art of impressioning with the material
(images) that led to this book. Amongst the interested crowd was Ssdev
member Peter Danilov.

Peter just learned about impressioning that day … one day before the
championships. The next day he entered the championship ‘for the fun
of it’ and won in a devastating time of 5:35! Oli became second in
little over ten minutes. Beaten by his own success …

To me this proves Oli knows how to teach, and for all of us it is
a big motivation to see people can become champions with the correct
instructions and training. And of course a little luck …

Oli’s book gives you these instructions and reveals there is no magic
involved in impressioning. It will teach you what materials to select
and how to use them, the pitfalls you can (and will) run into and the
“do and do-not’s” of impressioning.

What I really like about the book is that it covers new ground. Many
people in the security field know more or less pin tumbler and lever
locks can be opened this way. But did you know dimple locks and even
laser track car locks can be opened like this? Step by step Oli covers all
of these locks in detail, and many, many more.

impressioning a 15 pin dimple lock

The book is filled with the most clear and beautiful high resolution
images on this subject I have ever seen. I counted close to two
hundred of them, not including schematics or drawings. And that is
what this book is all about, details that make the difference. This
also counts for the chapter Manfred Goth wrote about forensic traces
left by impressioning. The electron microscope images reveal what the
naked eye can not see. Fascinating material!

electron microscopes are cool

Oli explained me that printing in black and white would have made this
book much cheaper. But being the perfectionist he is, he had the
book printed in full color. That is why the price of 79 euro might
seem a little steep. But if you want to learn about this technique it
is worth every penny. And who knows, you might even become the 2007
champion …

It got me motivated to learn more, I think I will give it a try this weekend.

To be continued …. (and no, I do not get commission from Oli, it is just a cool book)

“How it’s made” on hotel locks

January 6th, 2007

hotel lock

Yesterday on Discovery there was an item about how hotel locks were
made. The name of the program is very appropriate: “How it’s made”…

And for the Dutch readers: it even was subtitled in Dutch.

It is always very informative to see how locks are made and tested.
Electronic or mechanic, you always learn a lot. I could tell you what
I learned from it, but advise my dear readers to look at the video themselves.

It can be found here (WMV, 5 minutes, 38 Mb, some weird glitches …sorry)

In the comments we can discuss the possible flaws…

Voting computers in the rebound

January 4th, 2007

The SDU-Newvote computers that were taken out of the Dutch 2006
election are back. If all goes well (for them) the license to operate
on the local March 2007 elections will be given out again.

This is bad news for transparent democracy. The SDU newvote way of
organizing an election is horrible. One day before the elections the
computers are rolled into the polling station. At the end of the day
the numbers are sent to the SDU headquarter via ‘wireless modems’ and
added up there. The people who vote only press a button and have to
hope for the best. Before you know it the computers are taken back by
SDU again and are no longer available for inspection.

In other words: our elections are going to be done on leased Windows
XP machines with a build in wireless modem. This is not something I
can live with…

So the quest for information is on again. I am not sure if they by now
were clever enough to add real locks to these voting computers, but
until that is clear we are looking for information on the following
locks (click here to read the original information request including
high resolution images)

newvote locks

One of the three keys is already identified by one of our readers.
The key to open the back of the SDU-newvote is the same as what is
used in the the computer server industry (the EMKA ‘EK 333’ key).

Who can identify the remaining two locks? The apple-pie reward is still on!

Guess what I got for Christmas? A Safe!

December 30th, 2006

And a very nice one too. Well, it is not actually a safe, it’s a secure
storage container. The US military uses them to store sensitive
documents and goods inside their facilities. The main objective of
this container is to make surreptitious entry as difficult as
possible. Therefore it is equipped with a sargent & greenleaf 8550
‘manipulation proof’ lock. The lock is protected from all four sides
by special ‘hardplate’ metal to prevent people drilling the lock.

A nice metal plate on the side of the drawer gives all the details of
what else this container is secure against. And there is nice sheet of paper with
schematics and part numbers on the inside of the locking mechanism.

The safe comes with a magnetic sticker that on one side says ‘OPEN’
and on the other side ‘CLOSED’. This is so the operator of the safe
can see in one view if a safe is closed or open (duh).

I tried googling around for this model for 15 minutes or so an could
not find it online.

There are some things that are not clear yet. For example, the
container comes with a transparent plastic cover to put over the dial.
Is this to protect the dial against dust? Or is there another purpose?

dial cover

And on the front of the container the weight is noted in big letters.
Is this because it is used in an environment where balance is
important? Like an airplane or submarine? Again, we don’t know.

But I thank good old Santa for his nice present!

Feedback of readers is of course very welcome …