Last week at the Amsterdam Toool meeting Jos and I experimented with the so called ‘Gemini make up key’ (also called ‘the gemini egg’). It is the round object in the upper right corner of the image. We came quite far opening lock 26 of our competition. But ‘quite far’ does not count, only a real opening does. Last night I received an MMS message from Jos with the title ‘Offen!’, showing he finally managed to open the Gemini at the Toool Eindhoven meeting. And end up with a working key ….

For people who do not know this lock: Han wrote an excellent article on the Gemini (.pdf)

More details soon …

Kwikset Smart Key Decoder – Shane Lawson from Deviant Ollam on Vimeo.

Building a decoder for the Kwikset Smartkey lock for around US$ 5.00

Not bad for a couple of fools 🙂

* update: Steffen saved the video file and even upgraded the quality quite a bit.
http://www.lockpicking.org/tmp/Kwikset_Smart_Key_Decoder_by_Shane_Lawson.wmv

I have good memories about being in court … as an expert witness on locks.

It is nice to be able to shed some light on a difficult problem and make the difference. The few cases I have been in court it was all about the insurance company not willing to pay. They claimed cars could not have been stolen because of very advanced anti-theft immobilizers and locks that could not have been opened without any signs of damage. In all cases Han Fey and me were involved they lost the case or paid straight away after reading our testimony.

There is no such thing as opening a lock without a scratch, as all mechanical tools to do so will leave marks. The problem for people looking for marks is that they should be aware of all opening techniques and tools. Each tool or technique leaves a different mark, and some marks can be really really subtle! And since there are a lot of techniques (some more known then others!), the knowledge of the forensic expert should be very wide.

So I am always keeping an eye out for information on forensics, and recently received a link to http://www.lpforensics.com

It is a very nice source of information on this topic. Worth your time, so take a look …

A small challenge: do you have any idea what this key was used for?

If you need help: here is a little hint

And the answer can be found here

* I am not 100% sure about the facts in the article, but we can discuss about that in the comments …

** Thanks to Nicholas Lennox for the link to this nice article

Babak Javadi of Toool.us did it again. He improved the design of the ‘last hope’ credit card size emergency pickset, and came out with a version 2.0. The previous set was just fine to me, but some people complained the metal was a little too thin (read: people were bending their picks). And the previous card was made and designed in a rush, and Babak could not incorporate all his ideas in it yet.

This has all changed in version 2.0 of the credit card sized pickset. Excellent quality steel, very nice serrated tensioners(!) and broken out picks can be put on your keyring.

Jos Weyers of Toool Amsterdam was kind enough to be the guinea pig and try the set for you. See him pick a toool competition lock with the new picks and rake open another one in this youtube video.

As promised some information on the safe opening weekend organized by Paul Crouwel and friends:

As any safe technician can tell you, there are not that many ‘penetration parties’ where lots and lots and lots and lots of high quality bank safes are waiting to be opened. In that respect Paul Crouwels parties are pretty unique. Parties like that are the ultimate learning experience, better then any class on the subject. Sure, there are people giving classes in safe opening, but sometimes that is nothing more then a sales pitch for safe opening tools. A sales pitch you have to pay a lot of money for to attend.

Back to the safe opening event: in safe opening it is all about experience. The best safecrackers are the ones that have the most experience, or with the best connections to people who can tell you what the internals of the target safe most likely will look like. In previous events the strategy to open safes was to drill a hole on a strategical place in the safe. This sounds easier as it is, and I always admire the craftsmanship that is needed to pull it off. Just think about it: you need to picture what is inside the safe and then try to drill away the element that keeps the safe locked, or in case of a combination lock drill until you are inside the heart of the lock and set the code by looking into it with a scope. Being off by a millimeter can cause you big trouble, not to mention the glass plates that can set off ‘relockers’ if hit (shattered) by a drill. If this happens, the safe will lock up, and even the original key and combination will not open it anymore (a mechanism to win time, safes that have the relockers fired can take a looong time to open).

As I mentioned before, at this event we tried to shift from drilling to picking and decoding safes. Just as with opening standard locks, there is nothing like opening a high security safe without a scratch. To do so requires the right tools, and Jord Knaap is becoming really good at making safe opening tools. His hand made Hobb’s picks are just as good, and sometimes better, as the stuff that is available commercially on the market. And Paul Crouwel was the first one to pick open a safe at the weekend. In about fifteen minutes the door of this monster safe swung open without a scratch. Later Paul tried his luck (skill) on another safe, but when it did not open in fifteen minutes decided to go for a smoke. When he came back, master lockpicker Julian Hardt was kind enough to have picked it open for him. Later that day Julian would repeat the job and pick open the lock on a heavy rosengrens safe.

Now, picking safe locks is one thing, decoding them is another. We were intrigued by learning about a defect in a specific safe lock that will allow you to ‘decode’ (or ‘read’) the combination of the levers. In short: all levers have different shapes, and if you can see part of the lever you can tell its combination. This requires a thin scope and a so called set up key. A set up key is a key that can be set to combination by inserting little pins that will lift the levers to a specific height. The key on this image is hand made by Jord Knaap. All preparations to open a safe this way were done in the weeks/days before the event. So it was a highly experimental exercise, but a very successful one. Jord could see the image of the levers on a small screen, while the other people could see it on a big external screen. Because for them it was a new technique it took them two hours to pull it off, but the result was an open and undamaged safe. And knowing the code of the setup key, a new key can be cut easily.

I could go on for a long time, as the event went on for three days. A lot of safes were opened, and more important: people had a lot of fun while doing it. Antique safes were opened and some more modern ones were opened. Images and measurements of each opening were recorded, and hundreds of images were shot. Some of them will be available on Paul Crouwels website (behind a password, safe technicians only). Locks were removed from drilled safes and will be used for practicing or turned into cut-away models. Under strict supervision there even was half an hour were the next generation safecrackers was instructed how real men open safes. During the weekend around thirty people participated. I would especially like to thank our new Greek friends for their attendance. It is always a pleasure meeting new people who invest time and money to learn new techniques and make new friends. Hopefully we will meet them at the next penetration party in one month!

That is right: In one month there will be yet another penetration party (May 1-2-3). Over thirty closed high security safes will be waiting for you. Paul asked me to specifically say the party is not an open house for everyone to attend. The invitation is for safe techs and savta members only. They will verify before you are allowed in. And if you attend and do not want (your techniques) to be mentioned on this blog that is fine too. I am sure you will be pleasantly surprised by the level of expertise and fun atmosphere at the event. Mail crouwel@xs4all.nl if you want to attend …

There are some problems with our server. Nothing too serious, but it causes some downtime. I hope it is fixed in the days to come.

I have a slight delay in writing about the safe opening weekend, but hopefully will complete the article in the next 24 hours orso. That is the trouble with spring: there is more in life then locks and metal 🙂

One thing I can already say: the safe opening weekend was a great success, and already lots of people asked if there will be a follow up. Well, I have good news! In just one month there will be a next safe opening weekend! The weekend of May 1-2-3 the next penetration party will take place! Again we will have around 35 serious safes, and again it will be an experience every safe technician on the planet is going to look at in envy. And there is no need for that: just register and join!

For international travelers: The day before the penetration party weekend, (April 30) is a very special day in the Netherlands. Queensday! A day you should have experienced at least once in your lifetime!

Party on! 🙂

Registration for the penetration party can be done as always at crouwel@xs4all.nl …

(wikipedia on queensday:)

Orange
This is a typical occasion for oranjegekte (orange craze), when the colour orange is a ubiquitous sight, referring to the name of the Dutch royal family, the House of Orange. There are orange banners, orange colored foods and drinks, and extreme amounts of orange clothing and creative accessories are worn as well. Sometimes even the water in fountains is dyed orange. It is not uncommon for people to impersonate the queen, not always in a flattering manner (rudely).

Freemarket

The so-called ‘vrijmarkt’ (‘freemarket’) is similar to a nationwide car boot sale or Flea market. Owing to a holiday dispensation from the Dutch government, people do not need to pay taxes on their sales. Many people set up stalls or blankets in parks, on sidewalks and even on the roads themselves (cars are banned in some streets). The items sold are traditionally old rubbish, but for commercial traders this is also an extremely profitable day. ING bank has estimated the size of the trade in 2007 at about 200 million euros, with the approximately 1.8 million sellers making 111 euros on average. The freemarket in Amsterdam attracts the most visitors.
The sign says ‘overthrow the royal house’, referring to the pictures of the royal family on the pile of boxes one can throw balls at

Typically, many children sell their cast-off toys and clothes while entrepreneurs sell food, beverages and almost anything else imaginable. Prices tend to be very negotiable and drop as the day progresses. By the end of the festivities, much of the unsold merchandise is left on the streets to be picked through until it’s hauled off by local municipalities shortly after. In Amsterdam, the main streets in the city centre are increasingly being taken over by commercial traders, pushing the intended car boot sale out towards smaller streets and the outer ring of the centre.

There are, however, some areas where the original style is preserved. One of these is the Jordaan, a gentrified former working class neighborhood, where prices are very low because the sale is just an excuse to have a nice day and a friendly chat with complete strangers. Sections of the Jordaan can become so full of pedestrians that they become completely gridlocked, despite the absence of cars. Another is the Vondelpark, which is officially reserved for children. Especially there, but also elsewhere, there are many other activities besides selling second hand goods, such as performing music or providing other entertainment for money.

Open air concerts

In recent years, Koninginnedag has become more and more of an open-air party, with many concerts and special events in public spaces, particularly in Amsterdam, which attracts anywhere from 500,000 to 800,000 visitors. Many Dutch people living abroad try to make the pilgrimage home (with many ‘clued-up’ tourists) to experience this holiday each year. Booking accommodations in Amsterdam and elsewhere for Queen’s Day is notoriously difficult, requiring booking 6 months or more ahead.

Queen’s Night

During the preceding ‘koninginnenacht’ (Queen’s Night) many bars and clubs throughout the Netherlands (particularly in Amsterdam and The Hague) hold special events catering to revelers that last all night long. This tradition started in the early nineties when pre-Koninginnedag riots were an increasing problem in The Hague. The idea of convincing the rioters that a celebration is a much better way to spend ‘Koninginnenach’ (without the ‘t’, as it’s pronounced locally), proved successful. The event draws tens of thousands of visitors every year.

After hard work it is time for food and drinks ….

The score of the safe opening weekend: 15 high security safes were opened. Most of them drilled, yet some of them decoded and picked. More information on the days to come … we are having a beer now …

With one week to go to our own safe opening weekend, a very nice article in Wired to get in the mood.

Fascinating stuff! Still reading and sifting trough all the details myself … A must read!

I had dinner with Marc Tobias last week, and one of the things we spoke about was ‘disclosure’.

It is my philosophy you should warn a lock company if you find a (new) flaw in their product and give them time to fix it and inform their customers. Marc however defended the standpoint to only give them time if they promise to exchange the locks in the field, or apply a patch, free of charge. It is a dilemma, especially if you see how companies like Uhlmann & Zacher suffered from anonymous youtube videos that popped up out of the blue.

The other side of the medal is that lock companies sometimes are sloppy and do not take this all too serious. I still have not fully made up my mind about the future of disclosing issues, but tend to lean in Marc’s direction. If companies promise to compensate/exchange the flawed products the consumer wins. If the manufacturer does not want to fix the problem, the consumer needs to know the lock needs replacement. And most likely replace it with a product from a company that does take it’s customers serious….

But I guess it is a decision we will make case by case, as not all locks and flaws are equal …

To be continued for sure … (and I am curious to hear your opinion about this …)