Robot cracks open safe live on Def Con's stage

Post by grogenaut » Sat, Jul 29, 2017, 4:11 PM UTC

shasheene wrote: post #67

adekok wrote: post #65

Earlier quoted context omitted.

When I was 10, I found a rotary bicycle lock + connected chain, locked alone to a post in a park. Having read up on locks even then (god knows how), I tried the method of "pull on it and spin the dials". About 30 seconds later, it was unlocked. I used that lock for about 10 years, until I went to University, where the thieves were a bit smarter.

Just a note that the lock you found may have not been abandoned. Many bike posts in my university's undercover bike shed often had several locks without a bike in sight. It turned out many people leaving bike locks on posts they often use (it doesn't take up much space or prevent someone from using the post). It saves those cyclists the hassle of carrying the the lock with them (only the key), which is particularly a…

Post by blacksmythe » Sat, Jul 29, 2017, 4:13 PM UTC

Animats wrote: post #34

themcaffee wrote: post #33

Earlier quoted context omitted.

A key element of this is it's ability to limit the amount of possible combinations from 1 million to about 1000 due to small flaws in the dials. A contact microphone might be able to even further reduce this search space in combination with the existing exploits.

There are Sergeant and Greenleaf locks with a half-digit tolerance, so you have to get the number exactly right. They're not popular, because they're such a pain to use.

  >> half-digit tolerance

Post by joombaga » Sat, Jul 29, 2017, 4:30 PM UTC

Houshalter wrote: post #49

DrScump wrote: post #35

Earlier quoted context omitted.

Bear in mind that local governments view property crime as a form of economic stimulus. You'll be spending money to replace the stolen items, presumably some of that locally, and on repairs, presumably all locally. Meanwhile, whatever money the criminals get back in selling the stolen items (and subsequent profits by their fences) will also presumably be spent locally.

A literal broken window fallacy example. Amazing.

Post by agumonkey » Sat, Jul 29, 2017, 4:34 PM UTC

AYBABTME wrote: post #82

agumonkey wrote: post #56

Last month I had the disappointing surprise of finding a lock on my bike. I forgot I put it (it's been years since I last used it). And it's not a key lock.. so I'm screwed. Not willing to cut the cable.. I decided to brute force it. 999 space is fun. Luckily you quickly find similar tips than the alignment one to speed up the process. And since it's not a full rotary lock, I could also "DDR" the tests by testing whe…

For 1000 possible combinations, wouldn't you expect to have to try ~500 combinations on average to find solutions? Since you found it in 800 attempts, this suggests that whatever method you used may have actually made your odds of success worst.

Post by semi-extrinsic » Sat, Jul 29, 2017, 4:43 PM UTC

dmix wrote: post #71

donavanm wrote: post #21

Earlier quoted context omitted.

Depends on where you are. UL ratings are used in north america. There are similar EU ratings that I dont recall of hand. TL ratings are for theft/entry resistance. There are other modifiers for fire, water, chemical, etc resistance. Unrated "safes", and even some that are said to be rated, are junk. In NA you want to get in touch with a local safe dealer/specialist. Most of their business is commercial, and they are…

That video was much dirtier and louder than I expected. Lots of brute force still involved. Not quite the domain of out of shape hackers. But I guess that's why we build robots. For anyone who wants a good safe cracking story, this book is excellent: https://www.amazon.com/Flawless-Inside-Largest-Diamond-Histo... A group of Italians went to Belgium's diamond district and bypassed an very expensive vault door. The bes…