Reminds me of the famous 'Luggage Combination' scene from SpaceBalls.
Tourist's lucky guess cracks safe code on first try
31–40 of 118 posts
Re: Tourist's lucky guess cracks safe code on first try
#32"The fact that the combination was in a specific pattern and did not appear to be a random combination of numbers could also factor into a calculation of the odds, he added." Hehe. I guess he'll have to produce a list of non-random numbers to work those odds out.
Reminds me of this:
https://en.m.wikipedia.org/wiki/Interesting_number_paradox
I suppose the smallest random number is also not random :)
Re: Tourist's lucky guess cracks safe code on first try
#33If the combination does allow for wiggle room and the 1 in 8000 figure is correct, the code could have been brute forced in a couple hours. Source: my wife has a habit of forgetting the combination to her 3 digit luggage lock and I had to brute force it a few times (it's surprisingly quick, about 15 minutes) :)
I bruteforced a 4-digit 2FA in 2 days, of course with the help of a small script instead of trying it myself. It's always fun to see dumb solutions work.
Re: Tourist's lucky guess cracks safe code on first try
#34If the combination does allow for wiggle room and the 1 in 8000 figure is correct, the code could have been brute forced in a couple hours. Source: my wife has a habit of forgetting the combination to her 3 digit luggage lock and I had to brute force it a few times (it's surprisingly quick, about 15 minutes) :)
The good thing about normal combination locks is that you can try all combinations sequentially with minimum movement.
000 start
001 1 move
002 1 move
...
008 1 move
009 1 move
019 1 move
018 1 move
...
011 1 move
010 1 move
020 1 move
021 1 move
...
Re: Tourist's lucky guess cracks safe code on first try
#35A combination "20 - 40 - 60" on a dial that goes from 1 to 60... Sounds like an equivalent of a factory-default admin/admin login credentials. I wonder if it really was the default combination that the safe was bought with, and the owners never bothered to change it. :)
> A combination "20 - 40 - 60" on a dial that goes from 1 to 60... Sounds like an equivalent of a factory-default admin/admin login credentials. The article explains that it was a common combination for people to use on this type of safe - "Typical combination lock, three times clockwise - 20 - two times counterclockwise - 40 - once clockwise - 60, tried the handle and it went".
"admin", ""? Nope.
"admin", "admin"? Nope.
"admin", "passwd"? Yep!
Re: Tourist's lucky guess cracks safe code on first try
#36Alternative headline: after experts fail, museum successfully crowdsources brute force attack on safe, over decades.
With all due respect to Mr. Mills, in this context he's a pawn in someone else's master plan.
Re: Tourist's lucky guess cracks safe code on first try
#371 in 216000... seems like you could build some robotic device to brute force that pretty easily... or you know, introduce it to a thermic lance. EDIT: sorry, my research suggests that safe-cracking with thermic lances is plausible but not practical (source; Mythbusters, of course)
or maybe with a handheld x-ray like this:
https://www.youtube.com/watch?v=ovqJpcaWD7o
but not with every safe:
"Some modern safe locks are made of lightweight materials such as nylon to inhibit this technique, since most safe exteriors are made of much denser metals"
https://en.wikipedia.org/wiki/Safe-cracking#Radiological_met...
Re: Tourist's lucky guess cracks safe code on first try
#38If the combination does allow for wiggle room and the 1 in 8000 figure is correct, the code could have been brute forced in a couple hours. Source: my wife has a habit of forgetting the combination to her 3 digit luggage lock and I had to brute force it a few times (it's surprisingly quick, about 15 minutes) :)
The good thing about normal combination locks is that you can try all combinations sequentially with minimum movement. 000 start 001 1 move 002 1 move ... 008 1 move 009 1 move 019 1 move 018 1 move ... 011 1 move 010 1 move 020 1 move 021 1 move ... and so on.
I feel like saving 1 move in 10 (9 to 10 is 2 moves, 10 to 11 is back to 1 move) is not worth the mental capacity required to remember current up/down direction. Easier to let the muscles do the work and let your mind wonder.
Re: Tourist's lucky guess cracks safe code on first try
#39"he noted that some combination locks allow for wiggle-room and if this one had a three-digit leeway, Mr Rosenthal put the chances at 1 in 8,000, "which is still a small chance"." If this is the case, and there have been museum visitors having a go at opening the safe each day... this becomes a non story, right?
Also I would assume most people would try more than once.
Re: Tourist's lucky guess cracks safe code on first try
#40"he noted that some combination locks allow for wiggle-room and if this one had a three-digit leeway, Mr Rosenthal put the chances at 1 in 8,000, "which is still a small chance"." If this is the case, and there have been museum visitors having a go at opening the safe each day... this becomes a non story, right?
That museum is lucky to get visitors on some days.
It is only open from 1pm to 5pm, May to September, week days only.
Compare with Disneyland for footfall.
A volunteer could have had the time whilst waiting for visitors to give it a go though.