Live data from Hacker News

How to open a safe

github.com

1–10 of 85 posts

Re: How to open a safe

#2
I would really hope that people who make security tools would have the best-of-breed electronic engineers but clearly not. The crack was pretty rudimentary and would take an experienced electronics test technician about an hour by the looks of it.

"No response". Understandable when you don't have any way to easily put it right, although I suppose they could have at least asked OP to keep it a secret until they could rectify it.

Re: How to open a safe

#3
post #2

I would really hope that people who make security tools would have the best-of-breed electronic engineers but clearly not. The crack was pretty rudimentary and would take an experienced electronics test technician about an hour by the looks of it. "No response". Understandable when you don't have any way to easily put it right, although I suppose they could have at least asked OP to keep it a secret until they could…

Electronic safes are anathema. It will take someone at least a few more minutes with their angle grinder to open mine.

Re: How to open a safe

#5
I am shocked... absolutely shocked, I say, that Master Lock released a security product to the market that is so badly engineered it is trivial to open.

Re: How to open a safe

#6
Does an electronic lock of the kind where the keypad is on the insecure side of the door generally contain or not contain the mechanism to open that door? How is that mechanism normally secured?

Edit: I mean here it looks like that ripping off the front-panel and powering the solenoid will get you into the safe.

Re: How to open a safe

#7
post #6

Does an electronic lock of the kind where the keypad is on the insecure side of the door generally contain or not contain the mechanism to open that door? How is that mechanism normally secured? Edit: I mean here it looks like that ripping off the front-panel and powering the solenoid will get you into the safe.

LockPickingLawyer actually covers this topic, from an access control system context.

https://www.youtube.com/watch?v=0SEHUqkbIjU

TL;DW Decision making should be on the secure side of the door, and communication should be encrypted.

Re: How to open a safe

#8
post #6

Does an electronic lock of the kind where the keypad is on the insecure side of the door generally contain or not contain the mechanism to open that door? How is that mechanism normally secured? Edit: I mean here it looks like that ripping off the front-panel and powering the solenoid will get you into the safe.

the article mentions two boards, an inside controller that activates the solenoid and a keypad - which communicate using rs232. which seems right, they just neglected to require you to enter the factory code before setting a new combination.

Re: How to open a safe

#9
post #6

Does an electronic lock of the kind where the keypad is on the insecure side of the door generally contain or not contain the mechanism to open that door? How is that mechanism normally secured? Edit: I mean here it looks like that ripping off the front-panel and powering the solenoid will get you into the safe.

A lot of name brand electronic locks can be bypassed with a tool like the Spike Master that lets you manually drive the solenoid, so even from brands that should know better there are issues.

Sadly this is an issue of market demand rather than poor engineering. Good security costs more and this is priced into the safe/lock ecosystem - if you want real security buy a commercial safe with a Group 1 lock. Sadly though this leaves consumers at risk who don't understand this. They buy a safe from a brand they recognize and they think they are in good shape. Meanwhile I get shunned on forums by actual safe techs by encouraging muggles to do their own research and buy higher quality commercial safes 2nd hand for less money.

Re: How to open a safe

#10
post #2

I would really hope that people who make security tools would have the best-of-breed electronic engineers but clearly not. The crack was pretty rudimentary and would take an experienced electronics test technician about an hour by the looks of it. "No response". Understandable when you don't have any way to easily put it right, although I suppose they could have at least asked OP to keep it a secret until they could…

I mean, to be fair this is the sort of safe you find in a hotel room where it's expected that the staff have access to it. It's decidedly _not_ a high-threat environment secure item.
Post reply on HN