Locks, Common Vulnerabilities and Exposures

Mary's for hosting and USAA, our diamond sponsor. I'm excited about this next presentation. Thank you for making it this afternoon. Uh I've actually known Paul Oh, sorry. I shouldn't say your whole name. I've known you for years, but um it's about locks. So, there's a physical demonstration right here. So, you move forward and move closer that way you can see. But, we got uh radio teacher and Lord Bob presenting today. Let's give him a round of applause.

>> Thank you very much. So, it's really funny that some of the locks that out there, I don't know if how many people have seen like lockpicking lawyer and stuff like that. Some of the locks you really don't even need to pick. They're god awful. Um, I've looked at trying to make like some kind of hack of a CVE, a common vulnerability exposures list for locks. And the problem is is a lot of people are worried about how hard they are to pick. But it there needs to be almost like a scale that goes to 11 because some of these locks you don't need to pick. And um just kind of show one off. This is a typical trailer lock.

You can buy these most home depot loads that kind of place. Um and inside this thing is a locking lever and this is just a piece of metal. I mean literally I could probably find a wire on the ground outside and you stick it in the keyway and it's open. I I don't need a key or anything. I just need to pull that locking lever back that's exposed inside the lock. Um, so Y, come down here and open this up for me. I'll call people out. They were my interns. And of course, the rest of them are all scared right now cuz I got four in the room. Come on down here. >> Bob will take you through it as we go

through other locks. >> I want other people to realize people realize how bad these locks really, really are. Um this is a lockout tagout uh lock. >> So what do you do? >> This is a lockout tagout lock. Uh how many people here know about lockout tagout? It is critically important if your job is to work on electrical or uh pressure systems or anything that's volatile uh and you're going to work on any part of your system make sure good job. So why is it critical? >> So because if you're working on an electrical circuit, you're supposed to to isolate it two circuits up from where you are or a pressurized valve. You're supposed to block off two sides from

that valve all the way back. And you need to lock out what that looks like. Um and I actually have a lockout tag out piece, but I didn't actually expose. Um and what it does is you put your lock in the employee, the supervisor puts their lock in it. Everybody puts their lock in it. >> Oh yeah, those. >> And it goes around the thing that's locked out. So these things generally have really good pick resistance. Um not this one, but generally they do. This one, I mean, this isn't even a pick. This is like Well, it's a watered pick, but um tool in there. Um but yeah, it's it's really awful cuz it just falls apart

when it comes apart. Um, here actually here. Okay. Not pick, but once again, that piece of metal that we just opened that other lock with. Oh, by the way, the worst locks I found that you can pick like this are the TSA locks. >> Okay. >> Um, anything that's got a TSA 7 or whatever. You can buy the keys. I mean, anywhere. Um, but you don't have to buy the keys. Literally >> printed, too. >> Yes. >> Can't you 3D print those? >> TSA keys and all of them got leaked on the internet. You can literally print every single one. They have STL files. Just Google it. >> And by the way, this is the same magical

tool that guy just opened this lock with. Just literally a piece of metal. And I'm And this is a dimple lock. You would think a dimple lock would be a little harder to deal with. But no, you just wiggle it around enough and finally it'll just fall. So here, floor. Go for that. Um, these are some of the oldest really stupid locks out there. This is called a warded lock. They have a separate kind of warding for each lock. But if you just Thank you. Um, but this is like the master warding lock. So, you just stick it in here and you don't even wiggle it hard. You just wiggle it a little bit and it pops open. And just to make sure

once again it's not a fluke, here's another warded lock and it just pops open. Um, so you know, if you're using warded locks in 2025, please don't. Warden locks are an old design that predates the normal pin tumbler. They basically use metal bars like boards so that you can't turn the incorrect key. >> Have you ever heard the term skeleton key? >> This is a skeleton key. >> It is actually skeletonized key. They cut away all the wards leaving only the turning part allowing us to open multiple locks. So that's where the term actually comes from. >> Um so I'm old. I used to do construction for a living. My dad did construction as well. and um I got all of his stuff

passed down to me um when he passed away. He used to also be a a a district guy for a like a maintenance director at a school district in the Coastal Bend area. We have approximately 270 cubes um that are in the family that I have kind of inherited and pulled out of tool boxes and all kinds of other stuff. >> What's your favorite one? >> Great question. Um, it would not be this one because this one is for this really crappy lock. Um, it would probably be uh where's that A bus one? That's just absolutely insane. Oh, here we go. Here's my AU range. I actually have them set up by type. So, this is a uh Oh,

there's the lock pickers. Uh, what is it? United have a ranking for how hard a lock is to pick. And they go start off with white belt like this. That's a white belt lock. Um, and we need somebody down here to pick it. Um, any intern want to come down now? >> Okay. Hi, Derek. You're never wearing intern, but I'll I'll call you one. Come on down. >> Um, do the blocks and stuff. So, let's see. Is this it? No. Let's see. A did put that away, didn't really tricky lot. to open. Uh if you were trying to pick it like if you were lockers

>> Oh, I know. >> That is unlocked. >> It is quite literally a key. >> Oh my god. I saw one on here somewhere in this >> one.

>> This is a key for a water level. >> Tiny. >> And you notice the similarities. >> Oh, >> all this ordering has just been simply removed. There are a few different designs. One more common, but that's all. Let's go. Oh, >> that's why they're so easy to open. They're very basic and simple >> and they're still used. >> Yeah. So, the next set of blocks that we want to talk about that are really crappy are these. These in the 1920s, they did write a vulnerability. This one guy that was a locksmith said, "These locks are really, really bad. You can take all of the pins in them, push them up to the shear line, and turn the cylinder." All

the lock manufacturers said, "Sh, shut up. Don't tell people." So, um, then you make these things. These are tools to push those pins to the shear line really easily and turn those blocks. So, you might have noticed like on a plumbing truck going down the road, one of these types of blocks, no shack can't cut it. It weighs a lot and you can't get to the deal to open it or anything. >> Do they know what Shirine is? ah shear line. That's where I like all the pins block each other when you're trying to turn. That's what keeps a lock from turning if those pins are in the way. But if you can push all of the pins to

the shear line where everything turns, you just open it. And I mean it opens faster than a key. It's pretty sick. Um so yeah, you push it in. You push all the pins up. You just turn it. >> That's pretty much the action that you need to use muscle memory wise. >> The basics of the flaw is there's a pin chamber that holds the spring, the dryer pin to keep it. You're supposed to lift the line to the shear line. Now, there's nothing in the way it could work and turn. And this chamber up here just go right there. So, there's basically a chamber here with a spring. And it's supposed to only be big enough for one

and partial of this pin. Unfortunately, they made them way too long. So, literally both pins fit in this chamber. >> And the actual pin on the comb pick rests right there at the shine. >> So, you don't need to know what the pattern is. Just show everyone up there. >> Yeah. >> Friends don't let friends buy these locks. What you say? >> And this law's been around for more than 50 years. They still sell lots of >> 200 years. So, 107 years in counting. And they literally these locks were purchased either on Amazon or at HB or whatever Home Depot uh not very long ago. >> These are not old outdated locks we're showing you. These are brand new locks.

>> It's exist. >> Um so yeah, and and this tool is I think $13. >> Um a lot of the tools that you're seeing here are from Covered Instruments. Some are from Sparrows and others that we're using. Um, that one piece is just a piece of metal that came with a lockpick set. It was really cheap, but I like it because it opens like all the stupid stuff because a piece of metal. Um, so, uh, yeah, come down and bypass the lock, >> huh? Come on.

where there are different types of >> commercial. So that really big one over there is from Abus. That's a crappy design. This is from Abus. It is not. This is a very good design model. >> It uses nice and shiny.

[Music] Can I have a copy of that? >> Thank you very much. I really appreciate you. So, this is like a dimple lock. So, there's no edges of this lock. It doesn't use like because it's nicely German engineered. It works beautifully. I mean, it really does. We're not bypassing this one. This is very well. This is a very well engineered clock. >> I'm getting We're getting >> What's funny, of course, this is by the same company that makes the one that I just bypass. >> So, is it a cost thing? Like, in other words, that one's like 15 bucks and that's like 50 bucks or something. I It might be cost or maybe it's just they

already have the tooling that All [Applause] right. Um, and thing about these things, they really make a great way to keep your locks if you own a lot of locks, which I do. Um, so at my HOA, um, they said, "Hey, Paul, we're going to go and, uh, take this lock off of a gate in the neighborhood." And I go, "Oh, mind if I try?" And um we're not going to do this one today because it takes a a severe amount of determination. Literally to do this one because the keyway of this old one is so tight. I had to take a rock and pound my bypass driver into it. And when I got it to the

very bottom, I could pop it and I popped the lock open. Then I took a pair of pliers and pulled the thing out. And um but I don't have a key to it, but I know I >> Number two. All right. Number two. So, >> but I do have the equivalent. This is >> This is basically a clone of that lock. Difference is it's got a bigger keyway, so it makes it a lot easier to put a key bypass tool in >> and open it up. >> Now, you can buy these all day long over at Harbor Freight. It looks substantial, >> but it doesn't really care much if you have one of these bypass drivers. It's a

very well-known flaw. What they did is above where all the key mechanism is, cuz I'm not turning the key mechanism at all. I'm turning the little part above the key mechanism that opens the lock. I'm literally bypassing the lock and turning the part above it. And they didn't fix this. What I mean by fixing it, do I have my red one up here? Do I? >> No. So, I do have a nice cutaway. There it is. So, here's the locking piece. >> And then above it is a little brass piece on top. Between those two is a wafer that keeps me from passing this prevents me from getting that tool past the locking bed. I'll pass the keyway to the locking

mechanism and then releasing the locking mechanism. >> Smart. Well, they started putting those in in 2009. >> Oh god. >> So, prior to 2009, those millions and millions of locks they made >> are vulnerable to a bypass, right? >> Fortunately for me, >> SF, if you look it up, that's the date code. And it tells you this was made in 1990. It's got a really spring. >> So, I know this one is bypassable. >> Except you have it's got a narrower. >> It does have a narrow keyway on this particular 700. They did make them with wider keyways at the time. >> So, but yeah, but I knew if I drove that thing in there, it was going to pop.

>> Wow. >> So, >> is there such a thing as as like So, even if it's a a tight keyway or an old, it's been sitting out hanging on a fence for years. >> Oh, this was nasty inside. It was absolutely >> like do you WD40 it or something or is there something to do? >> WD40 is not recommended. It is a heavy oil um lubricant. LPS1 is a light lubricant like silicon based. It is a proper lubricant for locks, not WD40. WD40 will leave it sticky and nasty after time. >> So, hey. All right. >> Here you go. have a fine festival. >> Awesome. >> Nice.

>> All right. So, this is an American lock that was on the uh table over there. I don't have a nice passable like this one. >> So, hopefully I'll be able to bypass this pretty easily. And you go backwards just a little bit and it should drop into place. Ah, there it goes. And then it opens up. So this this is like a lock that was prior to 199 or sorry 2009. But you can open these things up, disassemble the lock and put a wafer in there to keep this from happening. >> They make a tool. >> But this man in his little bag of tricks has the tool to break that wafer. >> Yes, sir.

>> You know the ones with like the circle you got to turn it. >> Oh, like like they have on Coke machines. >> Yep. No, not the not the school ones. I thought about was like like the Coke machines. >> Like the Coke machines. We'll talk about that in a minute. But let's talk about these uh now that we kind of show that you can bypass this thing. Uh anybody want to come down and bypass this thing? Come on down.

>> Let's see. Um, you're asking about I wasn't really prepared to talk about that, but I did happen to bring it >> and and I don't know if it's going to >> actually work. There's a bunch of other magic tools that you can buy and use do things with. >> No. >> Okay. >> You're not sluck

in. All right. >> Oh, the back. I thought this was part of the luggage, but it wasn't. >> So,

here we go. >> Hello. >> Thank you. >> So, this is considered high security. >> You're talking about a lot like this. >> Exactly. Like you're saying security >> is security. >> Well, the problem with most security stuff is what they they talk about. They're securing certain aspects but leaving other aspects wide open. >> Right. Okay. >> Like have you ever heard of the ANC rating on door locks, it's it physical destruction resistance. It has nothing to do with pick resistance. >> I've got an ANC rate 3 that's super built and tough and go and open it in seconds. >> They armor at one point but leave a gaping hole. It's like locking your door

with a good lock or leave your window open. >> Like, what's the point? >> Okay. It's like >> your security is only as good as your weakest link. >> Right. Right. It's like you just got this giant wall of like lead and steel in front of you, but somebody just walk right around it. >> Have you ever seen the movie Red? >> No. >> Well, there's a scene where you talk about this super old door. Code changes every like 30 minutes or something. Something ridiculous. He takes his gun, shoots through the wall. Wow. >> And just pops the lock from the other side. How did you secure yourself against pig lock? >> Lockp picking? >> Yeah.

>> So, there's a number of factors with lockpicking. What makes lock difficult? One of which is number of pins. More pins, better luck. Usually, there's exception to everything. >> Another thing is the tolerance of how well is it actually made? Something like a master, it's got to >> Okay, I realize how >> something like this one. >> Okay. Then comes the next one. Floss. >> Where's the HD? >> Let me go get the um like the British. >> You talking about the European stuff? >> Yeah, they're like >> That's correct. Like in the key? >> No, it

What's that? It's a brand. It's a famous British brand, >> you know. And there's a there's a lot of different patterns, all kinds of other stuff out there. >> Um, yes, we have our >> main

stuff, it's usually a 10,000 or a 30,000 cuz it's not how close it has to be. >> So you should be able to see. Please let me know. >> So the the narrower the closer it is to actually good or not. So say I make a part I have 30,000 room. Let's say I make it 5,000. That one was good. But the next one I made it 20,000. That one's still good. >> So it kind of gives a room plus for manufacturing things together. But it also gives us a way in >> once again. This is the Jupiter pick. Um, and you just reset it and you pressure it into the lock and it actually picks every single pen at the

same time. >> I'll take the angle.

>> Is the mic hot? Is this where I should be speaking? >> No. So, how are they getting audiences? A lot of elevator locks are the same lock. >> Um, and there's one other lock we want to show.

>> So, so this is a combination lock. >> Okay, good.

>> Awesome. Thank you very, very much. And is this >> is this is this ours or yours or was this just here? >> But you can use it. You can we have a uh >> Well, no, no, you're fine. I don't need to change that. I'm just going to plug it in over there so I can advance my slides right? >> Is that cool? >> So, you're going to need a USB. >> Uh I can Yeah. Or or I can just push >> Yeah. Yeah. Is that okay? >> Yeah. >> Do I just need to turn it on, right? Or No, it's on. Okay. Um I think like the next speaker actually I'm not trying to make you crazy. I just

wanted to like set up while you're doing your thing. >> Oh no, that's fine. So making sure it works. >> That's that one. I mean we have other here. You want to go ahead and pop >> no work quick. >> You want me to pop these? >> Yeah. Yeah. He's going to pop and then pop your while you're at it. >> Yeah. >> And there's one other tool here. >> And unfortunately, I don't have the uh equipment to demonstrate. If you have if you have an old quick set lock on your house, um that old quick set lock has a ring around the bottom of the uh door. If you pop that ring off, there's certain

holes. I mean, on the outside of the house, there's certain holes on the outside where that kind of pops in place. You can take this tool, feed it through one of those holes, reach up and grab the what is in in in essence the locking button on that lock and actually pull that around and then just open the door knob and walk right in. doesn't work on the dead bolt, but it does work on the um the hand uh hand, you know, knob and everything. So, yeah, this is the quick set bypass tool um for quick set and wiser knobs. >> Pretty cool. Unfortunately, I just don't have the equipment to show this thing off, but it's so nice.

>> How secure are >> Oh, no. Yeah. Show those combination lockers, too. Is there >> anyone know what this is? smell like my chucker. >> So, any idea how you would attack this? >> Possibly, but that evidence. >> I do like it. >> You ask if it's vegetarian colors, right? >> Yes. I mean, you could keep >> wait. So, basically there's a little locking shim in here and you can slide a piece of metal just around it. That can just and basically everything that we showed clearly, >> we're not picking pins. We're not hacking numbers. We're not worried about what the key looks like. Every one of these locks don't buy. >> This is not a special tool. This is a

thin piece of metal. I can make the same thing with cocaine and pop that

question like how how care

if you have an older quick set lock that has just pins in it. It's hardly probably not very secure. If you have a generation 3 that has the actual, you know, where you can yourself, those are actually relatively secure. There are a couple of ways you can attack those. One of them is a $350 camera that's shaped like a quick set key that goes in the keyway and actually looks at exactly the position of every single part inside that block and will decode it. >> Then you could actually take the video that you made with your camera key and go cut a key for that lock. >> It's kinders are a lot like hackers, but

if you make something, they'll find a way. >> Yeah. No matter what it is, they'll find a way. >> Let's give a round of applause for our presenters here. >> What a great presentation. If if you have more questions, I'm sure y'all are happy to take some outside. >> Yeah. So, uh and there's a couple other bypasses they can show on the table like on this one. This is like almost every commercial door lock at any mall you can pop with this guy. >> So, we are running behind so I apologize for pushing us back to schedule. Uh we have uh SAG nerd. Uh he is going to be presenting how to create your own lab

for the next hour.