[00:36.590 --> 00:40.630]  Most locks are not engineered to supremely high tolerances.
[00:40.630 --> 00:44.970]  Most locks look, and this is exaggerated, something like this.
[00:45.330 --> 00:49.270]  Imperfections in the machining process leave those pinstack cylinders
[00:49.270 --> 00:53.250]  out of alignment. And any slight deviation
[00:53.250 --> 00:56.670]  in that alignment means that when you torque the plug
[00:56.670 --> 01:01.150]  there's really only one pinstack binding at any given time.
[01:01.370 --> 01:05.270]  This is what makes picking possible at its most basic level.
[01:05.270 --> 01:08.690]  Because if you apply a little bit of pressure on that plug
[01:09.270 --> 01:11.530]  you can do what's called setting a pin.
[01:12.790 --> 01:16.450]  See we're going to torque this and if you reach in there and start pushing on
[01:16.550 --> 01:19.690]  a pinstack, eventually you'll reach the right height
[01:20.230 --> 01:24.090]  and the pin will clear. The shear line is met and it'll spin.
[01:24.470 --> 01:27.550]  Now granted there's not a single pinstack
[01:27.550 --> 01:30.750]  in a lock, there's a row of them, but because
[01:30.750 --> 01:34.150]  you notice when it clears this is holding up the driver
[01:34.910 --> 01:39.430]  that driver is now out of the equation. That driver pin will not slip back down.
[01:39.570 --> 01:42.930]  You can keep pressure on this plug and go through the stacks
[01:42.930 --> 01:47.390]  one at a time, setting them and opening the lock. It looks a little like this.
[01:48.190 --> 01:51.390]  A tool called a torque wrench is put in and a little bit of pressure is put on
[01:51.390 --> 01:54.370]  the cylinder. A pick tool, in this case we're just
[01:54.370 --> 01:57.370]  doing pin by pin picking, goes in you reach, you reach, oh here's one that's
[01:57.370 --> 02:01.790]  binding. When we set it, it clicks. Keep reaching, keep reaching, and oh
[02:01.790 --> 02:05.170]  there's another one. I feel it binding. That plug will click a little more and a
[02:05.170 --> 02:08.850]  little more and eventually you can have them all one at a time
[02:08.850 --> 02:12.550]  open. This is not not complex. It's not in the
[02:12.550 --> 02:15.510]  same order every time because those imperfections, remember they're not
[02:15.510 --> 02:18.250]  planned, so which pinstack is binding in which
[02:18.250 --> 02:23.090]  order always varies, but the principle is the same.
[02:24.230 --> 02:28.190]  And everyone give me some some goodwill and let's kick it off the right way.
[02:28.190 --> 02:31.150]  Hopefully not have a demonstration effect hit us and let's see what we can
[02:31.150 --> 02:35.770]  do with this lock in front of us here. Is that in pretty good focus with my
[02:35.770 --> 02:38.170]  craptacular webcam setup?
[02:43.590 --> 02:47.930]  What I'm using is called a jackknife set. It's a nice little compact job.
[02:47.930 --> 02:51.730]  I think the Irvine guys have these here this year. Anybody checked out the
[02:51.730 --> 02:55.030]  vendor areas? Irvine Underground has their spread of tools out there.
[02:55.410 --> 02:59.150]  Yeah, good guys. So this is, this is your basic
[02:59.150 --> 03:03.770]  cheap master lock. You'll find I beat up on master a lot in this talk,
[03:03.770 --> 03:06.970]  not because they make the worst locks out there, but, you know, they're
[03:06.970 --> 03:08.690]  definitely in the business of it.
[03:10.850 --> 03:14.310]  But honestly, I mean, we'll cover later a lot of what, you know, Mark was saying
[03:14.310 --> 03:16.090]  and how many people were at the last talk?
[03:16.090 --> 03:19.590]  The ethics of full disclosure. So you realize a lot, you know, can you really
[03:19.590 --> 03:22.270]  blame companies for making crappy locks if the
[03:22.270 --> 03:25.450]  consumers continually buy them? And can you blame the consumers really
[03:25.450 --> 03:27.730]  for buying crappy locks if they don't know they're crappy?
[03:28.550 --> 03:32.210]  Exactly who's to blame is, is really kind of up in the air, but one thing is for
[03:32.210 --> 03:35.590]  sure, these aren't really the most skillful locks ever.
[03:38.670 --> 03:40.250]  Yeah, so the lock is open now.
[03:45.320 --> 03:50.660]  Thank you. That, that's as simple as it is. Literally, you just reach in
[03:51.700 --> 03:54.240]  a little bit. This is that, this is that torque wrench I was showing you here.
[03:54.240 --> 03:57.420]  Are we still in frame? There we go. This is, this torque wrench just slips
[03:57.420 --> 04:02.300]  right down in the keyway. A little bit of torque and pushing those
[04:02.300 --> 04:05.460]  pins up. We're going to do a hands-on session when all this is done, by the
[04:05.460 --> 04:08.160]  way. I invite people to come and actually try this. You'll,
[04:08.160 --> 04:10.220]  you'll be amazed how easy it is. Question?
[04:13.100 --> 04:17.380]  Yeah, so everyone has their own technique that they like. In fact, you'll see some
[04:17.380 --> 04:20.360]  people like to put the torque wrench up in the top of the keyway.
[04:20.620 --> 04:23.340]  Mouse, you like that. Some people seat it down low.
[04:23.700 --> 04:27.280]  I tend to just hold it right in my hand, just let the, the torque wrench give
[04:27.280 --> 04:29.220]  pressure this way, because as I mentioned,
[04:29.220 --> 04:32.860]  the two biggest mistakes people make when they're first practicing this, when
[04:32.860 --> 04:36.700]  they first want to get into it, is too much effort. Some people put too
[04:36.700 --> 04:39.480]  much pressure on the wrench, which just means the pins are going to
[04:39.480 --> 04:43.800]  jam so hard you can't push them. And some people push the pins so far up
[04:43.800 --> 04:47.920]  that the driver clears and then the key pin goes up into the
[04:47.920 --> 04:50.520]  shear line and get, you fault, you set it way too high.
[04:50.520 --> 04:53.760]  The only way is to release pressure, let them all drop and try again. Like,
[04:53.760 --> 04:57.300]  the way I try to describe it to people, imagine you,
[04:57.300 --> 05:01.480]  well, could be applicable here. You just woke up, you're still hung over,
[05:01.480 --> 05:05.880]  you just smoked a fat cannon, and you're like 10 times more mellow than that.
[05:05.880 --> 05:09.620]  Like, dial it down a lot if you try to pick locks and it's not working for you
[05:09.620 --> 05:12.680]  when we're doing the hands-on thing. Chances are it's the lightest amount of
[05:12.680 --> 05:16.600]  pressure you could ever need. And that's really, there's, there's not
[05:16.700 --> 05:21.260]  a whole lot to it. That's the basics. So, how do we, how do we make locks
[05:21.260 --> 05:23.960]  better? How, how is a lock, you know, everyone's
[05:23.960 --> 05:26.800]  going to say, well, crap, I have locks like this, am I at risk? No, you're not
[05:26.800 --> 05:29.120]  really at risk. There are better locks out there.
[05:29.320 --> 05:32.960]  No one talks about this stuff, so no one buys them, but there's a whole lot of
[05:32.960 --> 05:37.340]  high-end features that locks can encompass, and I will cover them now.
[05:37.920 --> 05:41.540]  There's things called secure pins. There's a lot of other advanced features
[05:41.540 --> 05:44.960]  that specialty locks have in them. First, let's talk about secure pins a
[05:44.960 --> 05:48.540]  little bit. This is our same design, the same pin
[05:48.540 --> 05:51.580]  stack, but you notice the driver is a different shape.
[05:51.580 --> 05:54.920]  This is called a mushroom top pin or a mushroom driver, and you can,
[05:54.920 --> 05:57.440]  you can really just picture it, how pretty easily, if you were to try to
[05:57.440 --> 06:00.120]  torque this, that's going to bind up on the lip. It's
[06:00.120 --> 06:03.080]  going to get in your way. It's going to be just a real disaster to try to pick
[06:03.080 --> 06:07.580]  that. It's, it's a real headache. Another type of specialty pin is what's
[06:07.580 --> 06:09.980]  called a spool pin. They can have a notch that's big or
[06:09.980 --> 06:13.120]  small cut into it. Spool pins are even trickier,
[06:13.120 --> 06:17.160]  because you get the sensation of clicking and set it. You're like, oh, I
[06:17.160 --> 06:21.520]  felt it move. I must have set something. No, you really didn't. If you ever have a
[06:21.520 --> 06:23.740]  lock that you keep trying and trying and trying it, you're like, what the hell is
[06:23.740 --> 06:25.940]  wrong with this? You may have a spool pin in there.
[06:26.780 --> 06:30.440]  If you want to defeat high security pins and the other kind of,
[06:30.440 --> 06:33.700]  there's another called serrated pins. They just jam on everything, and they're
[06:33.700 --> 06:37.320]  just kind of a bitch. Yeah.
[06:38.120 --> 06:41.120]  If you want to defeat any type of, you know, if you want to pick, usually you'll
[06:41.120 --> 06:43.040]  use a tension wrench that looks like this.
[06:43.040 --> 06:46.740]  They're usually called feather wrenches. It's the very, very light
[06:46.740 --> 06:49.780]  amount of torque, the lightest amount you could ever imagine.
[06:51.280 --> 06:56.340]  Hey, what's going on, priest? No problem. Bring him on in. We're having a good time.
[07:03.490 --> 07:06.530]  Hey, with this being such a long talk, are you going to do a spot the Fed maybe
[07:06.530 --> 07:13.350]  in the middle of it, if we want to break it up some? So yeah, if you use a very,
[07:13.350 --> 07:25.180]  very light touch on the wrench, you can actually force the pin stack. Yeah,
[07:25.180 --> 07:28.280]  there's some seats up here. Raise your hand if there's some extra seats near
[07:28.280 --> 08:04.850]  you. We got, yeah, there we go. Still more over here. All the way down. You
[08:04.850 --> 08:21.510]  don't have to stand on the wall. Come on, everyone else got up friggin' early,
[08:21.510 --> 08:26.830]  and they're in their seats. You're holding up the show. Yeah, give him a
[08:26.830 --> 08:53.570]  chance. All right. We'll get it eventually. Just calm, small words.
[09:10.710 --> 09:14.070]  This is priest, everybody, for anyone who has not met. How many, how many people is
[09:14.070 --> 09:18.870]  this your first DEF CON? Welcome, absolutely welcome. He is kind of the
[09:18.870 --> 09:22.390]  epitome of the goon squad. They're really, they work hard, they make sure everything
[09:22.390 --> 09:26.670]  flows right, and we always appreciate all they do for us. So just, if they ask you
[09:26.670 --> 09:35.900]  to do something, just do it. Anyone who's had the pleasure of comparing dealings
[09:35.900 --> 09:39.480]  with the goons as opposed to dealings with AP security knows which end of the
[09:39.480 --> 09:48.510]  stick you want to be on. So, those were advanced pins, and we can defeat them,
[09:48.510 --> 09:51.690]  you know, defeat is kind of a rough word, but with that feather touch wrench.
[09:51.710 --> 09:55.390]  What about even more advanced features? Because really all this takes is a
[09:55.390 --> 09:59.050]  specialized tool and a little bit more patience. What if you want something even
[09:59.050 --> 10:03.810]  more secure than that? Well, some locks, even in the basic pin tumbler design,
[10:03.810 --> 10:07.410]  do incorporate additional security features, and we can cover them now.
[10:10.430 --> 10:15.830]  This is called a Schlage Everest lock. You can see that it has a normal complement
[10:15.830 --> 10:19.730]  of pins, just, you know, pin stacks like we've been looking at before, but up
[10:19.730 --> 10:23.350]  underneath the bottom of this plug, there's something called a check pin.
[10:24.330 --> 10:29.030]  By the way, this is, this will be for a couple of light, we have a lot of
[10:29.030 --> 10:32.550]  leftover bottle opener lighters from the BCCC event. This will be for a couple
[10:32.550 --> 10:38.130]  of lighters and a Red Bull. Who can tell me where at a previous DEF CON did a
[10:38.130 --> 10:44.550]  Schlage Everest lock appear? It was part of the obstacle course. I need more
[10:44.550 --> 10:53.050]  specific. It had a specific name. Two years back. Nobody? It was a big blue
[10:53.050 --> 10:57.230]  lock. Nobody remembers? Come on, I know you're, a drink and a lighter. Nobody
[10:57.230 --> 11:02.370]  remembers? What? The beer lock! Yes, it was the beer lock, which no one opened.
[11:04.290 --> 11:10.390]  Way to go. And it's a shame no one opened it because this is actually pretty
[11:10.390 --> 11:16.670]  easily beaten. As you can see, this is the plug up underneath. You can see this
[11:16.670 --> 11:20.450]  check pin sticking through here. Now that engages with part of the outer shell
[11:20.450 --> 11:25.110]  and this is not going to rotate unless the pins up top are set and this is
[11:25.110 --> 11:30.610]  pulled out of the way. You can see this little bar. Well, that little bar engages
[11:30.610 --> 11:35.630]  with a big groove slot on the side of the Everest key. You can see most keys do
[11:35.630 --> 11:39.470]  have grooves. They actually, they help seat the key in with what are called
[11:39.470 --> 11:44.110]  wards. Those protrusions are called wards that seat the keyway. This, however,
[11:44.110 --> 11:48.190]  the groove is deep because it actually picks up that pin and as the key travels
[11:48.190 --> 11:52.610]  down the keyway, it lifts it up and out of the way. Well, it didn't take people
[11:52.610 --> 11:56.490]  too long to realize that you can just make a tension wrench with a nice long
[11:56.490 --> 12:02.450]  finger and pick up the pin that way or you could take an Everest key, cut the
[12:02.450 --> 12:13.760]  hell out of it, stick it down the lock and use that as a tension wrench. By the
[12:13.760 --> 12:16.800]  way, we want to thank Matt Blaze for a lot of these beautiful photos you see. I
[12:16.800 --> 12:20.700]  referenced him later. He's a real groovy cat and he was very kind and let me use
[12:20.700 --> 12:25.640]  these. For a, let's see, we'll still work, we've got a lot of Red Bull. We're
[12:25.640 --> 12:29.660]  keeping working. For a Red Bull, can anyone tell me the name of the vendor who
[12:29.660 --> 12:35.120]  manufactures and sells these Everest picks? Don't please shout and no, it's not
[12:35.120 --> 12:40.880]  Southern. Let me see. You've won stuff. Wait. Yes. Yes, it is Peterson
[12:40.880 --> 12:53.730]  International. Very good. Applaud for the man. He knows cool shit. Yeah, this little
[12:53.730 --> 12:58.870]  Everest. Yeah. Yeah. Yeah, the question was, is that simple? Yeah, as far as I've
[12:58.870 --> 13:04.950]  seen, all the plugs have that. Yeah, these are the Peterson wrenches. They come in
[13:04.950 --> 13:08.270]  two different, you know, there's a left and a right one. And they're really
[13:08.270 --> 13:11.030]  excellent. They're very well made. Peterson, we talk about Peterson later in
[13:11.030 --> 13:16.070]  the talk. They're a very good supplier. They're good people. So, we're moving our
[13:16.070 --> 13:20.130]  way up from like ass-tacular security to almost good security. Let's talk about
[13:20.130 --> 13:26.990]  very nice security. This is called an Assa V10 Twin. This is a very popular lock
[13:26.990 --> 13:30.550]  in Europe. You don't see a lot of Assa locks in America. You actually don't see a
[13:30.550 --> 13:35.690]  lot of very good locks in America. There's maybe one brand. But Assa is a very good
[13:35.690 --> 13:39.610]  lock. And you can see it has a traditional pin stack with, as you know,
[13:39.610 --> 13:43.450]  it's secure. This is a spool pin up here. And the spool pin even has an extra lip
[13:43.450 --> 13:49.870]  that really binds up hard. But next to that, there's a tiny pin stack seated way
[13:49.870 --> 13:54.190]  down on the side. And you can tell that only if these pins are lifted to the
[13:54.190 --> 13:59.910]  right height, can what is called a sidebar fall inward. This sidebar, unlike
[13:59.910 --> 14:03.970]  remember the check pin was seated down here. The check pin was vulnerable. You
[14:03.970 --> 14:08.850]  could grab it from the keyway. The sidebar cannot be grabbed by anything you
[14:08.850 --> 14:13.410]  stick down the keyway. The only way the sidebar is going to move is if these
[14:13.410 --> 14:17.110]  tiny pins on the side, which are really hard. You can't really insert picks in
[14:17.110 --> 14:20.750]  there. It's a really tiny space. The only way the sidebar is going to fall inward
[14:20.750 --> 14:25.630]  is if that is raised up. Now, I don't know if you can see my faint text here.
[14:25.630 --> 14:29.330]  These are very secure. But the person, in fact, who first showed them to me, a guy
[14:29.330 --> 14:32.650]  named Barry Wells. How many people know Barry Wells? How many have ever heard
[14:32.650 --> 14:37.790]  him talk at Hope or anything? No? Oh man, you guys got it. He is... I'll show you
[14:37.790 --> 14:42.870]  his videos later. He's a real amazing cat. Barry, who was a big fan of this lock,
[14:42.870 --> 14:46.970]  was very disappointed when he found out there is what he calls a geographical
[14:46.970 --> 14:51.870]  weakness. You can see this lock right here with the cuts on a key. That's
[14:51.870 --> 14:56.290]  called the bidding. The bidding cuts are normal cuts right here. And you can see
[14:56.290 --> 15:03.450]  the sidebar cuts down here. What's up, X? Oh, more free stuff? Oh, yes. Agent X,
[15:03.450 --> 15:07.370]  everybody. He's running the show as well with the speakers. Big hand for him.
[15:12.520 --> 15:18.820]  In my hand, I have some individually numbered issues, hardcover, a Frac 63,
[15:18.820 --> 15:24.940]  final issue. They're so warm. They're still warm from the presses and from
[15:24.940 --> 15:28.820]  their total hot, the coolness. We're going to be schwagging them out tonight.
[15:28.820 --> 15:33.320]  He's going to be schwagging them out right now. Will this be for questions or
[15:33.320 --> 15:40.760]  just for fanfare and pandemonium? I don't want arms ripped off. We're all
[15:40.760 --> 15:47.000]  gentle human beings here, I'm sure. Not savages. Except for that guy.
[15:50.900 --> 15:55.640]  And they're individually numbered. They're giving away issue number 13
[15:56.120 --> 16:21.760]  in the Apollo talk. That's cool. Limited edition, people. And here I thought I was
[16:21.760 --> 16:30.930]  just going to give away little cheap Red Bull and lighters. Okay, just so we're
[16:30.930 --> 16:37.870]  clear and there's no conflicting orders, do not stand in front of the doors. Yes,
[16:37.870 --> 16:44.850]  sir. I'm looking right at you with the backpack. Can we get a hand raise again
[16:44.850 --> 16:48.170]  real fast if there's any more seats? Do they all go? There's a few more seats,
[16:48.170 --> 16:53.450]  people. I know it's nice being able to have that room to spread out, but come
[16:53.450 --> 16:56.070]  on, really, raise your hand if you got room. I need the people back there by
[16:56.070 --> 17:03.290]  the door. You three in black. I need two people in the aisle. Hang on, we're
[17:03.290 --> 17:06.470]  getting there. And yes, I know everybody's in black, but I just pointed
[17:06.470 --> 17:13.170]  to you. We got one seat here. Fine looking gentlemen, ladies, come on. You
[17:13.170 --> 17:23.740]  know what? I'm going to bring you down. You, sir, in the yellow shirts, come
[17:23.740 --> 17:32.300]  up. Okay. I need to be able to see the doors. I can't see the doors. Thank
[17:32.300 --> 17:37.760]  you. No, this guy's not feeling any love right here. This is prime seating,
[17:37.760 --> 17:44.520]  especially if I start throwing stuff. Okay, we've got one more seat. Yeah,
[17:44.520 --> 17:51.380]  send him up, Jay. All right. Just please keep your feet tucked in. Please
[17:51.380 --> 17:54.920]  keep... I got one more seat. Send me somebody from this side of the room
[17:54.920 --> 18:00.100]  over here. Somebody raise you up in the white shirt there. Yes, you. Come on
[18:00.100 --> 18:05.280]  down. You're the next contestant on Get a Better View. Sir, in the yellow, right
[18:05.280 --> 18:11.640]  there. Is there one more, sir? Is this guy? He still needs a spot, right? You
[18:11.640 --> 18:17.100]  want to move right in there? Yeah, you do. We got... is that seat? Right here,
[18:17.100 --> 18:22.660]  guy. All right. Is there any more seats? Because I overbooked. Yes, sir, right
[18:22.660 --> 18:28.680]  over there. Okay, please keep the aisles clear. I've got to be able to see the
[18:28.680 --> 18:32.120]  doors from the stage. That means if I see you standing in front of the door
[18:32.120 --> 18:34.960]  from the stage, you're in front of the door. Okay, the only reason we're doing
[18:34.960 --> 18:38.400]  that is if a fire marshal walks in, we have the illusion of we didn't overbook
[18:38.400 --> 18:42.980]  too badly. We're trying to get as many people in as we can for the popular
[18:42.980 --> 18:46.600]  talks. Okay, we're working on something for next year. We didn't have a chance
[18:46.600 --> 18:49.840]  to implement it this year. Hopefully we will have it up and running by next
[18:49.840 --> 18:53.380]  year, where we'll have some type of signup system where you can sign up for
[18:53.380 --> 18:56.360]  the talks that you want to see. We'll have you... with the signup, we'll have
[18:56.360 --> 18:59.660]  you line up in one line. People who want to see it but didn't get to sign up
[18:59.660 --> 19:02.660]  will line up in another line. So it'll be first come, first served. There won't
[19:02.660 --> 19:06.340]  be this rush to the other line, you know, 30 minutes after you're into the
[19:06.340 --> 19:24.960]  first talk. So you get to the other talk you want to see. But for now, what we're going to do is we're trying to get as many people in as we can. We have actually quadrupled the seating for last year. Okay, you'll notice that what we found was the fire marshal was working from a four-year-old
[19:24.960 --> 19:29.360]  occupancy limit, and we got that updated. That's why there's more people. You'll
[19:29.360 --> 19:32.720]  notice that you guys were in a huge line all the way back around the side of the
[19:32.720 --> 20:01.200]  hotel. I'm not that good. You'll notice that all of you got in, plus everybody was queued up over here. So we got everybody in as we could. We apologize for putting you on the floor like this, sir. Did he smell bad or something, sir? Okay. A little lover's quarrel. We got everybody in as we could. We're sorry you had to sit on the floor. We're doing our best. Please work with us. We appreciate your patience, and we'll keep doing what we can do. Thanks, guys.
[20:07.160 --> 20:32.140]  After this talk, if you buy a pair of lock picks, and the police pull you over, and they find the lock picks, do not say, I'm a hacker, and I break into my client's buildings. We actually had someone do that. Welcome to, you're now in jail for having thieving tools. The correct answer is, I'm going to locksmithing school. These are classes for my tools, or I am an apprentice.
[20:32.640 --> 20:35.020]  We'll cover that. There's a whole legal section we'll cover.
[20:35.020 --> 20:43.340]  I'm a hacker, and I break into my client's buildings. That's breaking, entering, and having thieving tools. So, a little subtlety there.
[21:05.140 --> 21:06.940]  Work that angle, I'm serious.
[21:08.680 --> 21:13.040]  Alright, so we were going to talk about the potential weakness in the V-Twin, right?
[21:14.540 --> 21:15.500]  What's that?
[21:17.220 --> 21:29.120]  Geographical weakness, yes. And the reason we call it that is because these sort of bidding cuts can be... if you've had a key made, you can see the machine's not sophisticated. It's just a grinder that just grinds off the key, does the bidding.
[21:29.760 --> 21:42.300]  This bidding cut down here, however, for the sidebar, is not easily accessible by a traditional grinder machine. It has to be made on a special milling machine. These blanks are special ordered, which actually increases the security.
[21:42.300 --> 21:46.140]  You can't just, no fool off the street can just get a key blank and cut it.
[21:46.160 --> 21:52.740]  But, it's a nightmare for logistics and distribution of locks to locksmith vendors.
[21:52.740 --> 22:07.700]  So, Barry and the people at a German sport group found out that all over Germany and other places, they're just divided into territories, and locks are sold with a certain sidebar bidding in that territory, so that all the key blanks for that territory are there.
[22:08.240 --> 22:14.060]  So, it's not a big weakness, but it's just kind of the cost of doing business, the way the distribution works.
[22:14.120 --> 22:20.700]  They don't just deal over the internet, like a guy at a local shop can't have 80 bajillion of these blanks if a customer comes in.
[22:20.700 --> 22:22.340]  So, it's something to keep in mind.
[22:22.540 --> 22:24.700]  And that comes into play with what we do bump keying later.
[22:24.700 --> 22:25.740]  I see a couple of hands.
[22:27.140 --> 22:29.260]  I do not know how many territories there are.
[22:30.040 --> 22:34.740]  Yeah, SSDevs, we'll talk about them later. They talk about it. Yes.
[22:37.840 --> 22:40.740]  I would imagine someone could be mapping that out potentially.
[22:40.740 --> 22:44.280]  I don't know if you can look at just the bidding and know where it came from.
[22:44.920 --> 22:48.520]  He was asking if you just look at that sidebar bidding, can you tell the territory?
[22:48.520 --> 22:53.220]  Obviously, there's got to be a master list somewhere that coordinates distribution, but I don't know of it.
[22:53.220 --> 22:54.460]  There was one more hand.
[23:01.460 --> 23:03.540]  That's a tremendous question.
[23:03.560 --> 23:13.380]  If simple changes to the driver pins, if the addition of a ridge or a lip or serrations, if they make it so much harder to pick, why don't all locks come with this?
[23:13.380 --> 23:19.900]  And the reason for that is Americans especially, but in general, people are cheap everywhere.
[23:19.900 --> 23:27.200]  You've got a figure that costs X number of cents to introduce that feature into a lock, multiplied by how many you distribute in a year.
[23:27.200 --> 23:30.940]  Someone in a boardroom looked at a spreadsheet and said, no, we don't freaking care.
[23:30.940 --> 23:33.540]  Let's just make them this way. That's the answer to that.
[23:36.040 --> 23:40.280]  Oh yeah, that's a very good point. You can retrofit, you can repin your locks.
[23:40.440 --> 23:42.420]  You can buy pin kits.
[23:42.860 --> 23:46.320]  Because the driver, the height of the driver, the size doesn't matter.
[23:46.320 --> 23:49.880]  It's only these bottom pins that have to be the right size to work with your key bidding.
[23:49.880 --> 23:51.800]  You can retrofit your drivers, definitely.
[23:51.860 --> 23:56.660]  And in the hands-on session, Mouse, if you have the ones that are pulled apart, we can show people how you do that.
[23:58.340 --> 24:02.220]  So, moving onward, that is a very nice... I don't want to knock the V10, though.
[24:02.220 --> 24:05.440]  For that one weakness, it's still a stupendous lock.
[24:06.000 --> 24:08.600]  This, however, is probably my favorite lock.
[24:08.600 --> 24:12.420]  And interestingly enough, it is an American company that makes this lock.
[24:12.420 --> 24:14.540]  How many people have heard of Medeco locks?
[24:15.040 --> 24:16.420]  Now, there's some hands.
[24:16.420 --> 24:20.020]  Medeco is one of the finest locks I can think of out there.
[24:20.020 --> 24:23.060]  I don't work for them. I'm, you know, not dating anyone there.
[24:23.060 --> 24:25.740]  They're just really good. They're really good designs.
[24:26.600 --> 24:34.460]  Medeco keys, besides being insanely restricted and hard to get your hands on, have what's called cross-cutting.
[24:35.140 --> 24:40.240]  And if you can kind of see these pins, you can notice they're chiseled on the tips.
[24:40.280 --> 24:42.560]  They're also serrated, by the way, these key pins.
[24:42.560 --> 24:51.280]  These key pins and these chisel tips actually fit into, you can kind of see here, these cross-cut notches.
[24:51.380 --> 24:55.960]  These pins spin as they track up and down as the key goes into the lock.
[24:55.960 --> 24:57.800]  It's called axial rotation.
[24:58.060 --> 25:07.560]  Only if these pins have spun correctly, lined up a notch on the side, will a sidebar fall inward, and then will the lock open.
[25:07.560 --> 25:09.880]  These locks are psycho.
[25:10.680 --> 25:14.460]  You can't, there's no easy bypass for this.
[25:14.460 --> 25:20.380]  And in fact, the gentleman we've mentioned, Barry Wells, I think is the only man alive who I know who can pick these.
[25:20.400 --> 25:22.840]  I've seen him do it, and I shit myself.
[25:23.160 --> 25:28.900]  I mean, you know, he reaches, he actually uses that finger pick, and he spins the pin by hand.
[25:28.900 --> 25:32.220]  And you can even see, this has a fake cut here.
[25:32.220 --> 25:36.400]  So you can feel like you've spun it and you've caught on something, but it's a fake cut, a deep cut.
[25:36.400 --> 25:38.140]  It's a really hard lock.
[25:38.140 --> 25:41.820]  And for someone like Barry to do it, I've seen him like eight minutes, ten minutes.
[25:41.960 --> 25:48.300]  A regular person, just any guy with any hope of picking this would take like an hour and a half, two hours.
[25:48.320 --> 25:55.540]  If you have a security situation where someone can kneel down in front of a door on your property and fiddle with something for two hours,
[25:55.540 --> 25:57.580]  you've got a whole different set of problems.
[25:59.340 --> 26:01.080]  If they're not getting noticed.
[26:01.820 --> 26:05.300]  So those are some examples of very high security features in locks.
[26:05.300 --> 26:06.480]  These are out there.
[26:06.540 --> 26:08.660]  They're not outrageously expensive.
[26:08.720 --> 26:11.940]  If you, you know, factor in the costs involved, you know, what are many costs?
[26:11.940 --> 26:13.140]  Like $100, $150?
[26:13.380 --> 26:15.740]  The V-Twin I think you can get for about $80.
[26:16.440 --> 26:20.220]  The cost offset is not a big difference considering what you're getting out of it.
[26:20.220 --> 26:21.200]  I see a hand.
[26:26.620 --> 26:27.340]  Yes.
[26:27.400 --> 26:27.960]  Yes, it is.
[26:27.960 --> 26:31.920]  The question was, can you replace just the cylinder, just the core of the lock?
[26:32.040 --> 26:32.980]  Yes, you can.
[26:32.980 --> 26:35.100]  You can usually mortise cylinders, screw out.
[26:35.100 --> 26:36.440]  You can swap out cylinders.
[26:36.440 --> 26:38.760]  In fact, a lot of really high-end...
[26:38.760 --> 26:42.500]  How many people here are in the service or affiliated with the service of any kind?
[26:42.500 --> 26:43.660]  Military service?
[26:44.340 --> 26:45.460]  Man, just a handful.
[26:45.460 --> 26:46.180]  Geez.
[26:46.500 --> 26:52.780]  A lot of military locks are standard designs, like military handcuffs, military padlocks.
[26:52.780 --> 26:57.160]  They're standard industry locks that have been swapped out with a Medeco biaxial core.
[26:57.340 --> 26:58.420]  And like you'll see...
[26:58.420 --> 27:01.720]  Yeah, so you can retrofit locks to varying degrees.
[27:05.440 --> 27:07.900]  Yeah, the Best Locks, the brand Best.
[27:07.900 --> 27:08.900]  I cover them in a bit.
[27:08.900 --> 27:10.880]  They have a very, very nice system.
[27:10.940 --> 27:12.880]  Especially it's one that's very nice to manage.
[27:12.960 --> 27:16.080]  We're jumping ahead though, but because you're on top of things, you get a free letter.
[27:18.980 --> 27:19.940]  Good catch!
[27:22.400 --> 27:23.900]  Very good point to bring up.
[27:23.900 --> 27:24.840]  We're going to cover Best Lock.
[27:24.840 --> 27:27.520]  We're going to cover a lot of stuff, so we've got to keep it moving along.
[27:29.220 --> 27:31.240]  Oh no, that was a very good point someone mentioned.
[27:31.240 --> 27:34.460]  Okay, you're not going to make this on a grinding machine or at your local hardware store.
[27:34.460 --> 27:36.140]  You can't make these cross cuts.
[27:36.160 --> 27:38.080]  Very, very restricted blanks.
[27:39.060 --> 27:42.680]  So that was a peek at very good security.
[27:42.900 --> 27:46.880]  Let's flip it back the other direction now and go back to bad security for a minute.
[27:50.060 --> 27:50.760]  Yes?
[27:57.230 --> 27:59.510]  The little light shines in the holes?
[28:01.330 --> 28:02.870]  I don't know what you mean.
[28:04.830 --> 28:08.110]  Show me later, give me an idea later and we'll talk about it.
[28:19.440 --> 28:24.300]  The question was, if you keep picking and playing with a lock, will it eventually wear the lock down?
[28:24.300 --> 28:28.120]  Yes, there's a lot of potential wear and tear that a lock can experience.
[28:28.640 --> 28:32.100]  The springs that push the pins, those can get weaker.
[28:32.560 --> 28:35.460]  A lot of pins are brass because they don't corrode.
[28:35.460 --> 28:37.120]  Brass is easily misshapen.
[28:37.120 --> 28:39.200]  In fact, I talk about that later.
[28:39.200 --> 28:40.840]  There's some techniques that are really bad for locks.
[28:40.840 --> 28:43.220]  You can beat the locks up and make them easier to pick that way.
[28:43.700 --> 28:44.640]  Question again?
[28:50.370 --> 28:52.010]  Those are called dimple locks.
[28:52.010 --> 28:53.210]  We're going to cover that in a minute.
[28:54.810 --> 28:57.590]  I've got to stop rewarding people for jumping ahead of me.
[28:58.710 --> 29:00.070]  But no more jumping ahead.
[29:00.070 --> 29:02.010]  Hold on, we're going to get to all the fun stuff.
[29:03.430 --> 29:05.810]  First, let's talk about really crappy things.
[29:05.810 --> 29:07.050]  Hang on, wait, wait, wait.
[29:07.050 --> 29:08.350]  I'm trying to go forward, people.
[29:08.350 --> 29:09.850]  I expected questions at the end.
[29:09.850 --> 29:13.250]  This is my second time ever speaking, so you've got to bear with me.
[29:14.210 --> 29:15.310]  Thank you.
[29:18.250 --> 29:21.050]  We're talking about very bad locks at the moment.
[29:22.990 --> 29:25.750]  Can I get a show of hands how many people have used this lock?
[29:27.870 --> 29:29.250]  That's about right.
[29:31.790 --> 29:33.650]  These locks are incredibly popular.
[29:33.650 --> 29:35.410]  These locks are everywhere in our life.
[29:35.410 --> 29:38.470]  Everyone and their dog has a master lock securing something.
[29:39.850 --> 29:41.990]  These locks do not provide anything.
[29:44.170 --> 29:49.150]  If you have something that you care about that you're securing with a master padlock,
[29:49.150 --> 29:50.990]  you know, you're pretty much doing this.
[29:59.220 --> 30:00.820]  Why, you say?
[30:01.820 --> 30:07.200]  Well, you can take a master padlock, much like this little number,
[30:07.200 --> 30:09.340]  and use a guy like this.
[30:09.440 --> 30:10.880]  Does anybody know what this is?
[30:11.300 --> 30:13.220]  This is a padlock shim.
[30:13.700 --> 30:16.460]  A padlock shim can be inserted into a lock,
[30:17.760 --> 30:20.000]  or it can be broken in the lock,
[30:20.000 --> 30:21.860]  because this shim has been beat to hell.
[30:23.880 --> 30:25.780]  And that'll open that lock.
[30:29.780 --> 30:30.740]  Question?
[30:32.120 --> 30:35.640]  Yes, it will. I'll cover which can and can't be shimmed.
[30:36.880 --> 30:42.000]  Shims are a very, very elegant sort of attack against a lock.
[30:42.000 --> 30:45.100]  I mean, they really, I would say, fall into the category of a bypass.
[30:45.360 --> 30:48.200]  Just because the simplicity of the design,
[30:48.200 --> 30:50.520]  and the fact that Americans, especially Americans,
[30:50.520 --> 30:54.000]  but everyone in general, likes convenience as opposed to utility,
[30:54.000 --> 30:55.340]  makes this possible.
[30:55.700 --> 30:57.700]  Let's look a little bit more at this master.
[30:58.100 --> 31:01.600]  You can see it has a, all padlocks, like, you know, it has a shackle.
[31:01.680 --> 31:03.200]  It has a little dog notch.
[31:03.480 --> 31:06.560]  And that interfaces with,
[31:06.560 --> 31:08.000]  let's see if we can see down here,
[31:08.000 --> 31:09.820]  you know, a locking bar that's in there.
[31:10.020 --> 31:12.520]  And only if the combination is dialed in,
[31:12.520 --> 31:16.040]  will that bar retract, allowing you to pull the lock open.
[31:16.900 --> 31:18.980]  Well, what if you're not opening the lock,
[31:18.980 --> 31:21.380]  but rather you're closing the lock?
[31:21.420 --> 31:23.040]  You don't have to dial a combination.
[31:23.040 --> 31:24.680]  You don't have to fiddle with a key or anything.
[31:24.680 --> 31:26.360]  You just, you know, slap it shut.
[31:26.900 --> 31:30.300]  Well, that's because that bar is spring-loaded.
[31:30.540 --> 31:32.520]  The bar is just going to get out of the way.
[31:32.520 --> 31:35.440]  It's like, oh, the shackle's coming down, I better move.
[31:36.600 --> 31:38.080]  The way, and I'm going to try to get,
[31:38.080 --> 31:40.460]  I don't make films, so bear with me.
[31:40.460 --> 31:43.020]  The way a shim works,
[31:43.160 --> 31:45.820]  a shim is inserted outside the shackle,
[31:45.820 --> 31:47.440]  slid down in,
[31:47.440 --> 31:49.860]  and then turned,
[31:49.860 --> 31:53.240]  effectively obscuring that dog notch.
[31:53.260 --> 31:54.260]  You see that?
[31:54.540 --> 31:56.520]  It just, I'm trying to get that in line.
[31:56.520 --> 32:00.260]  It just pushes the bar right out of the way.
[32:00.260 --> 32:02.180]  It's like credit carding a door.
[32:02.740 --> 32:06.140]  I have a lot of friends back home who are in theater.
[32:06.140 --> 32:08.620]  There are theater techs and stage designers and stuff.
[32:08.620 --> 32:10.960]  And there's kind of an axiom with anybody who does
[32:10.960 --> 32:13.620]  craft work on stage and design sets.
[32:13.800 --> 32:16.860]  If you're doing it with springs, you're doing it wrong.
[32:17.480 --> 32:19.660]  This is an example of that phenomenon.
[32:19.960 --> 32:22.480]  Many things in locks that involve spring action
[32:22.480 --> 32:25.060]  are easily, easily compromised.
[32:25.060 --> 32:26.940]  Because a spring is, by nature, not a,
[32:26.940 --> 32:28.120]  it's a dumb device.
[32:28.120 --> 32:29.920]  It doesn't know what's pushing on it.
[32:29.920 --> 32:32.640]  And you can usually just pop them right out of the way.
[32:32.640 --> 32:34.260]  So, padlock shims.
[32:34.260 --> 32:35.940]  The cheapest stuff in the world.
[32:36.260 --> 32:37.960]  You know, you can buy them in packs.
[32:39.620 --> 32:40.620]  What's that?
[32:41.260 --> 32:42.920]  Oh yeah, you can make, we're going to cover,
[32:42.920 --> 32:44.320]  that's going to be a question.
[32:44.580 --> 32:45.540]  Yes, question.
[32:50.690 --> 32:52.090]  Yes, very good point.
[32:52.090 --> 32:54.850]  Metal bus fuses, there's a lot of material
[32:54.850 --> 32:57.150]  that you can make shims out of.
[32:57.190 --> 32:59.230]  Shims you can buy, you know,
[32:59.230 --> 33:01.230]  the 20 pack is $25.
[33:01.430 --> 33:03.310]  I'm going to have some of them if you want to play with them
[33:03.310 --> 33:05.210]  in the hands-on area.
[33:05.270 --> 33:07.330]  You can also make your own.
[33:07.570 --> 33:09.150]  And this will be a question.
[33:09.150 --> 33:10.970]  Let's see, this is kind of a hard question
[33:10.970 --> 33:13.490]  because it's very, very current events, if you will.
[33:13.630 --> 33:14.990]  The question for a Red Bull
[33:14.990 --> 33:16.870]  and one of these issues of Frack.
[33:18.250 --> 33:20.170]  What readily available material
[33:20.170 --> 33:22.770]  from Defcon did we use
[33:22.770 --> 33:24.730]  to open a jammed padlock
[33:24.730 --> 33:27.290]  at Civiac's house yesterday afternoon?
[33:29.510 --> 33:31.270]  It was not a badge from Blastier,
[33:31.270 --> 33:32.370]  but a good guess.
[33:32.370 --> 33:33.110]  Hang on, I saw...
[33:33.110 --> 33:35.230]  Wait, wait, whoa, no shout out.
[33:35.230 --> 33:36.770]  I saw your hand next.
[33:38.070 --> 33:39.670]  The man is correct.
[33:39.670 --> 33:40.610]  Come on up.
[33:44.250 --> 33:45.590]  The answer was
[33:46.170 --> 33:47.630]  metal from a beer can.
[33:47.630 --> 33:48.990]  And I have to definitely apologize.
[33:48.990 --> 33:51.310]  I'm sure there's got to be people flailing their arms on the sides
[33:51.310 --> 33:52.530]  and I might not be seeing you.
[33:52.530 --> 33:53.710]  I apologize for that.
[33:53.710 --> 33:55.370]  I'm going to try to keep you in my field of vision
[33:55.370 --> 33:56.550]  when I'm asking questions.
[33:57.070 --> 33:58.090]  Yeah, just the other day,
[33:58.090 --> 33:59.890]  Civiac had some friends staying with them.
[33:59.890 --> 34:01.970]  They're moving from San Diego.
[34:01.970 --> 34:02.730]  Then they stopped here.
[34:02.730 --> 34:03.790]  They're moving up to Seattle.
[34:03.790 --> 34:06.050]  It's polyhazard and I forget who else.
[34:06.410 --> 34:08.910]  But as we, I have definitely done this before.
[34:08.910 --> 34:10.110]  Many people have done this before.
[34:10.110 --> 34:14.110]  Some locks, the shackle completely pulls off.
[34:14.110 --> 34:16.850]  You know, the lock base can actually be completely removed.
[34:17.170 --> 34:21.210]  And if you accidentally slap it shut, upside down,
[34:21.810 --> 34:24.430]  the keyway is kind of inaccessible.
[34:28.910 --> 34:29.750]  It happens.
[34:29.750 --> 34:30.830]  It happens to the best of us.
[34:30.830 --> 34:31.390]  I've done it.
[34:31.390 --> 34:34.470]  In fact, I first experimented with this when I did it at home.
[34:34.770 --> 34:36.970]  We had the right tools in hand.
[34:38.290 --> 34:43.330]  And a simple beer can is all it took to shim this right off.
[34:43.330 --> 34:44.790]  We'll do this in the hands-on session.
[34:44.790 --> 34:47.430]  I've got plenty of beer can metal up here, man.
[34:47.430 --> 34:50.050]  We're going to make some, cut them up, and have a good time with that.
[34:53.350 --> 34:56.850]  It may or may not have been the beer that resulted in the lock being that way.
[34:56.850 --> 34:57.890]  I am uncertain.
[35:00.620 --> 35:02.040]  Very, very, very easy to do.
[35:02.040 --> 35:03.980]  In fact, you can ask them.
[35:03.980 --> 35:09.440]  We probably took, I guess, 30, 40 minutes in midday Vegas traffic to get to the house.
[35:09.440 --> 35:12.340]  It probably took 30 or 40 seconds to get this lock off.
[35:15.240 --> 35:17.940]  There are, however, unshimmable padlocks.
[35:19.180 --> 35:24.380]  There are very, very good padlocks on the market that shims will do absolutely nothing to.
[35:24.760 --> 35:28.280]  Some padlocks have a nice big boot or collar on the top.
[35:28.280 --> 35:31.780]  That makes the shim really hard to insert, damn near impossible.
[35:32.060 --> 35:37.480]  Incidentally, for, let's say, a red, this is kind of an easy one, for a Red Bull and a lighter,
[35:37.480 --> 35:39.720]  and I'm keeping the sides, keep the sides in view,
[35:39.720 --> 35:43.640]  what is the actual purpose of the collar or boot up on these?
[35:44.100 --> 35:47.540]  Whoa, that was a lot of hands. I think it was this way down there.
[35:50.320 --> 35:52.920]  Preventing bolt cutters is the exact right answer.
[35:52.920 --> 35:54.520]  Come on up, get a drink and a lighter.
[35:58.220 --> 36:01.520]  Other locks, you can actually, let me flip back to this.
[36:02.640 --> 36:08.100]  This is not the best solution, but if you were to just put notches in this bar,
[36:08.100 --> 36:11.040]  and literally, I mean, we're not talking about re-engineering the lock here.
[36:11.040 --> 36:14.920]  Oh, here's a lighter, man. Bottle opener lighters, gotta dig those.
[36:15.660 --> 36:17.840]  You know, we're not talking about a massive new design.
[36:17.840 --> 36:23.040]  If you were to just notch this bar, that would rip the crap out of the shim as you try to spin it around.
[36:23.280 --> 36:27.200]  And if you, you can actually kind of see in there, this bar is pretty beat up.
[36:27.260 --> 36:32.460]  I have some padlocks that I've shimmed so many times, they just shred the shims now because there's so many scrapings.
[36:32.680 --> 36:36.380]  So if people would just notch the bar, it would be kind of, kind of a solution.
[36:36.380 --> 36:44.040]  But really, the best type of padlock, and frankly, in my mind, the only type of padlock that can be considered useful at all,
[36:44.040 --> 36:46.320]  involves what's called double ball locking.
[36:46.880 --> 36:51.420]  Double ball locked padlocks, the shackle has, you know, a dog notch on each side.
[36:51.900 --> 36:55.840]  And inside, there is no bar with a spring or any other horseshit like that.
[36:55.840 --> 36:58.540]  There are two solid steel ball bearings.
[36:58.700 --> 37:03.280]  These are not going to go anywhere unless this control cylinder in the middle is rotated.
[37:03.280 --> 37:06.500]  You can see the control cylinder has a notch on each side.
[37:06.540 --> 37:10.740]  That cylinder rotates, the ball bearings drop in, that the lock will open.
[37:10.740 --> 37:12.340]  That is a real padlock.
[37:12.340 --> 37:15.060]  Anything else is, you know, a paperweight.
[37:15.980 --> 37:19.420]  Many locks employ, they're called key retaining locks, by the way.
[37:19.420 --> 37:22.440]  Locks that you have to have the key to open it and close it.
[37:22.600 --> 37:26.560]  Those are invariably going to be high-end double ball mechanisms that are in there.
[37:26.560 --> 37:29.360]  But any lock, it'll stay right on the front, double ball mechanism.
[37:29.360 --> 37:34.080]  Look for that. It is not at all a big investment to make that leap up.
[37:34.080 --> 37:37.560]  It's the difference of like a $5 lock or a $12 lock.
[37:39.260 --> 37:40.560]  Moving on.
[37:41.380 --> 37:43.620]  From good locks, we'll jump back again.
[37:43.620 --> 37:46.340]  We're kind of doing a high and low range of things.
[37:47.120 --> 37:48.240]  Warded locks.
[37:48.700 --> 37:51.300]  How many people have ever seen locks that look like this?
[37:52.080 --> 37:54.640]  Alright, yes, they are a lot of places.
[38:05.080 --> 38:10.020]  Warded locks are really very nice locks for certain reasons.
[38:10.280 --> 38:12.360]  They're very popular in outdoor situations.
[38:12.360 --> 38:17.060]  In fact, if you notice that trailer that I showed you in the other pictures, that was a warded lock.
[38:17.060 --> 38:18.500]  Why are they popular outdoors?
[38:18.500 --> 38:20.480]  Well, they're very resistant to fouling.
[38:20.480 --> 38:23.200]  They're very resistant to dirt and filth.
[38:23.200 --> 38:25.860]  They can rust up and they'll still usually work.
[38:25.860 --> 38:29.760]  They don't have an intricate pin tumbler mechanism inside.
[38:29.760 --> 38:32.520]  The fact that they have a very rudimentary mechanism
[38:33.180 --> 38:37.060]  means that you can put a lot of crap in this lock and it'll still sort of work.
[38:37.700 --> 38:42.000]  The other side of that coin is that it's a really rudimentary mechanism and it's a joke.
[38:43.480 --> 38:46.160]  Warded locks look kind of like this on the inside.
[38:46.420 --> 38:49.120]  You have a long keyway with wards.
[38:49.120 --> 38:52.120]  Those are protrusions called wards that get in the way.
[38:52.120 --> 38:57.500]  And at the very tip, you'll have just a notch bar with a spring.
[38:57.500 --> 39:01.600]  Those keys, if I jump back...
[39:01.600 --> 39:04.520]  Those keys... let me flip to...
[39:04.520 --> 39:07.920]  I used to have these numbered and the numbers have all but worn off.
[39:11.780 --> 39:13.320]  Got it on the first one.
[39:15.600 --> 39:18.500]  This key, when it goes down the keyway,
[39:19.040 --> 39:21.060]  the only thing... can you guys see that okay?
[39:21.240 --> 39:28.120]  The only thing that's actually operating this lock is this very, very tip of the key.
[39:28.860 --> 39:33.760]  That little tip of the key is interfacing with this lock mechanism,
[39:33.760 --> 39:35.900]  the latch that's hidden inside.
[39:36.640 --> 39:38.160]  However, what that means is...
[39:38.860 --> 39:41.120]  Let me pull some stuff out here.
[39:51.660 --> 39:56.130]  My pickset is all clouded.
[39:56.330 --> 39:57.710]  There we go.
[39:58.990 --> 40:01.930]  What that means is if you take a warded key lock
[40:03.350 --> 40:05.970]  and you file down... can everyone see that alright?
[40:06.490 --> 40:09.130]  You file down all the notches.
[40:09.130 --> 40:11.550]  This will still operate the lock.
[40:11.550 --> 40:13.270]  I think this was number one.
[40:13.510 --> 40:14.750]  No, it's number three.
[40:16.570 --> 40:19.950]  So this was... I took, you know, number one is probably this guy
[40:20.450 --> 40:23.590]  and I just filed all the wards off of it except for the tip.
[40:25.670 --> 40:27.050]  Let me get that in there.
[40:27.050 --> 40:29.850]  That still opens this lock.
[40:29.850 --> 40:31.590]  Because, you know, you only need the tip.
[40:31.730 --> 40:36.110]  The rest of the lock, the only thing it's doing is getting in the way.
[40:36.110 --> 40:40.110]  So that means you can take this to any warded lock.
[40:42.630 --> 40:44.050]  The tip will open.
[40:45.490 --> 40:47.730]  And they just, you know, there you go.
[40:55.240 --> 40:56.520]  Oh, I saw some hands.
[40:56.520 --> 40:58.520]  Wait, hang on, there's people with hands. Wait.
[40:58.820 --> 40:59.480]  Hands?
[41:01.480 --> 41:03.480]  Not so much with a regular pick,
[41:03.480 --> 41:06.000]  but there are what are called warded picks.
[41:06.000 --> 41:08.260]  And there was a hand back there. Was that the same question?
[41:16.460 --> 41:17.740]  I'm not familiar.
[41:18.040 --> 41:19.860]  They were even mentioned in the last talk.
[41:19.860 --> 41:22.040]  I've yet to see. If anyone has one of these, I'd love to see it.
[41:22.040 --> 41:23.320]  The TSA luggage lock.
[41:23.320 --> 41:26.540]  I don't deal with... you guys who fly, you're nuts if you check bags, man.
[41:26.540 --> 41:29.100]  I FedEx all my shit. I don't deal with those psychos.
[41:30.380 --> 41:30.940]  Hand?
[41:37.030 --> 41:37.530]  Okay.
[41:40.880 --> 41:43.300]  Okay. And you were going to ask a question as well, I'm sorry.
[41:44.860 --> 41:46.660]  Yeah, he makes a very valid point.
[41:46.660 --> 41:48.680]  A lot of these locks, they're really just decoration.
[41:49.560 --> 41:51.900]  Oh, we have a TSA lock? Thank you, sir.
[41:51.960 --> 41:53.440]  He gave that man a lighter for that.
[41:55.000 --> 41:56.540]  This is a... are you kidding me?
[41:57.260 --> 41:58.820]  This is a TSA lock?
[42:05.520 --> 42:07.020]  Oh, for... okay.
[42:07.020 --> 42:09.980]  So there's apparently varieties of TSA locks.
[42:10.060 --> 42:13.320]  But yeah, I hate the TSA. I won't give them any of my stuff.
[42:14.640 --> 42:15.920]  Alright, moving on.
[42:15.920 --> 42:17.260]  Oh wait, sorry, question.
[42:23.960 --> 42:27.660]  The question was locks that are called key retaining locks.
[42:27.660 --> 42:30.740]  The key is inside the padlock the whole time it's operating.
[42:30.960 --> 42:32.220]  That's what you're asking about?
[42:32.460 --> 42:35.100]  And you're saying is it a spring that keeps the key in?
[42:39.830 --> 42:43.730]  Oh, invariably key retaining locks tend to be much higher quality.
[42:43.730 --> 42:44.990]  They're going to have a double ball.
[42:44.990 --> 42:46.490]  So no, you can't shim those.
[42:47.630 --> 42:49.230]  So yeah, you can buy...
[42:49.230 --> 42:50.870]  Does anyone see Irvine's table?
[42:50.870 --> 42:52.910]  Do they have the warded picks there this time around?
[42:53.070 --> 42:54.570]  Yeah, Irvine usually has these sets.
[42:54.570 --> 42:55.710]  What are they, like nine bucks?
[42:56.410 --> 42:58.070]  I hope I didn't lowball that price.
[42:58.070 --> 42:59.310]  If they're more, they're worth it.
[42:59.310 --> 43:00.950]  But they should be about nine bucks.
[43:02.050 --> 43:04.290]  Yeah, or you can literally just buy...
[43:04.290 --> 43:06.530]  You know, these locks cost about seven dollars.
[43:06.530 --> 43:09.130]  So just buy one and carve the key down.
[43:09.170 --> 43:09.970]  Question.
[43:15.620 --> 43:17.300]  Oh, why are there different shapes?
[43:17.560 --> 43:19.280]  You can notice that...
[43:19.280 --> 43:20.980]  The question is about those shapes.
[43:21.260 --> 43:24.940]  The key tips aren't always the same size.
[43:25.220 --> 43:28.980]  Sometimes there's a very, very thin tip.
[43:28.980 --> 43:30.760]  Now, if you had a slightly thicker one,
[43:30.760 --> 43:32.520]  it might not stick all the way in.
[43:32.640 --> 43:33.740]  But if you have a very...
[43:33.740 --> 43:34.440]  You couldn't just...
[43:34.440 --> 43:37.280]  If I just took this key, carved it all the way down,
[43:37.280 --> 43:38.580]  the thin is a little weaker.
[43:38.780 --> 43:40.900]  So this set, it gives you kind of options.
[43:40.980 --> 43:43.100]  You can see how they all engage that lever
[43:43.100 --> 43:44.700]  on one level or another.
[43:45.420 --> 43:46.680]  Occasionally, you don't see them anymore,
[43:46.680 --> 43:49.500]  but you used to see a dual lever warded lock.
[43:49.580 --> 43:50.880]  In fact, I think I have one over here.
[43:50.880 --> 43:52.000]  I used to have one on the back of my truck
[43:52.000 --> 43:53.140]  for my trailer hitch.
[43:53.600 --> 43:55.540]  But, you know, you don't see...
[43:55.540 --> 43:56.940]  Any one of these could probably open
[43:56.940 --> 43:59.320]  just about any warded lock out there.
[44:02.460 --> 44:03.700]  Ah, barrel locks.
[44:03.700 --> 44:05.320]  New this year. Anyone who saw me at SHMOO,
[44:05.320 --> 44:06.500]  you didn't see this part.
[44:26.830 --> 44:28.710]  Barrel locks are very popular
[44:28.710 --> 44:30.410]  with utility companies,
[44:30.410 --> 44:33.030]  and they're popular in outdoor situations.
[44:34.150 --> 44:34.950]  I would almost...
[44:34.950 --> 44:36.250]  These are kind of the in-between.
[44:36.250 --> 44:38.190]  Are these really a lock? Are they not?
[44:38.190 --> 44:40.070]  I don't really know. I like to kind of use them
[44:40.070 --> 44:41.410]  as an example of something that
[44:42.250 --> 44:44.270]  works like a lock, but it shouldn't be thought of
[44:44.270 --> 44:46.370]  as a lock. I've seen these sometimes
[44:46.370 --> 44:47.990]  on perimeter fence,
[44:47.990 --> 44:50.070]  on way out on the edge of properties.
[44:50.070 --> 44:51.570]  Don't use them out there.
[44:51.910 --> 44:54.130]  Let the utility company work with these.
[44:54.130 --> 44:56.070]  They're really not truly locks.
[44:56.510 --> 44:58.090]  And here, we're going to play with some of them
[44:58.090 --> 44:58.830]  in a bit.
[44:59.750 --> 45:02.070]  The way barrel locks work...
[45:03.150 --> 45:04.250]  A barrel mechanism
[45:04.250 --> 45:05.910]  looks something like this.
[45:05.990 --> 45:07.990]  It's a double ball action inside
[45:07.990 --> 45:09.930]  with a plunger, and if this
[45:09.930 --> 45:11.870]  plunger retracts,
[45:11.870 --> 45:13.990]  obviously, the balls fall
[45:13.990 --> 45:15.810]  inward. But unlike
[45:16.350 --> 45:18.050]  very high quality padlocks
[45:18.050 --> 45:20.110]  where the double ball mechanism is engaged
[45:20.110 --> 45:21.870]  with a key and so forth, these
[45:21.870 --> 45:24.050]  really just rely on a very, very
[45:24.050 --> 45:25.430]  strong spring.
[45:26.090 --> 45:27.970]  If you just reach in there with a hook,
[45:27.970 --> 45:30.030]  pull that out. Let me see if I can do
[45:30.030 --> 45:31.070]  that for you.
[45:32.190 --> 45:33.510]  This is a homemade tool
[45:34.250 --> 45:36.310]  made out of a fishing snake.
[45:36.310 --> 45:37.690]  You can run wire through a wall.
[45:37.990 --> 45:40.230]  Very, very nice steel. If you temper
[45:40.230 --> 45:42.410]  it right, you can make a lot of good tools out of this.
[45:44.010 --> 45:46.070]  This is a barrel lock. You can see the outer
[45:46.070 --> 45:48.310]  casing and the little balls
[45:48.310 --> 45:50.250]  here. If I reach
[45:52.150 --> 45:52.510]  in...
[45:52.510 --> 45:54.130]  Sorry if I'm going out of frame
[45:54.130 --> 45:55.010]  for a second.
[45:58.850 --> 46:00.970]  There we go. That's locked.
[46:02.810 --> 46:04.750]  That's not the cool part. It's kind of cool,
[46:04.750 --> 46:06.670]  but, you know...
[46:06.670 --> 46:08.770]  Unlocking it. There, now you can applaud.
[46:08.770 --> 46:10.450]  The unlocking part. That's fun.
[46:13.750 --> 46:14.990]  This is the plunger
[46:14.990 --> 46:16.670]  that would ride all the way down
[46:16.670 --> 46:18.810]  inside there. I don't know if we can get
[46:18.810 --> 46:20.050]  that up to the camera.
[46:20.690 --> 46:22.830]  My camera is ass-tacular.
[46:23.890 --> 46:24.790]  But yeah, that little
[46:24.790 --> 46:26.610]  plunger just rides in and out
[46:26.610 --> 46:28.690]  and it's not
[46:28.890 --> 46:30.370]  a complex mechanism.
[46:30.530 --> 46:32.650]  I've known people,
[46:32.650 --> 46:34.390]  maybe I've heard of people,
[46:34.390 --> 46:36.850]  who hypothetically had their gas turned off
[46:36.850 --> 46:39.290]  because they were potentially a
[46:39.290 --> 46:41.090]  moron and didn't pay their bills
[46:41.510 --> 46:43.110]  for maybe a year.
[46:43.110 --> 46:45.870]  And maybe they turned the gas back on this way.
[46:45.870 --> 46:47.250]  But I could just be telling
[46:47.250 --> 46:49.630]  a story someone told me.
[46:49.710 --> 46:51.070]  Was there a question? There were a couple of questions
[46:51.070 --> 46:55.130]  on that one.
[46:55.130 --> 46:57.470]  Oh, how do I... I just...
[46:57.470 --> 46:58.750]  Actually, I think I have one that has...
[46:58.750 --> 47:01.530]  You can kind of see
[47:01.530 --> 47:04.390]  the plunger in there.
[47:04.390 --> 47:06.090]  Oh, I'll show you the key.
[47:06.090 --> 47:06.870]  The tool that I use just reaches
[47:06.870 --> 47:08.450]  in and has a hook tip
[47:08.450 --> 47:11.370]  and I just kind of grab as hard as I can on the spring.
[47:11.370 --> 47:12.950]  The spring is sort of fused
[47:12.950 --> 47:14.970]  to the base of the plunger.
[47:14.970 --> 47:16.830]  So if you get that spring at all, it'll
[47:16.830 --> 47:18.830]  move. Was there another question before
[47:18.830 --> 47:23.840]  I jumped on? No? Alright.
[47:24.300 --> 47:26.280]  There's another type, very similar.
[47:26.280 --> 47:28.280]  It's just called a screw style,
[47:28.280 --> 47:30.420]  bolt style. In this case,
[47:30.420 --> 47:31.540]  there's just threading
[47:31.900 --> 47:33.920]  and the bolt that's inside the plunger
[47:33.920 --> 47:35.480]  spins outward.
[47:35.920 --> 47:38.500]  The key on that... Here's what keys look like.
[47:38.500 --> 47:40.620]  This is the actual anchor
[47:40.620 --> 47:42.940]  key. It's called A-N-K-E-R.
[47:43.340 --> 47:44.700]  It's really just... It sticks down.
[47:44.700 --> 47:46.580]  I think the tip of this has a pair of
[47:46.580 --> 47:48.540]  hooks that flange outward if you
[47:48.540 --> 47:50.620]  pull the handle. But, you know,
[47:50.620 --> 47:52.860]  that's really all it is, just a hook.
[47:53.200 --> 47:54.480]  And this is the bolt style.
[47:54.480 --> 47:56.260]  Now, you should note that this is not a regular
[47:56.260 --> 47:58.560]  Phillips head or hex head pattern
[47:58.560 --> 48:00.600]  here. This is a unique cut pattern.
[48:00.760 --> 48:02.620]  And the bolt on the inside, if you have a rotating
[48:02.620 --> 48:04.420]  bolt style barrel lock, is a unique
[48:04.420 --> 48:06.520]  cut pattern. So it's very, very hard
[48:06.520 --> 48:08.900]  to get to pick a rotating bolt style.
[48:09.220 --> 48:10.340]  These are... I think
[48:10.340 --> 48:12.200]  Agbay makes these. These are
[48:12.200 --> 48:14.700]  rotating disc style. You can actually get
[48:14.700 --> 48:16.560]  barrel locks in rotating
[48:16.560 --> 48:18.400]  disc. We'll talk about what a rotating
[48:18.400 --> 48:20.640]  disc lock is later. They are really
[48:20.640 --> 48:22.460]  nice. They are a whole world of
[48:22.460 --> 48:24.960]  difference from what you see on the table in front of me.
[48:24.960 --> 48:26.440]  You can do all kind of levels
[48:26.440 --> 48:28.400]  of permission characteristics, master
[48:28.400 --> 48:30.680]  keying. If any of you
[48:30.680 --> 48:32.520]  work for any type of a company large
[48:32.520 --> 48:34.980]  enough to think about barrel locks,
[48:34.980 --> 48:36.920]  consider going with a higher end
[48:36.920 --> 48:39.220]  one. I don't know the price breakdown,
[48:39.220 --> 48:41.360]  but it's really, really worth it.
[48:43.140 --> 48:44.840]  And just worth mentioning,
[48:44.840 --> 48:47.000]  you see these in similar situations. A lot of the
[48:47.000 --> 48:48.780]  same vendors sell them.
[48:48.780 --> 48:50.880]  They're called intimidator screws.
[48:50.960 --> 48:52.780]  These are included just to mention.
[48:52.780 --> 48:54.960]  These are obviously not locks. Their freaking
[48:54.960 --> 48:57.020]  name is intimidator. It's meant
[48:57.020 --> 48:58.860]  just to dissuade someone.
[48:59.000 --> 49:01.020]  These are not to be thought of as real
[49:01.020 --> 49:03.000]  locks. But you'll
[49:03.000 --> 49:04.600]  see these in very similar
[49:04.600 --> 49:07.080]  light duty situations.
[49:08.960 --> 49:10.840]  Ah, dimple locks. Someone mentioned
[49:10.840 --> 49:12.900]  these earlier. Let me try to make some
[49:12.900 --> 49:14.180]  real estate up here.
[49:15.100 --> 49:16.840]  Are we having fun so far? Am I doing
[49:16.840 --> 49:17.440]  alright?
[49:32.280 --> 49:33.540]  Dimple locks.
[49:34.260 --> 49:35.900]  You may have seen a lot of European
[49:35.900 --> 49:38.330]  locks are of this design. In fact,
[49:39.040 --> 49:39.940]  the device, you know the
[49:39.940 --> 49:41.920]  club that goes on automobiles?
[49:41.920 --> 49:43.420]  They had a competitor that came out
[49:43.420 --> 49:45.940]  not too long ago. I guess it's long now.
[49:45.940 --> 49:48.160]  That kind of wraps around the brake pedal.
[49:48.280 --> 49:49.940]  And one of the big things in their infomercial
[49:49.940 --> 49:51.880]  was that the club lock is just a joke little
[49:51.880 --> 49:53.740]  lock. Our lock uses a dimple key.
[49:53.740 --> 49:54.860]  You'll see these on
[49:55.780 --> 49:57.820]  higher end situations.
[49:58.120 --> 49:59.760]  Dimple keys,
[49:59.760 --> 50:01.740]  the keyway is flipped this side.
[50:01.800 --> 50:04.040]  It's flat, so it's a
[50:04.040 --> 50:06.540]  bastard to get your picks in there.
[50:07.540 --> 50:08.300]  And the...
[50:08.300 --> 50:09.920]  Where did I... Oh, never mind.
[50:09.920 --> 50:12.440]  I don't have a picture of the key, just other than to show you this.
[50:12.700 --> 50:13.760]  Yeah, dimple keys to actually
[50:13.760 --> 50:16.020]  carve the bidding on them.
[50:16.020 --> 50:17.880]  It takes a little more skill to
[50:17.880 --> 50:18.680]  get in there.
[50:20.240 --> 50:21.940]  But inside, you know, inside most of
[50:21.940 --> 50:23.620]  the time, these are just simple
[50:24.620 --> 50:26.080]  pin tumbler locks.
[50:27.060 --> 50:27.920]  Let's see if I have...
[50:30.320 --> 50:32.020]  You know, it's just a pin stack
[50:32.020 --> 50:34.100]  in here. You know, it's facing a
[50:34.100 --> 50:36.080]  different way. It looks different, but it
[50:36.080 --> 50:38.160]  shouldn't be thought of as dramatically different.
[50:38.160 --> 50:40.700]  It has its benefits, it has its weaknesses.
[50:41.060 --> 50:42.360]  Some people have tried to make
[50:42.360 --> 50:44.300]  these locks even more secure.
[50:44.400 --> 50:45.820]  Let me see if I have that.
[50:46.220 --> 50:48.200]  Well, first, instead of showing you the more secure one,
[50:48.200 --> 50:50.260]  let me show you the less secure one.
[50:51.280 --> 50:52.100]  There are other
[50:52.100 --> 50:54.140]  means of, you know, if I said
[50:54.140 --> 50:56.180]  the keyway is so small, it's hard
[50:56.180 --> 50:58.300]  to put your picks in. There's
[50:58.300 --> 51:00.360]  other means of picking them, however.
[51:00.740 --> 51:02.780]  There's a method called impressioning.
[51:02.840 --> 51:04.220]  Those of you, the few of you
[51:04.220 --> 51:06.260]  who said you knew Barry Wells,
[51:06.260 --> 51:08.020]  the rest of you shall be introduced to him
[51:08.020 --> 51:10.340]  with this video clip. And we hope
[51:10.340 --> 51:12.160]  that we have sound running. I'm jacked in
[51:12.160 --> 51:14.700]  and everyone heard that loud blaring of sound earlier.
[51:15.000 --> 51:16.660]  So let's see what we've got.
[51:16.960 --> 51:18.360]  It's very difficult to
[51:18.360 --> 51:20.100]  pick this lock. It's extremely
[51:20.100 --> 51:22.480]  difficult. They put in all sorts of
[51:23.040 --> 51:24.800]  anti-pick pins.
[51:25.000 --> 51:26.380]  It really is a
[51:26.380 --> 51:28.500]  very nasty lock to pick.
[51:28.500 --> 51:30.360]  On the other hand, I just explained to you
[51:30.360 --> 51:33.280]  a little bit about impressioning.
[51:33.280 --> 51:34.340]  And there is a very easy
[51:34.340 --> 51:36.480]  trick to open these locks.
[51:36.480 --> 51:38.380]  And I'll try to demonstrate it.
[51:40.840 --> 51:41.320]  Here
[51:42.380 --> 51:44.680]  you see the original key.
[51:44.680 --> 51:46.600]  It has a deep cut,
[51:46.600 --> 51:48.260]  not so deep cut, deeper cut,
[51:48.260 --> 51:50.520]  not so deep cut. And here's the
[51:50.520 --> 51:52.140]  blank that we prepared.
[51:52.200 --> 51:54.420]  The blank has the cuts all the way to the
[51:54.420 --> 51:56.300]  deepest. So this key
[51:56.300 --> 51:58.380]  will never open a lock. We even
[51:58.380 --> 52:00.120]  made it a little bit deeper.
[52:00.800 --> 52:02.400]  All the holes are just a little
[52:02.400 --> 52:04.540]  bit deeper than they normally get.
[52:04.540 --> 52:06.420]  And what I'm going to try to do now
[52:06.420 --> 52:07.720]  is put some
[52:08.420 --> 52:10.440]  aluminum tape over this
[52:10.440 --> 52:12.280]  blank key so it becomes
[52:12.280 --> 52:14.720]  high again. Stick it in the lock.
[52:14.720 --> 52:16.420]  Then the pins will
[52:16.420 --> 52:18.300]  push on the
[52:18.300 --> 52:19.920]  prepared key.
[52:20.740 --> 52:22.380]  They will bind.
[52:22.460 --> 52:24.280]  I will move it left and right
[52:24.280 --> 52:26.200]  and the keys that bind will actually
[52:26.200 --> 52:28.400]  push deeper and deeper and deeper into
[52:28.400 --> 52:30.440]  the foil. And at one moment
[52:30.440 --> 52:32.660]  hopefully the lock will turn.
[52:32.660 --> 52:34.880]  And I have an exact copy of the key.
[52:34.920 --> 52:36.660]  And this is a
[52:36.660 --> 52:38.700]  technique that is
[52:38.700 --> 52:40.560]  possible on almost all dimple
[52:40.560 --> 52:42.580]  lock keys. It's not possible on the
[52:42.580 --> 52:45.240]  Notti locks because they have pin in pin
[52:45.240 --> 52:47.320]  and some have to be pushed upwards
[52:47.320 --> 52:49.060]  and therefore it doesn't work on that.
[52:49.060 --> 52:51.040]  But it works on an amazingly
[52:51.800 --> 52:52.920]  amount of locks.
[52:52.920 --> 52:54.360]  I show you what I do.
[52:54.360 --> 52:56.640]  I put some of this aluminum foil
[52:56.640 --> 52:58.020]  that is being used in the car industry
[52:58.020 --> 52:59.160]  and the heating industry
[53:00.420 --> 53:02.400]  over this blank.
[53:02.400 --> 53:04.300]  So as you can now see it's covered.
[53:04.340 --> 53:05.240]  The trick is that
[53:05.920 --> 53:08.140]  the way where the
[53:08.140 --> 53:10.780]  key will enter the lock has to be perfect.
[53:10.840 --> 53:12.160]  Because that's
[53:12.160 --> 53:14.120]  where it will probably jam up
[53:14.120 --> 53:15.600]  if this goes wrong.
[53:17.040 --> 53:17.520]  Ok.
[53:17.520 --> 53:19.820]  I'll try to
[53:19.820 --> 53:21.000]  insert it.
[53:21.320 --> 53:22.440]  Ok.
[53:24.320 --> 53:26.100]  Now, the prepared blank
[53:26.100 --> 53:27.660]  is in the lock.
[53:27.940 --> 53:30.340]  And now I will wiggle it.
[53:31.280 --> 53:32.100]  This will take
[53:32.380 --> 53:34.640]  a little bit longer than the ace lock.
[53:35.060 --> 53:35.980]  But hopefully
[53:35.980 --> 53:38.000]  the result will be the same.
[53:41.340 --> 53:42.380]  But anyway, if...
[53:43.040 --> 53:44.600]  On average that would open the lock
[53:45.280 --> 53:46.380]  because the tin foil
[53:46.380 --> 53:48.320]  would slowly shape it to the
[53:48.320 --> 53:50.100]  right levels. You go in there
[53:50.100 --> 53:52.180]  you wiggle, wiggle, wiggle, wiggle, wiggle, pop.
[53:52.280 --> 53:53.800]  That's how it would average.
[53:54.000 --> 53:54.900]  It wouldn't take very long.
[53:54.900 --> 53:55.860]  Ok, there we go.
[53:59.280 --> 54:01.160]  Now watch when he pulls it out.
[54:07.500 --> 54:09.660]  He's made an exact copy of the key.
[54:11.700 --> 54:13.840]  Now remember, this is a
[54:13.840 --> 54:16.880]  $150 lock.
[54:16.880 --> 54:18.120]  Well, some people are really
[54:18.120 --> 54:19.800]  going to be upset because this works with
[54:19.800 --> 54:22.580]  a lot of these tin foil locks.
[54:22.580 --> 54:23.940]  So that's Barry Wells.
[54:23.940 --> 54:27.320]  Very, very good cat to know. He's a very bright guy.
[54:27.320 --> 54:28.060]  And that is the impressioning
[54:28.060 --> 54:30.080]  technique which made... and you can see
[54:30.080 --> 54:31.960]  like the room just erupted at hope.
[54:31.980 --> 54:34.240]  That really blows people away to see it's that simple
[54:34.240 --> 54:36.260]  but it works. I've seen him do it and I'm just
[54:36.620 --> 54:38.440]  I'm in awe of the stuff that he can pull off.
[54:38.440 --> 54:39.720]  He's a really great guy.
[54:40.820 --> 54:42.080]  There's... I'm mentioning here another
[54:42.080 --> 54:44.220]  technique that sometimes opens these locks
[54:44.220 --> 54:46.540]  called bump keying. We're going to cover that in a bit too.
[54:46.540 --> 54:48.300]  How many people have ever heard of bump keying?
[54:48.920 --> 54:49.940]  Oh, only some of you.
[54:49.940 --> 54:51.560]  So you're going to have some fun with this in a bit.
[54:52.500 --> 54:54.180]  Let me see if that's next or if I added...
[54:54.180 --> 54:55.540]  No, I added a new section.
[54:55.540 --> 54:58.160]  There is a dimple lock
[54:58.160 --> 55:00.220]  that's a specialized style of lock.
[55:00.220 --> 55:01.700]  It's a high-end dimple lock
[55:01.700 --> 55:03.640]  that's recently the Multilock Company
[55:03.640 --> 55:05.640]  who was acquired by the Abloy Group
[55:06.120 --> 55:07.820]  a large umbrella company
[55:07.820 --> 55:09.820]  of lock manufacturers in Europe.
[55:09.820 --> 55:11.340]  The Multilock is very special
[55:11.340 --> 55:13.640]  because it has what's called telescoping
[55:13.640 --> 55:15.770]  pins or pin-in-pin systems.
[55:16.160 --> 55:17.780]  The pin stacks,
[55:17.780 --> 55:19.720]  not only do they have regular top and bottom
[55:19.720 --> 55:21.840]  pins, but they have their hollow
[55:21.840 --> 55:23.860]  so they actually have top and bottom pins
[55:23.860 --> 55:26.060]  inside of the top and bottom pins.
[55:26.140 --> 55:27.860]  So the key cuts
[55:28.560 --> 55:30.020]  are both dimple cuts
[55:30.020 --> 55:32.560]  and sometimes little protrusions in the middle.
[55:32.660 --> 55:34.300]  So the pins track in and out.
[55:34.300 --> 55:36.220]  There's pins tracking inside of each other.
[55:36.220 --> 55:38.000]  It's a very, very secure design.
[55:38.000 --> 55:39.500]  It's a brilliant idea.
[55:39.980 --> 55:41.860]  It's a brilliant idea,
[55:41.860 --> 55:44.320]  but in theory, theory and practice
[55:44.320 --> 55:45.620]  are different things.
[55:47.300 --> 55:48.260]  This is what
[55:48.260 --> 55:50.120]  if you were to just kind of look down
[55:51.160 --> 55:52.000]  a lock at a Multilock
[55:52.000 --> 55:54.480]  it kind of looks like. You can see you have your pin stacks.
[55:54.480 --> 55:56.240]  You can see kind of protruding.
[55:56.240 --> 55:58.260]  We have pins inside of pins.
[55:58.740 --> 55:59.980]  And most people say, oh, that's
[56:00.140 --> 56:02.320]  a brilliant design. You know, you've got this Multilock
[56:02.320 --> 56:03.120]  and that's so...
[56:03.120 --> 56:05.860]  that must be hell to pick. I can't imagine
[56:05.860 --> 56:08.000]  something like that. Well, it's actually a little
[56:08.000 --> 56:10.060]  something like this. Did anyone catch the
[56:10.060 --> 56:10.800]  difference?
[56:13.060 --> 56:13.980]  This is what people
[56:13.980 --> 56:15.800]  think a Multilock is.
[56:16.160 --> 56:18.780]  This is pretty much how a Multilock works.
[56:20.040 --> 56:20.520]  Can anyone
[56:20.520 --> 56:22.800]  notice what is the difference?
[56:24.420 --> 56:25.580]  Yes.
[56:25.580 --> 56:26.480]  The top
[56:26.480 --> 56:28.520]  pins are not independent of one
[56:28.520 --> 56:30.740]  another. They are a related system.
[56:30.740 --> 56:32.460]  They interact with each other in ways
[56:32.460 --> 56:34.720]  that were not completely foreseen.
[56:35.700 --> 56:36.620]  Can anyone
[56:36.620 --> 56:38.520]  tell me... let's see...
[56:39.440 --> 56:40.500]  This is a really hard
[56:40.500 --> 56:42.560]  question, so this is definitely going to be worth
[56:42.560 --> 56:44.900]  this will be an issue of Frack,
[56:45.080 --> 56:46.700]  a Red Bull, a
[56:46.700 --> 56:48.260]  lighter, and
[56:49.100 --> 56:50.360]  I think we're going to do
[56:50.360 --> 56:52.220]  maybe a hard drive. I have a lot of
[56:52.220 --> 56:54.320]  old hard drives that are too small for
[56:54.320 --> 56:56.380]  me, but maybe I
[56:56.380 --> 56:58.700]  forgot to erase, you know,
[56:58.700 --> 57:00.340]  Aqua Teen Hunger Force or Monty Python
[57:00.340 --> 57:02.920]  or something I was storing on them. I don't know.
[57:03.200 --> 57:04.580]  Might be there.
[57:05.420 --> 57:06.300]  Can anyone
[57:06.300 --> 57:08.380]  tell me the name of the student
[57:08.380 --> 57:10.580]  from Rampamoe College in New Jersey
[57:10.580 --> 57:12.340]  You already got your hand up?
[57:12.340 --> 57:14.420]  Jesus. You have to pronounce his name
[57:14.420 --> 57:16.320]  correctly, who published an
[57:16.320 --> 57:18.280]  exploit based around
[57:18.280 --> 57:20.280]  this attack?
[57:21.640 --> 57:22.320]  Close, but
[57:22.320 --> 57:24.400]  no, not pronounced right. I saw
[57:24.480 --> 57:25.460]  a hand back here.
[57:26.700 --> 57:27.780]  No guess?
[57:27.980 --> 57:29.260]  Who was it over here?
[57:31.300 --> 57:32.260]  Pardon me?
[57:33.240 --> 57:34.740]  No, it was not Eric Murdoch.
[57:34.740 --> 57:36.240]  I saw a few hands.
[57:36.500 --> 57:38.040]  Was there anybody I feel like...
[57:38.040 --> 57:40.100]  I'm missing out. I know your hand must have been up.
[57:40.760 --> 57:41.160]  Eric
[57:42.920 --> 57:44.220]  Michaud is the correct
[57:44.220 --> 57:45.980]  answer. Way to go, man.
[57:54.690 --> 57:55.230]  Yeah,
[57:55.230 --> 57:57.310]  Eric is at WhatTheHack
[57:57.310 --> 57:59.130]  which unfortunately is running at the same time as
[57:59.130 --> 58:00.370]  Defcon this year.
[58:00.570 --> 58:02.990]  See that red box? Take a look in there
[58:02.990 --> 58:05.350]  and maybe grab a hard drive to your liking.
[58:07.110 --> 58:07.730]  I think
[58:07.730 --> 58:09.010]  FAT, probably.
[58:09.010 --> 58:10.330]  Probably FAT file system.
[58:11.390 --> 58:13.150]  The little red, the master, the box that says
[58:13.150 --> 58:14.070]  hard drives.
[58:16.650 --> 58:17.290]  Yeah,
[58:17.290 --> 58:19.150]  the Michaud attack...
[58:19.830 --> 58:20.950]  I'm sorry, what?
[58:27.260 --> 58:28.220]  What's that?
[58:34.680 --> 58:35.100]  You want to
[58:35.100 --> 58:37.020]  help me out, Sandy? How would we describe this?
[58:37.020 --> 58:39.060]  This is Mouse, everybody. She's a member
[58:39.060 --> 58:41.060]  of Tool USA, so she's
[58:41.060 --> 58:43.140]  here with us. Would we call this
[58:43.140 --> 58:44.960]  an exploit or a proof or what
[58:44.960 --> 58:46.260]  would you think this is?
[59:04.880 --> 59:05.920]  Yeah, this is
[59:06.020 --> 59:07.160]  a tool that we have worked and
[59:08.000 --> 59:09.780]  I'd probably snap it apart,
[59:09.780 --> 59:11.720]  but giving enough time, I can keep cutting these
[59:11.720 --> 59:13.900]  and eventually we do get them to work.
[59:19.700 --> 59:20.180]  Yeah,
[59:20.180 --> 59:22.000]  Ken Presson, the guy from Peterson. Remember
[59:22.000 --> 59:24.140]  I mentioned Peterson, the vendor. He is, this is definitely
[59:24.140 --> 59:26.100]  on his radar and he's like, oh man, I got
[59:26.100 --> 59:27.360]  some ideas for this.
[59:30.700 --> 59:31.920]  Yeah, we've engaged with
[59:32.420 --> 59:33.980]  Multilock is aware that people are working
[59:33.980 --> 59:36.680]  on this. They've acknowledged that there is something to this.
[59:39.940 --> 59:41.420]  Yeah, they do love to send
[59:41.420 --> 59:42.540]  out letters, don't they?
[59:44.240 --> 59:45.580]  The trick behind,
[59:45.580 --> 59:47.460]  I mean, you can, most of you, you can see what's
[59:47.460 --> 59:49.380]  going on here. You'll probably see already where
[59:49.380 --> 59:51.660]  this is going. Typically,
[59:51.660 --> 59:53.560]  the pin stack would function, this inner pin
[59:53.560 --> 59:55.600]  would be pushed never that high
[59:55.600 --> 59:57.520]  up, because you've got to picture a dimple
[59:57.520 --> 59:59.680]  key. You're not going to have a dimple
[59:59.680 --> 01:00:01.540]  that's little and like this big spike in the
[01:00:01.540 --> 01:00:03.660]  middle. So dimple keys usually don't push
[01:00:03.660 --> 01:00:05.420]  the inner pin very high.
[01:00:05.820 --> 01:00:07.720]  That doesn't mean you couldn't stick something
[01:00:07.720 --> 01:00:09.500]  in there to push that pin very
[01:00:09.500 --> 01:00:11.340]  high. And if you
[01:00:11.340 --> 01:00:13.520]  over lift that pin stack,
[01:00:13.520 --> 01:00:15.540]  the Michaud attack just
[01:00:15.540 --> 01:00:18.020]  completely moves everything out of the way.
[01:00:20.360 --> 01:00:21.660]  It's a very,
[01:00:21.660 --> 01:00:23.800]  very elegant discovery.
[01:00:23.800 --> 01:00:25.620]  And we're very proud of him.
[01:00:25.620 --> 01:00:27.540]  How old is Eric? He's like...
[01:00:28.200 --> 01:00:29.400]  He looks 15, but
[01:00:29.400 --> 01:00:31.820]  he's in his 20s. He's a really bright kid.
[01:00:31.820 --> 01:00:33.440]  So, way to go, Eric.
[01:00:33.940 --> 01:00:35.540]  Keep this on your radar and
[01:00:35.540 --> 01:00:37.480]  see if Peterson starts selling anything
[01:00:37.480 --> 01:00:38.420]  about it.
[01:00:40.220 --> 01:00:41.420]  Back to other
[01:00:41.420 --> 01:00:43.360]  locks that are less secure, and
[01:00:43.360 --> 01:00:45.360]  everyone knows are less secure.
[01:00:45.740 --> 01:00:46.900]  Tubular locks.
[01:00:47.720 --> 01:00:49.320]  Tubular locks, you guys must have
[01:00:49.320 --> 01:00:51.560]  seen tubular locks here and there in life, right?
[01:00:51.560 --> 01:00:53.340]  How many people have seen a tubular lock?
[01:00:53.740 --> 01:00:54.600]  Yes.
[01:00:55.120 --> 01:00:57.760]  From the last talk, we mentioned the kryptonite itself.
[01:00:57.760 --> 01:00:59.260]  Kryptonite tubular lock, one of the best
[01:00:59.260 --> 01:01:01.640]  ones that people will probably be familiar with.
[01:01:01.740 --> 01:01:03.500]  My parents' old house, the alarm system
[01:01:03.500 --> 01:01:05.540]  was a tubular lock. When tubular
[01:01:05.540 --> 01:01:07.660]  keys first came out, they were revered
[01:01:07.660 --> 01:01:08.860]  as this breakthrough
[01:01:09.340 --> 01:01:11.900]  because, yeah, they're a very new design.
[01:01:11.900 --> 01:01:13.520]  No one had, you know, wow, what is this shape?
[01:01:13.520 --> 01:01:15.840]  This is neat. I guess you couldn't cut this very easily.
[01:01:15.840 --> 01:01:17.700]  Yes, it's harder to cut a tubular
[01:01:17.700 --> 01:01:18.680]  key bidding.
[01:01:19.660 --> 01:01:21.880]  But you have a lock that's literally staring
[01:01:21.880 --> 01:01:24.560]  you in the face with all of the pins.
[01:01:25.080 --> 01:01:25.880]  It lends
[01:01:25.880 --> 01:01:27.940]  itself very well to a lot
[01:01:27.940 --> 01:01:29.420]  of experimentation and fiddling
[01:01:29.420 --> 01:01:31.800]  because you can independently work on these
[01:01:31.800 --> 01:01:33.700]  pin stacks right there.
[01:01:41.020 --> 01:01:43.500]  This is called a tubular pick.
[01:01:44.420 --> 01:01:45.240]  And a tubular
[01:01:45.240 --> 01:01:47.340]  pick has all these little fingers
[01:01:49.100 --> 01:01:50.660]  that can track up and down
[01:01:51.720 --> 01:01:53.180]  and actually simulate
[01:01:53.180 --> 01:01:54.660]  the different cut depths
[01:01:55.640 --> 01:01:57.400]  on a tubular key.
[01:01:58.360 --> 01:02:00.180]  If I were to,
[01:02:00.180 --> 01:02:01.640]  let's say, find a
[01:02:01.640 --> 01:02:12.650]  tubular lock somewhere in my belongings.
[01:02:12.650 --> 01:02:13.290]  Well, I'll do the
[01:02:13.290 --> 01:02:15.590]  crappiest one I have just because
[01:02:15.590 --> 01:02:18.450]  it's on the top of the pile.
[01:02:18.450 --> 01:02:20.850]  Everyone's seen these before.
[01:02:18.850 --> 01:02:20.850]  These are your
[01:02:20.850 --> 01:02:22.910]  basic, you know, cheap-ass,
[01:02:22.910 --> 01:02:24.810]  not-allowed-to-be-sold-in-stores-anymore
[01:02:25.390 --> 01:02:26.710]  kryptonite-type lock.
[01:02:27.950 --> 01:02:28.850]  The way a tubular
[01:02:28.850 --> 01:02:30.690]  lock works, you take the
[01:02:30.690 --> 01:02:32.870]  pick, stick it
[01:02:32.870 --> 01:02:34.630]  right in the lock, and wiggle it.
[01:02:36.730 --> 01:02:37.130]  And...
[01:02:37.130 --> 01:02:38.850]  Hang on, I've got to give a little more tension on my...
[01:02:48.160 --> 01:02:50.620]  The problem with this lock is I've beat it to hell
[01:02:50.620 --> 01:02:52.680]  because of another exploit that we'll
[01:02:52.680 --> 01:02:53.960]  talk about in a moment.
[01:02:55.260 --> 01:02:56.560]  Yeah, I think this lock...
[01:02:56.560 --> 01:02:58.160]  I think this lock is completely destroyed.
[01:02:58.900 --> 01:03:00.560]  I was going to buy a new one, but you
[01:03:00.560 --> 01:03:02.480]  really... You've got to give them credit. They did pull
[01:03:02.480 --> 01:03:04.580]  all these out of the stores. You can't get this
[01:03:04.580 --> 01:03:06.520]  lock anymore. So, yeah,
[01:03:06.520 --> 01:03:08.780]  this lock is beyond all hope. Let me grab a different one.
[01:03:20.860 --> 01:03:22.440]  Because of the public... Well, why aren't they
[01:03:22.440 --> 01:03:24.560]  selling them in stores? Let's jump to this
[01:03:24.560 --> 01:03:25.180]  then.
[01:03:28.060 --> 01:03:28.520]  This is
[01:03:28.520 --> 01:03:30.540]  why, if you don't
[01:03:30.540 --> 01:03:32.180]  have... This is a kryptonite
[01:03:33.060 --> 01:03:34.280]  Evolution 2000 lock.
[01:03:41.060 --> 01:03:42.960]  I used to use this to
[01:03:42.960 --> 01:03:44.840]  lock up my bike
[01:03:44.840 --> 01:03:46.820]  around here in Seattle until I
[01:03:46.820 --> 01:03:48.960]  found out that you can take a big pen and just
[01:03:48.960 --> 01:03:50.460]  remove the top
[01:03:50.460 --> 01:03:52.820]  and just pop it into
[01:03:52.820 --> 01:03:54.520]  the lock and
[01:03:54.520 --> 01:03:56.500]  just do a couple little quick twists
[01:03:56.500 --> 01:03:57.400]  and turns and
[01:03:57.400 --> 01:03:59.040]  voila!
[01:03:59.820 --> 01:04:01.880]  Your lock and your bike is
[01:04:01.880 --> 01:04:03.560]  completely compromised.
[01:04:03.920 --> 01:04:05.720]  So, way to go,
[01:04:05.720 --> 01:04:06.540]  kryptonite.
[01:04:07.620 --> 01:04:08.620]  That's why they don't sell
[01:04:08.620 --> 01:04:09.900]  it in stores anymore.
[01:04:11.760 --> 01:04:12.840]  Does Peterson sell
[01:04:12.840 --> 01:04:14.620]  big pens was the question. I don't
[01:04:14.620 --> 01:04:16.680]  know. Yeah, the original
[01:04:17.120 --> 01:04:18.400]  design, the spring tensions
[01:04:18.400 --> 01:04:20.280]  were really bad and it was just...
[01:04:20.280 --> 01:04:22.540]  That's what they were talking about in the last talk.
[01:04:25.360 --> 01:04:26.700]  Right, the modern
[01:04:26.700 --> 01:04:28.620]  tubular lock, the gentleman points out,
[01:04:28.620 --> 01:04:30.360]  is usually designed by Ace.
[01:04:30.360 --> 01:04:32.340]  There's the Ace and the Ace 2 even.
[01:04:32.340 --> 01:04:34.560]  Those are much better quality tubular
[01:04:34.560 --> 01:04:36.920]  locks. They have high tension springs,
[01:04:36.920 --> 01:04:38.500]  variable tension springs. You can't just
[01:04:38.500 --> 01:04:40.600]  jam a pen in there. I saw two hands,
[01:04:40.600 --> 01:04:41.600]  one and then two.
[01:04:44.700 --> 01:04:46.700]  Not really possible to use a shim
[01:04:46.700 --> 01:04:48.320]  just because traditionally
[01:04:48.320 --> 01:04:50.460]  tubular locks, you're not
[01:04:50.460 --> 01:04:52.440]  spinning something. You're actually, those are
[01:04:52.440 --> 01:04:54.180]  key retaining locks because of the
[01:04:55.460 --> 01:04:56.340]  little notch
[01:04:56.340 --> 01:04:58.240]  in the... well, you really can't see that.
[01:04:58.820 --> 01:05:00.760]  If you've ever used a tubular lock,
[01:05:00.760 --> 01:05:02.400]  you know you can't just leave the key in it.
[01:05:02.400 --> 01:05:04.420]  You have to completely pull it back around to get the
[01:05:04.420 --> 01:05:06.340]  key out. So there's no reason
[01:05:06.340 --> 01:05:08.520]  for any type of spring mechanism to be a part
[01:05:08.520 --> 01:05:10.180]  of the secure latch. It's all
[01:05:10.180 --> 01:05:12.720]  one solid piece. You really can't shim them easily.
[01:05:12.740 --> 01:05:14.160]  And there was one hand back here.
[01:05:14.860 --> 01:05:16.360]  Same question. Okay, yeah, you really
[01:05:16.360 --> 01:05:18.400]  can't shim them. However,
[01:05:19.060 --> 01:05:20.380]  if, you know,
[01:05:20.380 --> 01:05:22.540]  you have something that can't be defeated by a ballpoint
[01:05:22.540 --> 01:05:24.400]  pen, which is, you know,
[01:05:24.400 --> 01:05:26.420]  your Ace type design, you can get
[01:05:26.420 --> 01:05:28.460]  this lock pick, which is,
[01:05:28.460 --> 01:05:30.300]  this one's by Southerd. Other people
[01:05:30.300 --> 01:05:32.260]  do make them. These are really
[01:05:32.260 --> 01:05:34.160]  beautiful, beautiful devices.
[01:05:34.740 --> 01:05:36.260]  I'm just gonna make that nice and flat and
[01:05:36.260 --> 01:05:38.560]  flush, so that kind of simulates
[01:05:39.660 --> 01:05:40.340]  a, you know,
[01:05:40.340 --> 01:05:42.220]  you could actually see the key cuts
[01:05:42.220 --> 01:05:44.740]  would be of different depths.
[01:05:45.060 --> 01:05:46.200]  Those bidding cuts.
[01:05:46.200 --> 01:05:48.020]  And this simulates,
[01:05:48.020 --> 01:05:50.760]  let me flush it back out, this would be a
[01:05:50.760 --> 01:05:53.460]  tubular key that's not cut at all.
[01:05:53.460 --> 01:05:55.980]  If I give this a little tension,
[01:05:55.980 --> 01:05:56.580]  and I stick
[01:05:56.580 --> 01:05:59.660]  this in the lock, and I wiggle it some,
[01:05:59.660 --> 01:06:01.600]  and now that's open.
[01:06:02.600 --> 01:06:03.940]  You can see the,
[01:06:03.940 --> 01:06:05.820]  this is a drawback, it draws a bar back
[01:06:05.820 --> 01:06:08.020]  out here. This is actually a gun lock.
[01:06:10.040 --> 01:06:12.420]  Not only have I opened the lock,
[01:06:12.420 --> 01:06:13.860]  but, I have
[01:06:13.860 --> 01:06:16.500]  the bidding of that key,
[01:06:16.500 --> 01:06:18.220]  and you could take this to a
[01:06:18.220 --> 01:06:20.320]  locksmith shop, and get a
[01:06:20.320 --> 01:06:22.260]  replacement key cut, very
[01:06:22.260 --> 01:06:24.100]  very easily. I don't recommend
[01:06:24.100 --> 01:06:26.420]  that anyone walk into a locksmith shop
[01:06:26.420 --> 01:06:26.900]  with a pick.
[01:06:28.900 --> 01:06:29.620]  All the
[01:06:29.620 --> 01:06:30.840]  picks that you can find, usually
[01:06:30.840 --> 01:06:32.940]  of this nature, they come with what's called
[01:06:33.080 --> 01:06:34.860]  a decoder key. It's a little key
[01:06:34.860 --> 01:06:36.820]  that just has cuts on it of different
[01:06:36.820 --> 01:06:38.900]  depths, and you kind of, it's like a gauge,
[01:06:38.900 --> 01:06:40.840]  you go, okay, one, two, and you can actually
[01:06:40.840 --> 01:06:42.520]  you could walk into a lock shop
[01:06:43.080 --> 01:06:45.060]  and say, I need a seven pin tubular
[01:06:45.060 --> 01:06:46.800]  key that's bidded out at three, six,
[01:06:46.800 --> 01:06:48.740]  three, four, two, seven, blah, blah, blah.
[01:06:48.780 --> 01:06:50.640]  And they'll just punch it in the machine,
[01:06:50.640 --> 01:06:52.920]  and cut it out. I saw a couple hands on
[01:06:52.920 --> 01:06:53.560]  that one.
[01:06:57.560 --> 01:06:58.260]  This,
[01:06:58.780 --> 01:06:59.640]  talk about,
[01:06:59.640 --> 01:07:01.360]  talk about wonderful, wonderful
[01:07:01.360 --> 01:07:03.380]  girlfriends. This was a birthday gift from
[01:07:03.380 --> 01:07:05.440]  my girlfriend right before ShmooCon.
[01:07:05.640 --> 01:07:07.120]  So, this is about an $80
[01:07:07.120 --> 01:07:09.340]  pick. And you got,
[01:07:09.340 --> 01:07:11.480]  you know, everyone else and their brother gives you, like, sweaters
[01:07:11.480 --> 01:07:13.340]  and, you know, oh, here's some crap you don't really
[01:07:13.340 --> 01:07:15.500]  care about. And I'm like, I wonder what this is going to be.
[01:07:15.500 --> 01:07:17.700]  And I broke this out. I just, I wanted to cry.
[01:07:20.100 --> 01:07:21.400]  Question over here.
[01:07:25.680 --> 01:07:26.740]  I'm sorry.
[01:07:26.740 --> 01:07:28.660]  Oh, I understand what you were saying.
[01:07:28.660 --> 01:07:30.720]  He asked if, while I was picking this,
[01:07:30.720 --> 01:07:32.800]  was I actually manipulating the
[01:07:32.800 --> 01:07:34.700]  heights? No, you don't
[01:07:34.700 --> 01:07:36.680]  have to actually force these to
[01:07:36.680 --> 01:07:38.400]  do anything. What happens
[01:07:38.400 --> 01:07:41.460]  is, much like with a
[01:07:41.460 --> 01:07:43.360]  pin stack that we were working before,
[01:07:43.360 --> 01:07:44.780]  if I put, let me see,
[01:07:44.780 --> 01:07:46.880]  if I put torque
[01:07:46.880 --> 01:07:49.040]  on this, it's not all
[01:07:49.040 --> 01:07:51.200]  seven pins that are binding at once.
[01:07:51.200 --> 01:07:53.060]  Only one pin stack is going to really
[01:07:53.060 --> 01:07:54.740]  bind. So by torquing,
[01:07:54.740 --> 01:07:56.560]  jiggling and jiggling around,
[01:07:56.560 --> 01:07:58.620]  the binding pin stack will start
[01:07:58.620 --> 01:08:00.620]  to push down, down, down, down, down
[01:08:00.620 --> 01:08:02.580]  on a feeler until it's at the right
[01:08:02.580 --> 01:08:04.380]  height. When it's at the right height,
[01:08:04.380 --> 01:08:06.360]  that's no longer binding. The next one will bind
[01:08:06.360 --> 01:08:08.540]  and so on and so forth. So all I have to do is jiggle it
[01:08:08.540 --> 01:08:10.480]  and they'll eventually all track down to the
[01:08:10.480 --> 01:08:12.320]  right height and they do it all by itself.
[01:08:12.320 --> 01:08:14.500]  Question here, behind you actually.
[01:08:17.720 --> 01:08:18.540]  I've never seen
[01:08:18.680 --> 01:08:20.380]  a tubular blank. I think they're just, you know,
[01:08:20.380 --> 01:08:21.920]  just tubes and
[01:08:24.000 --> 01:08:24.860]  What's that?
[01:08:24.920 --> 01:08:25.660]  They're blank.
[01:08:27.300 --> 01:08:28.060]  Yeah, so yeah,
[01:08:28.060 --> 01:08:29.740]  they have the little
[01:08:30.100 --> 01:08:32.120]  notch that keeps it seated in the lock.
[01:08:32.140 --> 01:08:34.060]  But you can just cut them with regular tools.
[01:08:34.060 --> 01:08:35.740]  There was, hang on, you and then you.
[01:08:36.160 --> 01:08:38.000]  And am I missing, are there hands on the outside that I'm not
[01:08:38.000 --> 01:08:40.340]  seeing? No? Alright. Go ahead, sir.
[01:08:40.340 --> 01:08:41.580]  Are they all the same diameter?
[01:08:41.740 --> 01:08:43.880]  The question was, are they all the same diameter?
[01:08:43.880 --> 01:08:46.140]  I think diameter, yes, but there are two
[01:08:46.140 --> 01:08:46.700]  main
[01:08:48.100 --> 01:08:49.960]  systems of pinning. There's seven pin
[01:08:49.960 --> 01:08:51.040]  and eight pin.
[01:08:51.780 --> 01:08:54.200]  There's actually two picks that Souther offers.
[01:08:54.200 --> 01:08:56.240]  I think there's a bonus if you buy them both at once.
[01:08:56.240 --> 01:08:57.240]  It's like a savings.
[01:08:57.860 --> 01:09:00.060]  There's the seven pin. By the way, everything
[01:09:00.060 --> 01:09:01.940]  is seven pin. I've never seen
[01:09:01.940 --> 01:09:03.620]  an eight pin in my life.
[01:09:04.200 --> 01:09:05.840]  There's also something called seven pin
[01:09:05.840 --> 01:09:08.020]  offset, which the eight pin pick
[01:09:08.020 --> 01:09:10.560]  will work in a seven pin offset lock.
[01:09:10.780 --> 01:09:12.160]  But, yeah,
[01:09:12.160 --> 01:09:13.900]  unless you are like a locksmith by
[01:09:13.900 --> 01:09:15.720]  profession or want to become one, just
[01:09:15.720 --> 01:09:17.960]  start off buying this one. The seven pin is going to be all
[01:09:17.960 --> 01:09:20.000]  you play with for everything you can find.
[01:09:20.260 --> 01:09:22.160]  There was another question over here.
[01:09:40.230 --> 01:09:41.590]  Yes and no.
[01:09:41.590 --> 01:09:43.190]  The gentleman raises a point. He said,
[01:09:43.190 --> 01:09:45.530]  almost all of what we're talking about, especially as far
[01:09:45.530 --> 01:09:47.450]  as pin tumbler picking,
[01:09:47.990 --> 01:09:49.370]  excuse me, is based
[01:09:49.370 --> 01:09:51.530]  upon misalignment and imperfection
[01:09:51.530 --> 01:09:53.850]  in the locks manufacturing process.
[01:09:53.850 --> 01:09:55.450]  And he said, you know, if you had a very
[01:09:55.450 --> 01:09:57.590]  precise alignment, you wouldn't
[01:09:57.590 --> 01:10:00.030]  need a lot of these other security features, would you?
[01:10:00.030 --> 01:10:01.890]  Yes and no. You can get
[01:10:01.890 --> 01:10:04.030]  very precise machining. And in fact,
[01:10:04.030 --> 01:10:05.950]  all of your well-made locks, the ones I was
[01:10:05.950 --> 01:10:07.950]  talking about, like the ASA locks,
[01:10:07.950 --> 01:10:09.990]  the Medicos, just by name, they're all
[01:10:09.990 --> 01:10:11.890]  engineered very, very well. They're engineered
[01:10:11.890 --> 01:10:13.950]  to much higher tolerances. But
[01:10:13.950 --> 01:10:15.930]  you guys know there's a difference between math on
[01:10:15.930 --> 01:10:17.870]  paper and math in real life. There's never
[01:10:17.870 --> 01:10:19.810]  anything that's 100% perfectly
[01:10:20.250 --> 01:10:21.690]  flushed down to like a micron
[01:10:21.690 --> 01:10:23.790]  level. There's always going to be some
[01:10:23.790 --> 01:10:25.990]  intolerance introduced into the equation.
[01:10:25.990 --> 01:10:27.790]  That's why high security pins are still
[01:10:27.790 --> 01:10:29.370]  very valid to have.
[01:10:30.010 --> 01:10:31.750]  But yes, so yeah, you can have
[01:10:31.750 --> 01:10:33.810]  them, some are better than others. High security
[01:10:33.810 --> 01:10:35.670]  locks will be better engineered.
[01:10:35.810 --> 01:10:37.530]  There was another hand somewhere.
[01:10:37.790 --> 01:10:38.570]  Yes.
[01:10:43.510 --> 01:10:44.670]  Pardon me?
[01:10:46.210 --> 01:10:46.770]  Oh,
[01:10:46.770 --> 01:10:49.430]  I'm sorry. Welcome from across the pond.
[01:10:49.430 --> 01:10:50.590]  The question was, how did the
[01:10:50.590 --> 01:10:52.770]  biro trick work? And for those of us
[01:10:52.770 --> 01:10:54.170]  yanks, that was how did the
[01:10:54.760 --> 01:10:56.070]  ballpoint pen work?
[01:10:56.330 --> 01:10:58.610]  That worked just because the
[01:10:58.610 --> 01:11:00.450]  spring tensions were so bad
[01:11:00.450 --> 01:11:02.350]  and because the pins could seat
[01:11:02.350 --> 01:11:04.330]  all the way in, if you just
[01:11:04.330 --> 01:11:06.730]  jammed, you know, you just jam a ballpoint
[01:11:06.730 --> 01:11:08.610]  pen in there, it smashes all
[01:11:08.610 --> 01:11:10.590]  the springs, all the pins, completely
[01:11:10.590 --> 01:11:12.570]  out of the way, and it just forces
[01:11:12.570 --> 01:11:14.450]  the pins way up inside the lock.
[01:11:14.450 --> 01:11:16.110]  Both the, Miles, am I getting this right?
[01:11:16.110 --> 01:11:18.430]  Both the driver and the keypin go completely
[01:11:18.430 --> 01:11:20.690]  yeah, both the driver and keypin
[01:11:20.690 --> 01:11:22.550]  go completely out of the plug
[01:11:22.550 --> 01:11:24.530]  and they seat way up inside
[01:11:24.530 --> 01:11:26.850]  the chamber so the plug can rotate freely.
[01:11:26.850 --> 01:11:28.850]  People also notice that if you pull the
[01:11:28.850 --> 01:11:30.870]  pen out, if you're doing that to a lock
[01:11:30.870 --> 01:11:32.710]  sometimes the pins are all screwed up then
[01:11:32.710 --> 01:11:34.850]  and you screw your lock up. So you need a pick like
[01:11:34.850 --> 01:11:37.170]  this to get it back working again.
[01:11:37.390 --> 01:11:38.210]  You had a question, ma'am?
[01:11:55.640 --> 01:11:57.640]  Very good question. The question was, if you
[01:11:57.640 --> 01:11:59.520]  want to get high security
[01:11:59.520 --> 01:12:01.580]  pins in your locks, either to practice with them
[01:12:01.580 --> 01:12:03.600]  or conceivably to secure your home with
[01:12:03.600 --> 01:12:05.400]  them, he's, you know,
[01:12:05.400 --> 01:12:07.400]  Viros is mentioning, where do you find these?
[01:12:07.400 --> 01:12:09.400]  I don't see them anywhere. That's because
[01:12:09.400 --> 01:12:11.380]  I'm assuming you're talking about in stores, you've never
[01:12:11.380 --> 01:12:13.420]  found them. Right. Because we're
[01:12:13.420 --> 01:12:15.460]  Americans and our stores just don't carry very
[01:12:15.460 --> 01:12:17.400]  good locks because they sit on the shelf.
[01:12:17.400 --> 01:12:19.380]  No one buys them. People are like, 70 bucks
[01:12:19.380 --> 01:12:21.560]  for this sucker? This is 12!
[01:12:21.560 --> 01:12:22.700]  Hell with that!
[01:12:23.280 --> 01:12:25.360]  Yeah, you buy them on the internet. Look
[01:12:25.360 --> 01:12:27.280]  on the internet. Any reputable vendor
[01:12:27.280 --> 01:12:29.500]  will actually say, you know, features high secure pins
[01:12:29.500 --> 01:12:31.440]  features this, that, and the other. It's not
[01:12:31.680 --> 01:12:33.440]  a feature that they want to be secretive about.
[01:12:33.440 --> 01:12:35.500]  It's a benefit to the lock. So they're going to advertise
[01:12:35.500 --> 01:12:35.880]  it.
[01:12:37.940 --> 01:12:39.640]  Oh, I understand.
[01:12:39.640 --> 01:12:41.560]  Right. You don't, right, he said, do you
[01:12:41.560 --> 01:12:43.380]  know if they're a spool pin or a mushroom
[01:12:43.380 --> 01:12:45.120]  pin or a serrated pin?
[01:12:45.760 --> 01:12:47.600]  Different vendors tend to have
[01:12:47.600 --> 01:12:49.440]  pins they like to use. For
[01:12:49.440 --> 01:12:51.360]  instance, you know, we talked about the
[01:12:51.360 --> 01:12:53.280]  Asa, that was a spool pin lock.
[01:12:53.280 --> 01:12:55.840]  We'll talk a little later about American brand padlocks.
[01:12:55.840 --> 01:12:57.780]  They are big on serrated pins.
[01:12:58.520 --> 01:12:59.540]  But, vendor by
[01:12:59.540 --> 01:13:01.420]  vendor, you can kind of get a feel for it. I don't know
[01:13:01.420 --> 01:13:03.440]  if there's a nice reference guide out there for who
[01:13:03.440 --> 01:13:05.080]  has what. But, you know, just
[01:13:05.080 --> 01:13:07.320]  break one apart and see what's in it.
[01:13:07.900 --> 01:13:08.820]  There was a question.
[01:13:10.260 --> 01:13:11.680]  Oh, very good point.
[01:13:11.680 --> 01:13:13.480]  Very good point. We'll talk
[01:13:13.480 --> 01:13:15.440]  about this in the URLs later when I give you a bunch
[01:13:15.440 --> 01:13:17.440]  of links. Lockpicking101.com
[01:13:17.440 --> 01:13:19.860]  would probably have that answer. It's a
[01:13:19.860 --> 01:13:21.940]  great, great user base of really knowledgeable
[01:13:21.940 --> 01:13:23.600]  people. Anything that I
[01:13:23.600 --> 01:13:25.720]  don't cover or you want to know more about, either talk
[01:13:25.720 --> 01:13:27.900]  to me later or check them out. I'm going to mention
[01:13:27.900 --> 01:13:30.460]  them again in a bit.
[01:13:30.460 --> 01:13:31.420]  Let's see, were there any other
[01:13:31.420 --> 01:13:32.520]  questions at the moment?
[01:13:38.960 --> 01:13:40.340]  The problem with a
[01:13:40.340 --> 01:13:42.140]  blank is that it might not, I'm
[01:13:42.140 --> 01:13:46.500]  trying to think if this was the thing, it might not grab
[01:13:46.500 --> 01:13:46.840]  onto...
[01:13:46.840 --> 01:13:48.420]  The question was, if the ballpoint pen works
[01:13:48.580 --> 01:13:53.100]  would just a regular blank have worked?
[01:13:53.100 --> 01:13:54.960]  Right, oh, alright. I understand.
[01:13:55.840 --> 01:13:56.440]  Part of
[01:13:56.440 --> 01:13:59.100]  part of the pins fitting
[01:13:59.100 --> 01:14:00.720]  in, let me see.
[01:14:00.720 --> 01:14:03.680]  I see what's going on.
[01:14:03.680 --> 01:14:03.960]  When you have
[01:14:03.960 --> 01:14:05.900]  key pins that are still
[01:14:06.800 --> 01:14:08.260]  in these grooves,
[01:14:08.260 --> 01:14:10.040]  you know, typically you'd have a driver pin stick
[01:14:10.040 --> 01:14:12.580]  out and the key pin would seat in this.
[01:14:12.600 --> 01:14:13.780]  Oh, Laz!
[01:14:14.240 --> 01:14:16.420]  There you are. How are you, man?
[01:14:17.320 --> 01:14:18.380]  Where were you?
[01:14:18.460 --> 01:14:19.580]  Stuck in an airplane.
[01:14:19.580 --> 01:14:21.380]  Oh man, sorry to hear that.
[01:14:25.280 --> 01:14:25.800]  Usually
[01:14:25.800 --> 01:14:27.160]  you would have key pins
[01:14:27.160 --> 01:14:29.500]  in those grooves. They are helping
[01:14:29.500 --> 01:14:31.680]  to turn that center post.
[01:14:31.780 --> 01:14:33.700]  With the pins being all
[01:14:33.700 --> 01:14:35.880]  pushed out of there, there's nothing for a
[01:14:35.880 --> 01:14:38.180]  blank to grab onto. That's why the plastic
[01:14:38.180 --> 01:14:40.120]  pen works so well. It actually grabs
[01:14:40.120 --> 01:14:41.880]  the post because it uses
[01:14:41.880 --> 01:14:44.060]  the plastic misshapes. It has a little friction
[01:14:44.060 --> 01:14:48.760]  and it will help spin. That's why that happens.
[01:14:48.760 --> 01:14:49.180]  Alright.
[01:14:49.180 --> 01:14:51.760]  You've got a smaller fucking screen.
[01:14:51.760 --> 01:14:53.580]  Are you going to sit up here and bitch?
[01:14:53.580 --> 01:14:55.780]  What the hell, man?
[01:14:57.000 --> 01:15:02.120]  So that was tubular locks.
[01:15:02.120 --> 01:15:03.580]  There we go, moving slowly forward.
[01:15:04.960 --> 01:15:05.680]  Yes?
[01:15:09.940 --> 01:15:10.820]  Pardon me?
[01:15:16.400 --> 01:15:17.440]  The question was about
[01:15:17.840 --> 01:15:19.440]  Kensington's, the ones that you see
[01:15:19.440 --> 01:15:21.220]  on a lot of laptops and security locks
[01:15:21.220 --> 01:15:23.460]  like that. They say, was it a different diameter?
[01:15:23.600 --> 01:15:24.960]  I don't know. I've never...
[01:15:24.960 --> 01:15:27.100]  They're the same? Okay, yeah.
[01:15:27.100 --> 01:15:28.780]  You can big pen those as well.
[01:15:35.660 --> 01:15:36.260]  Okay.
[01:15:37.500 --> 01:15:38.020]  Alright.
[01:15:38.020 --> 01:15:39.340]  Oh, we've got more questions.
[01:15:43.620 --> 01:15:44.420]  What's that?
[01:15:48.670 --> 01:15:50.750]  Apparently cardboard from a toilet paper roll
[01:15:50.750 --> 01:15:53.030]  works very well on a Kensington lock.
[01:15:55.130 --> 01:15:56.750]  Alright, we've got to move on.
[01:15:56.750 --> 01:15:58.490]  We're already in the second hour here.
[01:16:05.490 --> 01:16:06.610]  Alright.
[01:16:06.610 --> 01:16:08.590]  Moving along. Bump keying.
[01:16:08.590 --> 01:16:11.150]  We were mentioning bump keying earlier briefly when I said
[01:16:11.150 --> 01:16:13.590]  Barry was bumping his ASSA lock
[01:16:13.590 --> 01:16:15.890]  and you can sometimes bump dimple locks.
[01:16:16.310 --> 01:16:17.350]  Bump keying is a technique
[01:16:17.350 --> 01:16:19.370]  used to quickly spring a lock
[01:16:19.370 --> 01:16:22.030]  open with a specially cut key.
[01:16:22.030 --> 01:16:23.310]  It's called a bump key.
[01:16:23.310 --> 01:16:25.350]  It's also called a 999 key.
[01:16:25.350 --> 01:16:27.990]  For a Red Bull, can anyone tell me why
[01:16:27.990 --> 01:16:30.230]  it's a 999 key, where that name comes from?
[01:16:30.230 --> 01:16:31.230]  I saw your hand.
[01:16:35.870 --> 01:16:37.150]  Very, very good.
[01:16:37.150 --> 01:16:38.030]  The answer is
[01:16:38.570 --> 01:16:40.450]  key bidding has numbers
[01:16:40.450 --> 01:16:42.510]  like 0 is no cut at all,
[01:16:42.510 --> 01:16:44.510]  1, 2, 3, the cut depth.
[01:16:44.570 --> 01:16:46.650]  A bump key is made by cutting all the
[01:16:46.650 --> 01:16:48.590]  bidding down to the deepest depths or the 9.
[01:16:48.590 --> 01:16:50.150]  So it's a 999 key.
[01:16:50.690 --> 01:16:52.650]  Bump keys work...
[01:16:53.330 --> 01:16:54.310]  Bump keys work
[01:16:54.310 --> 01:16:56.770]  very, very similar to the way pick guns
[01:16:56.770 --> 01:16:58.690]  work. So let's cover pick guns very briefly
[01:16:58.690 --> 01:17:00.630]  and you'll see why bump keys are
[01:17:00.630 --> 01:17:01.790]  very, very similar.
[01:17:04.690 --> 01:17:07.150]  Basic physics, guys. If we have a
[01:17:07.150 --> 01:17:09.290]  billiard balls on the table, what's going to happen
[01:17:09.290 --> 01:17:13.350]  if I shoot this cue?
[01:17:13.350 --> 01:17:13.610]  Yes.
[01:17:13.610 --> 01:17:15.210]  3 is not really going to go anywhere.
[01:17:15.210 --> 01:17:17.490]  2 is going to go flying. Newtonian physics
[01:17:17.490 --> 01:17:20.350]  at its finest.
[01:17:20.350 --> 01:17:21.510]  Pick guns work the same way.
[01:17:21.510 --> 01:17:23.370]  Pick guns, just a long blade
[01:17:23.370 --> 01:17:25.570]  down the barrel. It's tension with a spring
[01:17:25.570 --> 01:17:27.390]  and a trigger that flicks this.
[01:17:27.450 --> 01:17:29.890]  Pick guns work by smashing on the bottom pins.
[01:17:29.890 --> 01:17:31.790]  Hopefully, if you get it all lined up just right,
[01:17:31.790 --> 01:17:33.470]  you need a little practice, but you can smash them all
[01:17:33.470 --> 01:17:35.570]  at the same time. And if you're
[01:17:35.570 --> 01:17:37.630]  lucky, all the top pins will jump up
[01:17:37.630 --> 01:17:39.350]  and you can turn the lock very quickly
[01:17:39.350 --> 01:17:41.710]  before they have a chance to spring back down.
[01:17:42.650 --> 01:17:43.870]  But pick guns,
[01:17:43.870 --> 01:17:45.750]  besides being expensive,
[01:17:45.750 --> 01:17:47.970]  bulky, a pain in the ass to carry around,
[01:17:48.190 --> 01:17:49.590]  a very hard thing to explain what the
[01:17:49.590 --> 01:17:51.590]  hell they are if you get asked,
[01:17:52.670 --> 01:17:53.670]  there's a cheaper,
[01:17:53.670 --> 01:17:55.530]  easier, smaller, and very simple
[01:17:55.530 --> 01:17:57.550]  solution that can replicate this same
[01:17:57.550 --> 01:17:58.370]  physics.
[01:18:00.370 --> 01:18:01.910]  Thank you for this, by the way.
[01:18:02.750 --> 01:18:03.550]  It's a retribution
[01:18:03.550 --> 01:18:04.910]  for a previous beer bought.
[01:18:05.830 --> 01:18:07.550]  Laz and I first actually met,
[01:18:07.550 --> 01:18:10.170]  was it here at, was it 10 or 11?
[01:18:10.190 --> 01:18:11.230]  I don't know, I was drunk.
[01:18:11.750 --> 01:18:13.470]  Laz was up on stage and he was
[01:18:13.470 --> 01:18:15.550]  picking away and he wanted beer
[01:18:15.550 --> 01:18:17.570]  and I brought one up and I think I said
[01:18:17.570 --> 01:18:19.450]  something about, yeah, I saw you at Hope and I learned
[01:18:19.450 --> 01:18:21.550]  to pick. He's like, come up here and show me, man.
[01:18:21.590 --> 01:18:23.490]  I'm trying to embarrass my ass and I finally picked one
[01:18:23.490 --> 01:18:24.310]  for you, though.
[01:18:24.730 --> 01:18:26.790]  By the way, you're a dick.
[01:18:27.190 --> 01:18:29.230]  Why am I a dick? I was sitting over in speaker registration
[01:18:29.230 --> 01:18:31.530]  and I saw a video of me and Barry on stage
[01:18:31.530 --> 01:18:33.990]  and you're like, by the way, that's Barry, you didn't fucking mention me.
[01:18:34.010 --> 01:18:35.430]  Well, I'm sorry, it says your name
[01:18:35.430 --> 01:18:36.850]  in the link, Barry and Laz.
[01:18:36.930 --> 01:18:37.650]  Thanks.
[01:18:40.590 --> 01:18:41.270]  Alright, so
[01:18:41.270 --> 01:18:43.650]  simulating a pick gun
[01:18:44.030 --> 01:18:45.170]  with a bump key
[01:18:45.170 --> 01:18:46.730]  works as follows.
[01:18:47.890 --> 01:18:49.570]  Take a key that was designed
[01:18:49.570 --> 01:18:50.990]  for your lock.
[01:18:50.990 --> 01:18:52.950]  Notice I didn't say cut for your lock.
[01:18:52.950 --> 01:18:54.350]  It doesn't have to be the right bidding.
[01:18:54.350 --> 01:18:56.910]  It just has to be the right keyway that fits
[01:18:57.910 --> 01:18:59.470]  down into your lock.
[01:19:00.230 --> 01:19:01.270]  Take that and cut
[01:19:01.270 --> 01:19:03.470]  all the bidding notches to the deepest level.
[01:19:03.710 --> 01:19:05.190]  That's where you get 999.
[01:19:06.170 --> 01:19:07.030]  Now I'm going to be burping
[01:19:07.030 --> 01:19:08.810]  from this friggin' beer.
[01:19:09.490 --> 01:19:11.970]  You can do this with a key machine.
[01:19:12.310 --> 01:19:13.090]  Go to your local
[01:19:13.090 --> 01:19:15.030]  hardware store and be like, can you cut it to
[01:19:15.030 --> 01:19:17.010]  999? The kid who's making 550
[01:19:17.010 --> 01:19:18.370]  isn't going to ask you why.
[01:19:19.090 --> 01:19:19.690]  Or you can
[01:19:21.230 --> 01:19:22.350]  do this with a Dremel.
[01:19:22.350 --> 01:19:24.650]  You can do this with a lot of different tools.
[01:19:26.210 --> 01:19:27.010]  I've hand cut
[01:19:27.010 --> 01:19:28.850]  them before and they will work.
[01:19:29.510 --> 01:19:30.410]  Take this key
[01:19:31.030 --> 01:19:32.870]  and insert it into your lock.
[01:19:32.870 --> 01:19:34.910]  Not all the way. You'll actually feel
[01:19:34.910 --> 01:19:37.070]  as these ridges are going past the pins
[01:19:37.070 --> 01:19:39.250]  you'll feel it click, click, click as it goes in.
[01:19:39.510 --> 01:19:41.190]  Make sure it's one pin stack
[01:19:41.190 --> 01:19:42.030]  out.
[01:19:43.030 --> 01:19:43.990]  What's that?
[01:19:44.930 --> 01:19:46.890]  Yeah, put it all the way in
[01:19:46.890 --> 01:19:48.610]  and just click it out by one.
[01:19:49.370 --> 01:19:50.570]  Next thing you want to do
[01:19:51.050 --> 01:19:53.130]  is put a little bit of torque on this
[01:19:53.130 --> 01:19:55.210]  key and just smash the hell out
[01:19:55.210 --> 01:19:55.850]  of it.
[01:19:56.950 --> 01:19:58.730]  You come at it with a force.
[01:19:59.030 --> 01:20:00.910]  It bangs across all those ridges
[01:20:00.910 --> 01:20:03.070]  and you can see they connect. Hopefully
[01:20:03.510 --> 01:20:05.270]  you'll hit all of them at the same time
[01:20:05.270 --> 01:20:07.550]  and all those top pins will jump up.
[01:20:12.010 --> 01:20:13.050]  Yeah, you'll smash
[01:20:13.050 --> 01:20:14.290]  your hand a lot.
[01:20:15.490 --> 01:20:17.170]  It's just how that goes.
[01:20:17.930 --> 01:20:18.890]  One thing you often will get
[01:20:18.890 --> 01:20:20.850]  better luck with when you make a bump key, if you
[01:20:20.850 --> 01:20:22.990]  cut the shoulder back just a hair farther than it should
[01:20:22.990 --> 01:20:24.630]  this makes life a little bit easier.
[01:20:24.810 --> 01:20:26.810]  It gives a little bit more wiggle room when you're bumping it
[01:20:26.810 --> 01:20:29.010]  and knocks them a little bit harder. Not much of a difference
[01:20:29.010 --> 01:20:29.910]  but it does help.
[01:20:33.070 --> 01:20:34.770]  This is a
[01:20:34.770 --> 01:20:35.530]  kind of what we'll call
[01:20:35.530 --> 01:20:38.050]  one grade up from master.
[01:20:38.050 --> 01:20:38.930]  This is a fortress lock
[01:20:38.930 --> 01:20:40.630]  and this is a key that
[01:20:40.630 --> 01:20:42.610]  originally went to
[01:20:42.610 --> 01:20:44.230]  let me see if I have this one right
[01:20:44.790 --> 01:20:46.370]  originally went to a different fortress lock
[01:20:47.830 --> 01:20:48.990]  but I've cut it way
[01:20:48.990 --> 01:20:50.870]  down. Now if I
[01:20:50.870 --> 01:20:51.510]  put this in
[01:20:52.710 --> 01:20:54.190]  this will not open this lock
[01:20:55.130 --> 01:20:56.690]  but if I pull it out by one
[01:20:57.970 --> 01:20:58.910]  I'm going to try to
[01:20:58.910 --> 01:21:00.230]  do this so everyone can
[01:21:00.850 --> 01:21:02.850]  work with the camera here. The trick
[01:21:02.850 --> 01:21:04.910]  is a little and a lot. A little
[01:21:04.910 --> 01:21:06.910]  bit of torque and a lot of
[01:21:06.910 --> 01:21:07.990]  a little bit of bang.
[01:21:08.850 --> 01:21:10.490]  You actually want the sensation
[01:21:10.490 --> 01:21:12.650]  of the key slipping out of
[01:21:13.830 --> 01:21:14.630]  your fingertips
[01:21:14.630 --> 01:21:16.830]  as it's being knocked by the lock.
[01:21:19.650 --> 01:21:20.730]  There you go.
[01:21:32.950 --> 01:21:34.630]  You shouldn't have tried the second time, should you?
[01:21:35.070 --> 01:21:36.690]  I was impressed the first time.
[01:21:38.790 --> 01:21:41.450]  I'm pulling it too hard because I don't want to smash my thumbs.
[01:21:41.650 --> 01:21:42.450]  Pussy.
[01:21:44.910 --> 01:21:46.170]  Here, you do it then.
[01:21:46.230 --> 01:21:47.030]  Shit, I don't do that.
[01:21:48.070 --> 01:21:49.670]  That's why I have both colors for you.
[01:21:50.410 --> 01:21:51.690]  So that's bump keying.
[01:21:51.810 --> 01:21:53.790]  But there is a... I'm sorry, question.
[01:22:02.980 --> 01:22:04.440]  You're a brighter man than I.
[01:22:04.860 --> 01:22:06.680]  The question is why can't, you know, you just put...
[01:22:09.520 --> 01:22:10.940]  Yeah, put a torque tool in there
[01:22:10.940 --> 01:22:13.000]  or on the key. Yeah, you probably could do that.
[01:22:13.460 --> 01:22:14.740]  I'm not thinking clearly
[01:22:14.740 --> 01:22:16.520]  apparently. My thumb
[01:22:16.520 --> 01:22:17.800]  thanks you for that.
[01:22:19.120 --> 01:22:20.540]  This is sort of the
[01:22:20.540 --> 01:22:22.600]  dirty bump method, if you will.
[01:22:22.600 --> 01:22:24.000]  It's not that sophisticated.
[01:22:24.340 --> 01:22:26.740]  There is an even better bump method that the guys
[01:22:26.740 --> 01:22:29.640]  in Tool in the Netherlands came up with.
[01:22:32.040 --> 01:22:33.300]  I'm sorry, there's a question.
[01:22:33.300 --> 01:22:34.640]  Where was it? Left side.
[01:22:37.600 --> 01:22:38.760]  Not exactly.
[01:22:38.760 --> 01:22:40.860]  Raking, I didn't even cover raking that much.
[01:22:40.860 --> 01:22:42.380]  We'll talk about it in the hands-on.
[01:22:42.380 --> 01:22:44.860]  Raking is just beating up the pins
[01:22:45.420 --> 01:22:46.820]  independently, trying to just
[01:22:46.820 --> 01:22:48.500]  catch a bunch of shear lines at once
[01:22:48.500 --> 01:22:50.080]  on a crappier lock.
[01:22:50.540 --> 01:22:52.700]  Bump keying actually is intended to
[01:22:52.700 --> 01:22:54.860]  hit all the pins simultaneously.
[01:23:05.220 --> 01:23:06.980]  Oh, master wafer. Yeah, that can
[01:23:06.980 --> 01:23:08.960]  happen. The question was, we'll talk about
[01:23:08.960 --> 01:23:10.820]  master pinning in a little bit.
[01:23:12.160 --> 01:23:12.980]  Master pinning
[01:23:12.980 --> 01:23:14.960]  sometimes involves very small pins
[01:23:14.960 --> 01:23:16.680]  inserted or actually wafer shaped pins
[01:23:16.680 --> 01:23:19.100]  inserted into the stack with a
[01:23:19.100 --> 01:23:21.280]  big gap introduced like that.
[01:23:21.280 --> 01:23:22.820]  Can those flip and bind up? Yes, that
[01:23:22.820 --> 01:23:24.600]  conceivably can happen. It's not the most
[01:23:24.600 --> 01:23:27.160]  common thing because the gap is only there for a second.
[01:23:27.300 --> 01:23:29.160]  But I imagine it could happen.
[01:23:29.260 --> 01:23:31.020]  A little addendum to that.
[01:23:31.680 --> 01:23:32.960]  If that is happening,
[01:23:32.960 --> 01:23:34.880]  it's because the locksmith didn't follow the manufacturer's
[01:23:34.880 --> 01:23:36.680]  tolerances or the lock is wearing out because
[01:23:36.680 --> 01:23:38.580]  they have specific minimum wafer sizes
[01:23:38.580 --> 01:23:40.740]  so that doesn't happen. Because that used to happen a tremendous
[01:23:40.740 --> 01:23:42.680]  amount with people using too small of a wafer.
[01:23:43.340 --> 01:23:44.620]  There you go. Thank you.
[01:23:45.300 --> 01:23:47.020]  Shit, I got beer, man. I'm running out.
[01:23:47.100 --> 01:23:47.700]  Alright.
[01:23:49.140 --> 01:23:50.760]  Now, with respect to the
[01:23:50.760 --> 01:23:52.860]  I said that was like the dirty bump technique
[01:23:52.860 --> 01:23:54.980]  there is a really nice bump technique
[01:23:54.980 --> 01:23:57.340]  that's been published by the guys in Tool.
[01:23:57.340 --> 01:23:58.880]  It's called the Minimal Movement
[01:23:58.880 --> 01:24:00.960]  Bump. They actually have a
[01:24:00.960 --> 01:24:03.180]  white paper about it.
[01:24:03.180 --> 01:24:05.080]  This involves taking an
[01:24:05.080 --> 01:24:06.900]  existing bump key and
[01:24:06.900 --> 01:24:08.940]  at two different points heavily
[01:24:09.280 --> 01:24:12.160]  modifying this bump key even further.
[01:24:12.160 --> 01:24:13.580]  You can shave off
[01:24:13.580 --> 01:24:15.200]  probably about a quarter to a half
[01:24:15.340 --> 01:24:16.840]  of a millimeter from the shoulder
[01:24:17.920 --> 01:24:18.700]  and a half of a millimeter
[01:24:18.700 --> 01:24:20.720]  or more from the tip.
[01:24:22.600 --> 01:24:22.740]  Now
[01:24:22.740 --> 01:24:24.400]  this is a very, very unique
[01:24:24.400 --> 01:24:26.520]  modified key. If you have it in the lock
[01:24:26.520 --> 01:24:28.760]  you can even squeeze it a little deeper now
[01:24:28.760 --> 01:24:31.040]  because you've shaved the key down.
[01:24:31.160 --> 01:24:32.540]  And you notice that as you squeeze it in
[01:24:32.540 --> 01:24:34.600]  the spring pressures from the driver pins
[01:24:34.600 --> 01:24:36.540]  up top will actually kind of kick it back out
[01:24:36.760 --> 01:24:37.920]  a millimeter or so.
[01:24:38.260 --> 01:24:40.780]  This enables you to deliver a lot of
[01:24:40.780 --> 01:24:42.280]  force right where you want it
[01:24:42.280 --> 01:24:44.280]  very precisely without
[01:24:44.280 --> 01:24:46.900]  smashing across whole rows of pins.
[01:24:46.900 --> 01:24:48.760]  You come at this. They have a tool they call
[01:24:49.580 --> 01:24:50.920]  a tomahawk. I've seen them
[01:24:50.920 --> 01:24:52.560]  whack right at it. It comes right into
[01:24:52.560 --> 01:24:54.540]  beautiful force, delivered real clean
[01:24:54.540 --> 01:24:56.160]  and I've seen them bump
[01:24:56.800 --> 01:24:59.080]  really sophisticated like Barry mentioned.
[01:24:59.080 --> 01:25:00.920]  Remember I said the geographical weakness
[01:25:00.920 --> 01:25:02.040]  on that V10?
[01:25:02.360 --> 01:25:04.680]  He can make a bump key out of a V10
[01:25:04.680 --> 01:25:06.820]  because the top part of the bidding will
[01:25:06.820 --> 01:25:08.980]  bump. The bottom part of the bidding on the side
[01:25:08.980 --> 01:25:10.940]  bar just does its job normally.
[01:25:11.140 --> 01:25:12.740]  He bumps his V10 that way.
[01:25:12.740 --> 01:25:14.560]  He's bumped multi-locks that way I've heard.
[01:25:14.560 --> 01:25:16.340]  I can't imagine how, but I guess the force
[01:25:16.340 --> 01:25:18.420]  just gets delivered because we talked about how
[01:25:18.420 --> 01:25:20.000]  the interactive pins work.
[01:25:21.780 --> 01:25:22.760]  That's a very
[01:25:22.760 --> 01:25:24.120]  powerful attack.
[01:25:24.320 --> 01:25:26.580]  It can, by the way, be bad for the lock.
[01:25:26.580 --> 01:25:28.800]  If you have a family heirloom
[01:25:28.800 --> 01:25:30.280]  or something and you're like,
[01:25:30.280 --> 01:25:31.840]  I'm going to play with bump keying.
[01:25:32.120 --> 01:25:34.440]  Don't do it if you care about the lock because I've destroyed
[01:25:34.440 --> 01:25:36.520]  locks doing this, especially if you do
[01:25:36.520 --> 01:25:38.300]  the dirty method. It'll misshape the pins.
[01:25:38.300 --> 01:25:40.000]  It'll really beat things up.
[01:25:40.220 --> 01:25:42.260]  I've had locks that just don't even work anymore
[01:25:42.260 --> 01:25:43.920]  because I've bumped them to death.
[01:25:48.600 --> 01:25:50.100]  We can cover that a little.
[01:25:50.100 --> 01:25:52.320]  The question was, doesn't this leave clear
[01:25:52.320 --> 01:25:54.380]  indications that this has happened? There's forensic
[01:25:54.380 --> 01:25:56.280]  evidence. We can talk about that in a bit.
[01:25:56.280 --> 01:25:58.560]  I've got to keep moving through though. We've got a lot of good stuff.
[01:26:00.020 --> 01:26:01.100]  Wait, yes, question.
[01:26:06.680 --> 01:26:07.600]  What keeps the
[01:26:07.600 --> 01:26:08.660]  key pins?
[01:26:10.280 --> 01:26:11.920]  Well, they can't fall down
[01:26:11.920 --> 01:26:13.620]  anymore because they're in the
[01:26:13.620 --> 01:26:15.340]  keyway as far down as they go.
[01:26:15.500 --> 01:26:17.800]  And they're not going to jump up because we're transferring
[01:26:17.800 --> 01:26:19.220]  physical force through them.
[01:26:19.220 --> 01:26:21.940]  So they're just going to sit right where they are.
[01:26:22.120 --> 01:26:23.880]  They're not going to go up, they're not going to go down.
[01:26:24.020 --> 01:26:25.340]  They have nowhere to go.
[01:26:25.860 --> 01:26:27.640]  There's spring tension behind them so they're not
[01:26:27.640 --> 01:26:29.800]  staying suspended. You have a half of a split
[01:26:29.800 --> 01:26:31.460]  second where they're up there and you're just
[01:26:31.460 --> 01:26:33.900]  catching that right moment. They're not staying up there permanently.
[01:26:34.080 --> 01:26:35.640]  You're just hitting it and they stay there for a split
[01:26:35.640 --> 01:26:37.200]  second like throwing a ball in the air.
[01:26:37.540 --> 01:26:39.820]  And while it's upright, just at the right height is when you grab it.
[01:26:40.200 --> 01:26:40.760]  Alright.
[01:26:42.220 --> 01:26:43.840]  Let me cut you off for half a second.
[01:26:43.840 --> 01:26:45.680]  General disclaimer, I don't know if you did this, I'm sorry I was
[01:26:46.020 --> 01:26:46.580]  registering.
[01:26:47.480 --> 01:26:49.040]  You mentioned you can break locks.
[01:26:50.120 --> 01:26:51.340]  Don't practice on your front door
[01:26:51.820 --> 01:26:53.740]  for a number of reasons. One, because you may
[01:26:53.740 --> 01:26:55.820]  break the lock, but more importantly because your neighbors will call the
[01:26:55.820 --> 01:26:58.100]  cops because they don't know who you are.
[01:26:58.720 --> 01:26:59.800]  If you're going to practice on any door,
[01:26:59.800 --> 01:27:01.740]  try a back door or whatnot, but still you're going to get your ass locked
[01:27:01.740 --> 01:27:03.800]  out of your house. So just go buy a $10 lock from Home Depot
[01:27:03.800 --> 01:27:04.500]  to practice.
[01:27:05.660 --> 01:27:06.740]  Very, very good point.
[01:27:07.480 --> 01:27:08.680]  So yes, this can be bad
[01:27:08.680 --> 01:27:11.400]  for the lock. I've destroyed locks doing this.
[01:27:11.420 --> 01:27:12.860]  Some of my locks, I've had to
[01:27:12.860 --> 01:27:14.540]  try to lubricate them to open them now
[01:27:14.540 --> 01:27:16.700]  because they're just broken and about lubrication.
[01:27:16.700 --> 01:27:18.740]  The question for a Red Bull...
[01:27:21.520 --> 01:27:22.740]  When, if ever,
[01:27:22.740 --> 01:27:24.860]  do you use WD-40 in a lock
[01:27:24.860 --> 01:27:26.400]  and why or why not?
[01:27:26.760 --> 01:27:28.060]  Whoa, that was a lot of...
[01:27:28.060 --> 01:27:30.980]  I think it was grayish blue shirt here.
[01:27:34.140 --> 01:27:35.180]  Half right answer.
[01:27:35.180 --> 01:27:36.260]  Get you a lighter.
[01:27:36.800 --> 01:27:38.040]  Come on up for a lighter.
[01:27:52.870 --> 01:27:54.470]  Oh, well it's a little bit...
[01:27:54.470 --> 01:27:57.150]  You're kind of on the right track, but I'm looking for a solid
[01:27:57.150 --> 01:27:59.270]  answer on when, if ever, you can use
[01:27:59.270 --> 01:28:01.490]  WD. I've got a guy down here with the glasses.
[01:28:03.050 --> 01:28:05.070]  Well, his answer was never, and I'm saying
[01:28:05.070 --> 01:28:07.410]  that's not a completely accurate answer.
[01:28:12.270 --> 01:28:14.570]  Well, you're all right around...
[01:28:14.570 --> 01:28:16.130]  Basically, a lot of people are hitting
[01:28:16.130 --> 01:28:17.950]  this point. The main point I wanted to make...
[01:28:17.950 --> 01:28:20.070]  Hang on here. My guy's in the front.
[01:28:20.070 --> 01:28:22.230]  Just throw some lighter at these people with their hands up.
[01:28:22.310 --> 01:28:23.770]  Because everyone kind of has it.
[01:28:23.950 --> 01:28:25.570]  Keep your hands up. I know who you are.
[01:28:26.170 --> 01:28:28.170]  That, hey, extra hands just went up.
[01:28:30.210 --> 01:28:32.010]  The point I wanted to make is
[01:28:32.390 --> 01:28:34.310]  WD-40 is not good...
[01:28:34.310 --> 01:28:35.870]  You can... You got them?
[01:28:35.870 --> 01:28:37.630]  These guys? All right.
[01:28:37.790 --> 01:28:39.450]  Start ripping with people's heads, dude.
[01:28:40.550 --> 01:28:42.150]  WD-40... We got a guy...
[01:28:47.540 --> 01:28:48.120]  Yes.
[01:28:48.180 --> 01:28:49.360]  WD-40...
[01:28:49.360 --> 01:28:50.580]  Did you get one?
[01:28:51.480 --> 01:28:52.520]  Was that a question?
[01:28:59.510 --> 01:29:00.470]  Very, very good.
[01:29:00.470 --> 01:29:01.770]  He's got the full... You actually...
[01:29:01.770 --> 01:29:03.610]  You get the Red Bull.
[01:29:07.350 --> 01:29:08.110]  Yes. All right.
[01:29:08.450 --> 01:29:10.090]  We got to keep moving. Here's the...
[01:29:10.090 --> 01:29:12.050]  Oh, man. We're really dying on time.
[01:29:12.070 --> 01:29:14.250]  The deal is... Well, that's cool.
[01:29:14.250 --> 01:29:15.750]  But we got a lot to cover.
[01:29:15.750 --> 01:29:17.170]  I added a lot of shit.
[01:29:18.850 --> 01:29:19.810]  WD-40...
[01:29:19.810 --> 01:29:21.350]  Anybody who's in the service,
[01:29:21.350 --> 01:29:22.910]  especially the Navy, maybe you can tell me,
[01:29:22.910 --> 01:29:24.590]  what does WD-40 stand for?
[01:29:25.250 --> 01:29:27.590]  Water displacement is exactly right.
[01:29:27.590 --> 01:29:29.330]  Water displacer 40 was a formula
[01:29:29.330 --> 01:29:31.190]  designed to seep into
[01:29:31.190 --> 01:29:33.630]  maritime situations,
[01:29:33.630 --> 01:29:35.290]  to seep into all the cracks,
[01:29:35.290 --> 01:29:37.210]  to dry out in there, to actually make
[01:29:37.210 --> 01:29:39.050]  this little waxy buildup to keep
[01:29:39.050 --> 01:29:40.770]  water out of machinery
[01:29:40.770 --> 01:29:43.170]  so it didn't rust and corrode when it was in there.
[01:29:43.170 --> 01:29:45.590]  It was not meant as a lubricant.
[01:29:45.590 --> 01:29:47.810]  It's kind of the antithesis of a lubricant.
[01:29:47.810 --> 01:29:49.490]  Yes, it's greasy when it goes in,
[01:29:49.490 --> 01:29:51.050]  but it doesn't stay that way.
[01:29:51.450 --> 01:29:53.790]  There's essentially three kinds of lubricants
[01:29:53.790 --> 01:29:55.990]  out there. There's wet lubricant,
[01:29:55.990 --> 01:29:57.830]  dry lubricant, and drying
[01:29:57.830 --> 01:29:59.670]  lubricant. And everyone who's tuned
[01:29:59.670 --> 01:30:01.770]  in on the APTV system just right now,
[01:30:01.770 --> 01:30:03.910]  they're saying, what the hell talk is this?
[01:30:03.910 --> 01:30:04.370]  Looking at the...
[01:30:05.950 --> 01:30:08.070]  Did they move the schedule around?
[01:30:10.810 --> 01:30:11.770]  Different situations
[01:30:11.770 --> 01:30:13.570]  call for different products.
[01:30:13.570 --> 01:30:15.290]  If you have any precision
[01:30:15.290 --> 01:30:17.990]  mechanism, like, for instance, locks,
[01:30:17.990 --> 01:30:19.390]  you want to use exclusively
[01:30:19.650 --> 01:30:21.530]  a wet or oil-based lubricant,
[01:30:21.530 --> 01:30:23.770]  something that is going to go in wet and stay wet.
[01:30:23.770 --> 01:30:25.410]  I use gun oil on most of my
[01:30:25.410 --> 01:30:27.610]  really, really high-end locks because it'll
[01:30:27.610 --> 01:30:29.150]  not foul the thing up.
[01:30:30.350 --> 01:30:31.390]  Dirt and fouling
[01:30:31.390 --> 01:30:33.570]  can get into oil, and it
[01:30:33.570 --> 01:30:35.630]  can gum things up if you live in a
[01:30:35.630 --> 01:30:37.630]  really harsh environment. If you have,
[01:30:37.630 --> 01:30:40.530]  let's say, a lock out in the desert somewhere,
[01:30:40.530 --> 01:30:41.770]  Las Vegas, any locals,
[01:30:42.230 --> 01:30:43.830]  maybe you want to use graphite
[01:30:43.830 --> 01:30:45.870]  powder in a lock like that because it'll go
[01:30:45.870 --> 01:30:47.970]  in dry and stay dry.
[01:30:48.550 --> 01:30:49.710]  It'll help, you know, it won't get
[01:30:49.710 --> 01:30:51.410]  too fouled up and gummed up.
[01:30:52.010 --> 01:30:53.690]  That's right, it won't freeze. But just
[01:30:53.690 --> 01:30:55.670]  know that WD-40 will
[01:30:56.070 --> 01:30:57.830]  attract dirt and fouling. It'll trap
[01:30:57.830 --> 01:30:59.710]  it up. The only time, by the way,
[01:30:59.710 --> 01:31:01.650]  the answer, the full answer I was looking for,
[01:31:01.650 --> 01:31:03.670]  the only time you use WD-40
[01:31:03.670 --> 01:31:05.850]  is if the lock is jammed and you don't
[01:31:05.850 --> 01:31:07.730]  care about the lock. If, you know,
[01:31:07.730 --> 01:31:09.630]  you've gone over to your aunt's house for Christmas
[01:31:09.630 --> 01:31:11.450]  and she says, oh, I think that's the trees
[01:31:11.450 --> 01:31:13.530]  out in the shed, the decorations. And you go out there
[01:31:13.530 --> 01:31:15.650]  and it's a lock that someone hasn't opened since 1974
[01:31:16.070 --> 01:31:17.670]  and it's rusted to hell.
[01:31:17.770 --> 01:31:19.570]  Yeah, you can WD-40 it or you can
[01:31:19.570 --> 01:31:21.670]  soak it in kerosene and maybe it'll
[01:31:21.670 --> 01:31:23.530]  open and then you throw the lock away
[01:31:23.530 --> 01:31:25.510]  because it's not, that's not good for the future
[01:31:25.510 --> 01:31:26.650]  health of the lock.
[01:31:27.810 --> 01:31:28.530]  Yes?
[01:31:31.750 --> 01:31:34.050]  LPS makes a good product? What is LPS?
[01:31:46.290 --> 01:31:47.010]  Okay.
[01:31:48.030 --> 01:31:49.510]  So yeah, he meant,
[01:31:49.510 --> 01:31:51.310]  the gentleman mentions industrial lubricants,
[01:31:51.310 --> 01:31:53.430]  high-end industrial lubricants are good.
[01:31:54.110 --> 01:31:55.170]  Yeah, Google for LPS
[01:31:55.170 --> 01:31:57.110]  or check it out, Molly Coat, those are
[01:31:57.110 --> 01:31:58.050]  also good.
[01:31:59.290 --> 01:32:01.250]  Let's talk about something that was referenced
[01:32:01.250 --> 01:32:02.950]  in the last talk.
[01:32:04.130 --> 01:32:05.270]  Firearm locks.
[01:32:05.270 --> 01:32:07.170]  How many, we got a lot of libertarian type
[01:32:07.170 --> 01:32:09.610]  people here at DEF CON, how many people are gun owners?
[01:32:10.010 --> 01:32:11.710]  You don't have to raise your hands if you don't want to.
[01:32:12.150 --> 01:32:13.070]  How many people
[01:32:13.070 --> 01:32:14.990]  lock your guns in some fashion?
[01:32:16.370 --> 01:32:17.330]  What I'd like to see,
[01:32:17.330 --> 01:32:18.530]  maybe you don't have kids in the house,
[01:32:18.530 --> 01:32:21.050]  you don't have kids in your house, then you lock your door.
[01:32:21.050 --> 01:32:22.330]  Do super soakers count?
[01:32:24.750 --> 01:32:26.950]  We're going to talk about something that's very serious
[01:32:26.950 --> 01:32:29.070]  to me right now, just because
[01:32:29.070 --> 01:32:29.830]  it's a very
[01:32:31.030 --> 01:32:32.810]  important issue that people understand,
[01:32:32.810 --> 01:32:35.070]  the severe weaknesses of some locks,
[01:32:35.070 --> 01:32:36.990]  what they're designed to do, and what they're not
[01:32:36.990 --> 01:32:38.030]  designed to do.
[01:32:38.550 --> 01:32:40.910]  I would like a volunteer, I know we have
[01:32:40.910 --> 01:32:42.910]  people on the goon squad, I know in fact
[01:32:42.910 --> 01:32:44.910]  Vairosa, you have time in the service.
[01:32:45.370 --> 01:32:47.090]  Stand up for a second, man. I'm going to use
[01:32:47.090 --> 01:32:48.890]  Lou. Everyone, this is
[01:32:48.890 --> 01:32:49.750]  Vairosa.
[01:32:51.050 --> 01:32:52.690]  Come on, stand up for the guy.
[01:32:56.170 --> 01:32:57.430]  Vairosa has served,
[01:32:57.430 --> 01:32:59.110]  so he's going to be our authority
[01:32:59.110 --> 01:33:00.950]  for today. I'd like, and this
[01:33:00.950 --> 01:33:03.170]  is for everyone's comfort, he's
[01:33:03.170 --> 01:33:05.070]  going to inspect a stage
[01:33:05.070 --> 01:33:06.990]  prop that I have that looks like
[01:33:07.130 --> 01:33:09.170]  a weapon, but we're going to take him
[01:33:09.170 --> 01:33:10.990]  at his authority that it is not a
[01:33:10.990 --> 01:33:12.870]  functioning firearm. I want everyone to
[01:33:12.870 --> 01:33:15.090]  know this, I want everyone to be very...
[01:33:15.090 --> 01:33:16.930]  Yeah, you haven't anything to drink, have you?
[01:33:17.810 --> 01:33:19.050]  Is everyone comfortable
[01:33:19.050 --> 01:33:20.890]  with his authority as opposed
[01:33:20.890 --> 01:33:23.230]  to you physically inspecting it yourself? If not,
[01:33:23.230 --> 01:33:24.830]  we can actually have someone else
[01:33:24.830 --> 01:33:26.770]  who is even more well known,
[01:33:26.770 --> 01:33:28.910]  if you'd like a priest or someone to come up. But is
[01:33:28.910 --> 01:33:30.210]  everyone okay with Vairosa?
[01:33:31.010 --> 01:33:31.690]  Alright.
[01:33:35.190 --> 01:33:36.910]  Yeah, it really pisses off the TSA when you put that
[01:33:36.910 --> 01:33:39.310]  in your carry-on, by the way. Yeah, FedEx.
[01:33:40.270 --> 01:33:41.370]  So yeah, it
[01:33:41.370 --> 01:33:43.310]  should be a filed down firing pin, the
[01:33:43.310 --> 01:33:45.430]  barrel's solid. Solid
[01:33:45.430 --> 01:33:47.250]  barrel will pretty much do the job. Yeah.
[01:33:48.450 --> 01:33:49.530]  Would you care to certify
[01:33:49.530 --> 01:33:50.990]  that this is a non-firing weapon?
[01:33:51.490 --> 01:33:52.930]  I didn't see that it's non-firing.
[01:33:52.930 --> 01:33:55.210]  There's nothing in it.
[01:33:55.250 --> 01:33:57.250]  It's completely cored up.
[01:33:59.310 --> 01:34:00.590]  It's a solid barrel.
[01:34:05.000 --> 01:34:06.020]  I don't know if you can see...
[01:34:06.680 --> 01:34:07.740]  Dude, don't worry. Alright.
[01:34:07.740 --> 01:34:09.860]  Well, I'm just very serious about this.
[01:34:11.140 --> 01:34:11.940]  Thank you.
[01:34:11.940 --> 01:34:12.580]  Thank you.
[01:34:25.500 --> 01:34:26.120]  How many
[01:34:26.120 --> 01:34:27.880]  people have ever used
[01:34:28.180 --> 01:34:29.900]  a trigger lock that looks like this?
[01:34:31.120 --> 01:34:32.020]  I'm very pleased
[01:34:32.020 --> 01:34:33.560]  that not too many people have.
[01:34:33.960 --> 01:34:35.980]  When I was... God, I want to say
[01:34:35.980 --> 01:34:38.100]  I was 12 or 13,
[01:34:38.100 --> 01:34:40.040]  I got an air gun for my
[01:34:40.040 --> 01:34:42.220]  birthday, and a
[01:34:42.220 --> 01:34:44.620]  lock like this is what was installed on it.
[01:34:44.620 --> 01:34:47.580]  I'm going to guess I was probably about
[01:34:47.580 --> 01:34:48.140]  14 when I figured out
[01:34:48.140 --> 01:34:50.220]  how easy it was to bust this up.
[01:34:50.860 --> 01:34:52.160]  And my parents were very proud that I
[01:34:52.160 --> 01:34:54.160]  actually was just so proud of the discovery.
[01:34:54.160 --> 01:34:56.860]  I went and showed them right away. They're like, wow, that's so neat.
[01:34:56.960 --> 01:34:58.560]  This goes in our closet now.
[01:35:07.900 --> 01:35:08.700]  This is
[01:35:11.620 --> 01:35:13.640]  your typical trigger lock.
[01:35:15.280 --> 01:35:17.120]  Most vendors of trigger locks,
[01:35:18.600 --> 01:35:21.560]  there are two popular designs of trigger locks.
[01:35:21.580 --> 01:35:22.840]  There are bad,
[01:35:22.840 --> 01:35:24.560]  and there's colossally bad.
[01:35:25.340 --> 01:35:27.000]  Pretty much everyone explores these two
[01:35:27.000 --> 01:35:28.240]  designs of locks.
[01:35:29.200 --> 01:35:31.680]  This is just in the bad category.
[01:35:33.600 --> 01:35:34.580]  Can everyone see?
[01:35:34.580 --> 01:35:36.980]  I feel bad. This camera is so awful.
[01:35:36.980 --> 01:35:38.060]  It's not bad. No, you can see pretty good.
[01:35:38.060 --> 01:35:39.420]  Alright, we'll do what we can.
[01:35:39.680 --> 01:35:42.620]  So this is on. It's installed the way it should go.
[01:35:43.320 --> 01:35:44.740]  I'm going to take this tool
[01:35:48.000 --> 01:35:49.080]  and I can't
[01:35:49.080 --> 01:35:50.080]  really see.
[01:35:52.660 --> 01:35:53.260]  I'm going to have to...
[01:35:53.260 --> 01:35:54.080]  I've got to move my camera
[01:35:54.080 --> 01:35:56.200]  so I can see what I'm doing a little better
[01:35:56.200 --> 01:35:57.500]  and get my hands in it.
[01:36:01.460 --> 01:36:02.300]  It's upside down,
[01:36:02.300 --> 01:36:03.520]  but you guys can live with that.
[01:36:06.520 --> 01:36:07.600]  Oh, am I out of frame?
[01:36:09.820 --> 01:36:12.880]  For anyone who thinks he's out of frame, he's shoving a big-ass piece of metal in there.
[01:36:18.780 --> 01:36:20.700]  Yeah, we don't have to applaud on that one.
[01:36:23.240 --> 01:36:24.260]  This is a piece of
[01:36:24.260 --> 01:36:26.620]  wire, people. This is a
[01:36:26.620 --> 01:36:28.560]  piece of fish snake.
[01:36:28.640 --> 01:36:33.940]  There's a question?
[01:36:33.940 --> 01:36:35.160]  I wouldn't recommend trying
[01:36:35.160 --> 01:36:41.280]  it on a loaded weapon, that's for sure.
[01:36:41.280 --> 01:36:43.820]  Right, you're never supposed to lock a loaded weapon,
[01:36:43.820 --> 01:36:44.780]  people are pointing out to me.
[01:36:44.780 --> 01:36:50.600]  Side note for you though, on that specific weapon, no. On others, maybe.
[01:36:50.600 --> 01:36:51.220]  Why
[01:36:51.220 --> 01:36:52.240]  in the hell
[01:36:50.640 --> 01:36:52.640]  is this possible?
[01:36:54.200 --> 01:36:55.360]  Once again,
[01:36:55.360 --> 01:36:57.040]  the golden rule, the...
[01:36:57.040 --> 01:36:58.340]  I'm sorry.
[01:36:59.340 --> 01:37:01.220]  Yeah, keep shouting at me if I'm out of frame,
[01:37:01.220 --> 01:37:02.800]  because I want you guys to see everything.
[01:37:03.000 --> 01:37:04.800]  The golden rule of, you know,
[01:37:04.800 --> 01:37:07.160]  the triumph and peril of our
[01:37:07.160 --> 01:37:09.080]  capitalistic system is that the marketplace
[01:37:09.080 --> 01:37:11.180]  will regulate itself.
[01:37:12.160 --> 01:37:13.340]  One of the marketplace forces
[01:37:13.340 --> 01:37:15.360]  is convenience, users' convenience.
[01:37:15.740 --> 01:37:16.960]  How does this lock work?
[01:37:16.960 --> 01:37:19.540]  Well, this lock just has a
[01:37:19.540 --> 01:37:20.880]  pillar down the middle,
[01:37:20.880 --> 01:37:22.700]  as you can see,
[01:37:22.700 --> 01:37:24.890]  and a bar that rotates. Now this bar...
[01:37:25.520 --> 01:37:26.840]  I wonder if I could focus this
[01:37:27.020 --> 01:37:27.940]  a little more.
[01:37:29.720 --> 01:37:31.160]  Nope, that's worse.
[01:37:32.780 --> 01:37:35.060]  I'll take my word for it. This bar, you can kind of see,
[01:37:35.060 --> 01:37:36.980]  has little teeth, notched teeth.
[01:37:37.720 --> 01:37:40.140]  Now these teeth are exposed,
[01:37:40.140 --> 01:37:41.160]  and now these teeth
[01:37:41.160 --> 01:37:41.920]  are hidden.
[01:37:43.200 --> 01:37:44.040]  Those teeth
[01:37:45.840 --> 01:37:47.220]  completely engage with
[01:37:47.920 --> 01:37:49.400]  teeth that you can barely see
[01:37:49.400 --> 01:37:51.720]  down a steel plate,
[01:37:51.720 --> 01:37:54.320]  down this barrel here.
[01:37:56.040 --> 01:37:57.360]  This steel plate
[01:37:58.660 --> 01:38:00.560]  is spring-loaded.
[01:38:04.400 --> 01:38:06.900]  Why is that? The man points it out.
[01:38:06.900 --> 01:38:09.180]  So that if I want to lock this,
[01:38:09.180 --> 01:38:12.860]  and I don't have the key in it,
[01:38:12.860 --> 01:38:15.400]  I can just slide it together.
[01:38:16.340 --> 01:38:17.860]  Do you know how
[01:38:18.960 --> 01:38:20.620]  fucking ridiculously simple
[01:38:20.620 --> 01:38:22.400]  it would be to make
[01:38:22.400 --> 01:38:23.680]  this steel plate
[01:38:24.720 --> 01:38:26.620]  solid? Just make
[01:38:26.620 --> 01:38:28.720]  the bastard part of... you wouldn't even need
[01:38:28.720 --> 01:38:29.680]  the spring.
[01:38:30.820 --> 01:38:32.700]  Just, you know, oh, I need to turn my
[01:38:32.700 --> 01:38:34.460]  key to lock it and secure it.
[01:38:34.460 --> 01:38:36.880]  I'm out of frame again. I can't
[01:38:36.880 --> 01:38:38.940]  fathom why it was designed this way.
[01:38:39.040 --> 01:38:40.260]  But it was.
[01:38:41.280 --> 01:38:42.620]  This is not...
[01:38:43.540 --> 01:38:44.480]  This is nothing.
[01:38:44.480 --> 01:38:46.600]  This is just a joke. I made
[01:38:46.600 --> 01:38:48.780]  this in no time. I made this type of
[01:38:48.780 --> 01:38:50.100]  pick when I was 12.
[01:38:50.420 --> 01:38:52.820]  They mentioned in the last talk, this information is out
[01:38:52.820 --> 01:38:54.680]  there. How many of you have ever read about this?
[01:38:54.680 --> 01:38:56.660]  How many of you have ever heard about this? How many of you
[01:38:56.660 --> 01:38:58.780]  still use a lock, you know, a gun lock like
[01:38:58.780 --> 01:39:00.820]  this? Nobody talks
[01:39:00.820 --> 01:39:02.780]  about this, because the information just doesn't get
[01:39:02.780 --> 01:39:04.920]  out. I hope that
[01:39:04.920 --> 01:39:06.760]  if at least one of you goes home and
[01:39:06.760 --> 01:39:08.660]  tells somebody, maybe someone will stop using
[01:39:08.660 --> 01:39:10.820]  one of these, because it's really bad.
[01:39:10.820 --> 01:39:12.640]  It's just a really bad design.
[01:39:16.930 --> 01:39:18.510]  In the colossal... I'm sorry, we had a
[01:39:18.510 --> 01:39:20.310]  hand. All right.
[01:39:23.450 --> 01:39:24.610]  Who manufactures the blue
[01:39:24.610 --> 01:39:26.490]  lock was a question. They are
[01:39:26.490 --> 01:39:28.550]  somebody I've beat up enough on
[01:39:28.550 --> 01:39:29.830]  on this talk already.
[01:39:31.010 --> 01:39:32.210]  They're kind of litigious
[01:39:33.510 --> 01:39:34.530]  and I'm not going
[01:39:34.530 --> 01:39:36.390]  to say who makes it. Go to
[01:39:36.390 --> 01:39:38.590]  any gun shop in America. They're going to have a whole rack
[01:39:38.590 --> 01:39:40.070]  of them. You can see who makes it.
[01:39:41.910 --> 01:39:42.570]  Somebody said
[01:39:42.570 --> 01:39:43.130]  it.
[01:39:44.730 --> 01:39:46.670]  These are the, just included
[01:39:46.670 --> 01:39:48.770]  for your edification, these are the colossally
[01:39:48.770 --> 01:39:50.270]  bad category.
[01:39:51.510 --> 01:39:53.170]  What the hell is that?
[01:39:54.050 --> 01:39:54.790]  I don't even know
[01:39:54.790 --> 01:39:55.990]  what this is.
[01:39:56.430 --> 01:39:58.730]  But it's not a freaking lock. You can beat
[01:39:58.730 --> 01:40:00.290]  this with a paper clip that you have to
[01:40:00.290 --> 01:40:02.550]  pop a CD out of a jam drive.
[01:40:05.400 --> 01:40:06.040]  And we saw
[01:40:06.040 --> 01:40:07.920]  this is a slide lock. This is what I was
[01:40:07.920 --> 01:40:10.080]  showing you earlier when I was playing with
[01:40:10.080 --> 01:40:12.020]  tubular pins. A slide lock
[01:40:12.020 --> 01:40:14.260]  is a very nice idea. It's a little more secure
[01:40:14.260 --> 01:40:16.120]  in that it locks the weapon completely out
[01:40:16.120 --> 01:40:18.500]  of battery, so it can't be engaged, fired,
[01:40:18.500 --> 01:40:20.300]  anything. But, you know,
[01:40:20.300 --> 01:40:22.100]  I showed you this one. Great concept, but
[01:40:22.100 --> 01:40:24.100]  it's a really shitty tubular lock that's
[01:40:24.100 --> 01:40:25.680]  employing the mechanism.
[01:40:25.920 --> 01:40:28.120]  Put a better lock on the end and maybe put a Medeco on the end of that
[01:40:28.120 --> 01:40:29.740]  and you might have a pretty decent lock.
[01:40:32.160 --> 01:40:33.920]  Some people just use cable.
[01:40:33.920 --> 01:40:35.860]  You can secure firearms with cable.
[01:40:35.980 --> 01:40:38.200]  This is a very secure solution.
[01:40:38.440 --> 01:40:40.000]  Make sure you use a coated cable so it doesn't
[01:40:40.000 --> 01:40:41.640]  rip up the innards of your gun.
[01:40:42.020 --> 01:40:43.980]  Also, be aware that the majority
[01:40:43.980 --> 01:40:46.080]  of cable you're going to buy like this, this is going to be
[01:40:46.080 --> 01:40:47.940]  an Astacular 2000
[01:40:47.940 --> 01:40:49.340]  series lock somehow.
[01:40:49.660 --> 01:40:52.680]  They just come really bad. I don't know why.
[01:40:53.060 --> 01:40:54.040]  And let's face it, this is not
[01:40:54.040 --> 01:40:56.600]  the best solution. It's a very inelegant solution.
[01:40:57.680 --> 01:40:58.620]  In general,
[01:40:58.620 --> 01:41:00.100]  why do I have this section in the talk
[01:41:00.100 --> 01:41:02.060]  now? Everyone...
[01:41:02.060 --> 01:41:03.820]  I think people here tend to be a little more
[01:41:03.820 --> 01:41:05.980]  clueful than the general public, so most
[01:41:05.980 --> 01:41:08.240]  of you should know this already. These are not
[01:41:08.980 --> 01:41:10.060]  security devices.
[01:41:10.280 --> 01:41:11.220]  These are
[01:41:11.980 --> 01:41:13.540]  persuading or dissuading
[01:41:13.540 --> 01:41:15.340]  devices. These are designed to
[01:41:15.340 --> 01:41:17.220]  prevent very little children
[01:41:17.220 --> 01:41:19.420]  from fouling around.
[01:41:19.420 --> 01:41:21.320]  Oh, what's under daddy's drawer? Here,
[01:41:21.320 --> 01:41:23.540]  they'll look at this. These are designed to...
[01:41:23.540 --> 01:41:25.120]  These are locks made by children
[01:41:25.120 --> 01:41:26.540]  for children, basically.
[01:41:28.100 --> 01:41:29.100]  This will not
[01:41:29.100 --> 01:41:31.180]  thwart criminal behavior. This will
[01:41:31.180 --> 01:41:33.040]  not thwart a curious
[01:41:33.040 --> 01:41:34.260]  teenager.
[01:41:35.100 --> 01:41:37.400]  Many people, I don't always get agreement
[01:41:37.400 --> 01:41:39.080]  with this, but I'm betting this crowd
[01:41:39.080 --> 01:41:41.040]  will understand that if you have kids
[01:41:41.040 --> 01:41:43.180]  and you have guns, you show them
[01:41:43.180 --> 01:41:45.180]  what the hell they are when they're very
[01:41:45.180 --> 01:41:47.240]  young. You teach them to respect them,
[01:41:47.240 --> 01:41:49.060]  you teach them not to play with them, and then
[01:41:49.060 --> 01:41:51.260]  you lock them the hell away from them.
[01:42:00.160 --> 01:42:01.100]  But people who just
[01:42:01.100 --> 01:42:03.120]  want to, like, no, don't tell them anything, that's
[01:42:03.120 --> 01:42:04.320]  not the best solution.
[01:42:04.900 --> 01:42:05.860]  What's up?
[01:42:07.440 --> 01:42:08.900]  Oh, sorry, question.
[01:42:15.060 --> 01:42:15.780]  That's a valid...
[01:42:15.780 --> 01:42:17.280]  If you have a very easily
[01:42:17.280 --> 01:42:19.420]  field-strippable weapon, just strip it out,
[01:42:19.420 --> 01:42:21.360]  take the firing pin out, put that in a secure
[01:42:21.360 --> 01:42:22.120]  place.
[01:42:23.680 --> 01:42:25.660]  Well, the man makes a point down here.
[01:42:25.660 --> 01:42:27.380]  Someone else could acquire another one and put it
[01:42:27.380 --> 01:42:29.440]  back in. So, you know, you guys
[01:42:29.440 --> 01:42:31.620]  are all smart enough, you can come up with solutions,
[01:42:31.620 --> 01:42:33.540]  but just keep this on your radar. One question
[01:42:33.540 --> 01:42:35.280]  and then we gotta keep it on...
[01:42:41.610 --> 01:42:42.330]  Yes.
[01:42:45.190 --> 01:42:45.950]  Those are the under
[01:42:45.950 --> 01:42:47.690]  desk type models, and yeah.
[01:42:49.010 --> 01:42:49.950]  Yeah, he mentioned the
[01:42:49.950 --> 01:42:52.090]  Colt Corporation, and I do
[01:42:52.090 --> 01:42:54.230]  love their weapons. They make a very nice
[01:42:55.090 --> 01:42:55.930]  box that it just
[01:42:55.930 --> 01:42:58.150]  has, it's almost like a hand pad, and you can feel
[01:42:58.150 --> 01:43:00.030]  the buttons, and if you know the order,
[01:43:00.030 --> 01:43:01.990]  you program the order in, you can just feel
[01:43:01.990 --> 01:43:03.910]  it pop, pop, pop, pop, pop, and then you can, you know, open
[01:43:03.910 --> 01:43:05.950]  it up. Any type of safe, or
[01:43:05.950 --> 01:43:07.930]  any type of box that you put a gun
[01:43:07.930 --> 01:43:09.850]  in is much better than just throwing a lock
[01:43:09.850 --> 01:43:10.810]  on the gun.
[01:43:14.120 --> 01:43:15.500]  Yeah, there's a lot of
[01:43:15.500 --> 01:43:18.120]  better gun locks out there that we can talk about some more.
[01:43:18.480 --> 01:43:19.520]  We're good, we still have like 45
[01:43:19.520 --> 01:43:21.620]  minutes because we're rolling into the next half hour,
[01:43:21.620 --> 01:43:23.320]  so we can, we're still doing alright.
[01:43:24.500 --> 01:43:26.300]  Quick ones on handcuffs.
[01:43:26.680 --> 01:43:27.520]  We're, you know, more for
[01:43:27.520 --> 01:43:30.000]  the law enforcement crowd, I guess, guns to handcuffs.
[01:43:30.720 --> 01:43:31.720]  Anybody who doesn't
[01:43:31.720 --> 01:43:33.820]  know how handcuffs work, this is gonna be a real
[01:43:33.820 --> 01:43:35.200]  real brief overview.
[01:43:35.640 --> 01:43:37.820]  Inside of a handcuff looks something like this.
[01:43:37.820 --> 01:43:39.720]  You have a little ratcheting arm,
[01:43:40.220 --> 01:43:41.720]  and this paw that spins around
[01:43:41.720 --> 01:43:43.600]  has teeth on it that the arm
[01:43:43.600 --> 01:43:45.560]  engages. It's why
[01:43:45.560 --> 01:43:47.780]  you can spin the paw one way and not the other.
[01:43:49.060 --> 01:43:49.840]  When you stick
[01:43:50.100 --> 01:43:51.860]  a key in the lock,
[01:43:53.100 --> 01:43:53.900]  and you turn that
[01:43:53.900 --> 01:43:55.840]  key, it just lifts up the
[01:43:55.840 --> 01:43:58.040]  arm. That's what the inside of a handcuff
[01:43:58.040 --> 01:43:59.880]  looks like. You can see how
[01:43:59.880 --> 01:44:01.880]  it's, you can jam almost anything in a handcuff
[01:44:02.180 --> 01:44:03.760]  and just try to, you know, flip the thing.
[01:44:03.760 --> 01:44:05.540]  And besides, a handcuff key is a dollar, so
[01:44:06.000 --> 01:44:07.560]  it's not that hard to do. You can shim
[01:44:07.560 --> 01:44:09.800]  hand, you can do a whole lot with handcuffs that are kind of outside
[01:44:09.800 --> 01:44:11.760]  of the scope of this. We can, I don't have any to play with,
[01:44:11.760 --> 01:44:14.060]  so if anybody else does, we can play with them later.
[01:44:17.600 --> 01:44:17.880]  Um...
[01:44:18.560 --> 01:44:19.880]  That could have been interpreted
[01:44:19.880 --> 01:44:21.220]  differently, I guess.
[01:44:24.200 --> 01:44:25.660]  Could anyone tell me
[01:44:27.740 --> 01:44:28.740]  for a
[01:44:29.980 --> 01:44:30.820]  Red Bull...
[01:44:30.820 --> 01:44:35.860]  I gotta clear some of this out of the way.
[01:44:35.860 --> 01:44:37.800]  What is
[01:44:37.800 --> 01:44:38.320]  the little
[01:44:38.320 --> 01:44:39.760]  pin for on the back of a hand?
[01:44:39.760 --> 01:44:47.870]  I saw a hand right here.
[01:44:47.870 --> 01:44:49.470]  Everything alright?
[01:44:49.470 --> 01:44:50.470]  Hang on, yeah, he got it.
[01:44:50.470 --> 01:44:52.790]  The answer is, what is the little pin for?
[01:44:52.790 --> 01:44:54.850]  It is a double lock mechanism
[01:44:54.850 --> 01:44:56.130]  on a handcuff.
[01:44:57.150 --> 01:44:58.950]  The little hole that's on the back
[01:44:58.950 --> 01:45:00.790]  of a handcuff, that most people don't realize it's there
[01:45:00.790 --> 01:45:02.910]  for a reason, if you stick the pin in
[01:45:02.910 --> 01:45:04.830]  there on the back of a key, it'll actually
[01:45:04.830 --> 01:45:06.810]  put a bar in that prevents the pawl from
[01:45:06.810 --> 01:45:08.930]  I'm sorry, the ratchet from moving at all.
[01:45:08.930 --> 01:45:10.710]  So it can't get any tighter, it can't get any
[01:45:10.710 --> 01:45:12.230]  looser, you can't shim it.
[01:45:12.430 --> 01:45:14.730]  To open it, you see it's actually a two-step process
[01:45:14.730 --> 01:45:15.750]  to open it.
[01:45:21.320 --> 01:45:23.680]  Yeah, yeah, double lock. In fact,
[01:45:23.680 --> 01:45:25.800]  anybody who's ever been in custody,
[01:45:25.800 --> 01:45:27.560]  maybe in a street protest or something, and they
[01:45:27.560 --> 01:45:29.740]  over-tighten you on purpose, but no, I don't have anything
[01:45:29.740 --> 01:45:30.900]  negative to say about that.
[01:45:31.800 --> 01:45:33.520]  They're supposed to double lock you
[01:45:33.520 --> 01:45:35.780]  all the time, because it's actually for your own safety.
[01:45:35.780 --> 01:45:37.760]  So the cuffs, if you wriggle or you sit in the back
[01:45:37.760 --> 01:45:39.560]  of the car, they don't get tighter on you
[01:45:39.560 --> 01:45:41.800]  when you're in them. Most officers don't
[01:45:41.800 --> 01:45:43.880]  do that, and it's, you know,
[01:45:43.880 --> 01:45:45.000]  I assume
[01:45:45.860 --> 01:45:47.700]  you should. Does anyone here a cop?
[01:45:47.700 --> 01:45:49.720]  Do you do that? Anybody in here who's a law enforcement
[01:45:49.720 --> 01:45:50.980]  officer do a double lock?
[01:45:52.820 --> 01:45:53.380]  So we
[01:45:54.300 --> 01:45:55.460]  spot the fed.
[01:45:59.380 --> 01:46:01.200]  Yeah, they should. Frankly,
[01:46:02.000 --> 01:46:03.440]  it's funny, but that's true.
[01:46:03.440 --> 01:46:05.120]  Most of my friends who go to
[01:46:05.120 --> 01:46:07.300]  protests will request that. They'll say, you know,
[01:46:07.300 --> 01:46:09.440]  I request, please make sure you double lock this,
[01:46:09.440 --> 01:46:11.200]  sir. And so they don't get,
[01:46:11.200 --> 01:46:13.040]  because if you've ever friggin' been cuffed at a protest,
[01:46:13.040 --> 01:46:15.000]  you're going to be thrown in a bus somewhere for like six
[01:46:15.000 --> 01:46:17.180]  hours, and they're going to take two more hours to process
[01:46:17.180 --> 01:46:19.280]  you. If you're turning blue in the hands,
[01:46:19.280 --> 01:46:21.060]  it sucks really bad.
[01:46:23.780 --> 01:46:24.460]  Yes.
[01:46:25.660 --> 01:46:26.620]  Yeah.
[01:46:34.750 --> 01:46:35.410]  Yes, the
[01:46:35.410 --> 01:46:37.710]  gentleman makes the point that cooperating tends to,
[01:46:37.710 --> 01:46:39.190]  you'll be treated a lot better
[01:46:39.190 --> 01:46:40.750]  when they're locking you up.
[01:46:43.710 --> 01:46:45.430]  Oh, we're going to get a demo?
[01:46:45.510 --> 01:46:46.770]  All right.
[01:46:56.710 --> 01:46:58.810]  Once again, Agent X, everybody,
[01:46:58.810 --> 01:47:01.610]  let's thank him for doing this.
[01:47:49.080 --> 01:47:50.420]  Have you done this?
[01:47:51.120 --> 01:47:52.640]  Never slammed them against a table.
[01:47:55.950 --> 01:47:56.830]  Yeah!
[01:48:09.420 --> 01:48:11.420]  The trick is that,
[01:48:11.420 --> 01:48:12.720]  like you talked about all the mechanisms
[01:48:12.720 --> 01:48:14.700]  inside, you've got to whack this,
[01:48:14.700 --> 01:48:16.040]  and it'll just slide.
[01:48:16.820 --> 01:48:18.820]  And most of the cops are really good about keeping
[01:48:18.820 --> 01:48:20.340]  their kit well-oiled.
[01:48:20.660 --> 01:48:22.420]  There's even special handcuff oils.
[01:48:22.620 --> 01:48:24.440]  So, you have to whack it somewhere,
[01:48:24.440 --> 01:48:26.780]  which you'll see magicians do, is they'll put like a little
[01:48:26.780 --> 01:48:28.500]  metal piece of something in their pants,
[01:48:28.500 --> 01:48:29.960]  and they'll whack it against that.
[01:48:30.660 --> 01:48:33.200]  But usually you can find something to do it against.
[01:48:33.260 --> 01:48:35.360]  I find the hardest part is getting them in front.
[01:48:35.360 --> 01:48:36.500]  It'll kill you.
[01:48:36.920 --> 01:48:38.120]  That's really dangerous.
[01:48:38.120 --> 01:48:40.680]  I've gotten myself, by myself,
[01:48:40.680 --> 01:48:42.060]  in my apartment,
[01:48:42.060 --> 01:48:45.160]  with these, at the end of my seat.
[01:48:45.440 --> 01:48:47.240]  It's incredibly painful.
[01:48:48.320 --> 01:48:49.920]  Why were you wearing a thong?
[01:48:49.920 --> 01:48:51.140]  I wasn't wearing a thong.
[01:48:51.140 --> 01:48:53.560]  Have you taken that off?
[01:49:07.880 --> 01:49:08.600]  Yeah, yeah.
[01:49:17.420 --> 01:49:18.640]  He's showing whereabouts
[01:49:18.640 --> 01:49:20.700]  he whacked it, according to the request.
[01:49:21.020 --> 01:49:23.040]  Here's the handcuffs.
[01:49:24.700 --> 01:49:27.240]  And this is the pin they set right there.
[01:49:27.380 --> 01:49:28.980]  You can see it right there.
[01:49:29.520 --> 01:49:30.620]  So, what I'm doing
[01:49:30.620 --> 01:49:32.360]  is unsetting the pin.
[01:49:32.360 --> 01:49:33.800]  They have to turn the key both ways,
[01:49:33.800 --> 01:49:35.820]  so what you do is just go, whack!
[01:49:36.040 --> 01:49:38.500]  And it comes right down,
[01:49:38.500 --> 01:49:39.620]  and then you can shim it.
[01:49:39.620 --> 01:49:40.580]  Don't shim it too much,
[01:49:40.580 --> 01:49:42.180]  or it's really painful.
[01:49:43.580 --> 01:49:45.380]  If you do that while in custody,
[01:49:45.380 --> 01:49:46.220]  you're fucked, by the way,
[01:49:46.220 --> 01:49:47.100]  unless you get away.
[01:49:47.740 --> 01:49:48.980]  Don't fuck around.
[01:49:49.260 --> 01:49:51.140]  We're having fun talking about a lot of this,
[01:49:51.140 --> 01:49:52.500]  but more than anything,
[01:49:52.500 --> 01:49:53.820]  don't be that cutesy guy
[01:49:53.820 --> 01:49:55.120]  who's getting out of the squad car
[01:49:55.120 --> 01:49:55.740]  at the station.
[01:50:00.820 --> 01:50:03.800]  Yeah, Mr. Face, meet Mr. Pavement.
[01:50:04.980 --> 01:50:07.220]  It's funny if your friends are cops to fuck with them, though.
[01:50:07.220 --> 01:50:08.000]  It really is.
[01:50:08.000 --> 01:50:10.120]  By the way, if you
[01:50:11.260 --> 01:50:13.400]  show this to the cops,
[01:50:13.400 --> 01:50:14.440]  it freaks them out.
[01:50:14.760 --> 01:50:16.220]  The main reason I learned this
[01:50:16.220 --> 01:50:19.020]  is not because I ever have trouble with the law.
[01:50:19.080 --> 01:50:20.820]  It's because this is really a mental thing.
[01:50:20.820 --> 01:50:22.600]  People are like, I can't get out of handcuffs.
[01:50:22.600 --> 01:50:23.580]  It's impossible.
[01:50:23.860 --> 01:50:26.200]  I can show you how to do it. It's not that hard.
[01:50:26.940 --> 01:50:28.720]  It's kind of a gateless barrier thing.
[01:50:29.040 --> 01:50:29.800]  Give it a try.
[01:50:36.320 --> 01:50:38.720]  Come to the THF talk at 4 in the tent.
[01:50:38.720 --> 01:50:39.560]  We need your money.
[01:50:40.820 --> 01:50:41.980]  And we're going to have a whole...
[01:50:41.980 --> 01:50:44.700]  Once we wrap this up, we're going to move it into the contest area
[01:50:44.700 --> 01:50:45.960]  where the lockpick contest is.
[01:50:45.960 --> 01:50:47.860]  We're going to do a whole hands-on session.
[01:50:48.020 --> 01:50:49.620]  I'll take as much time as you guys want.
[01:50:49.620 --> 01:50:51.480]  I'm going to have a lot of kits you can play with.
[01:50:51.760 --> 01:50:54.540]  I ask that you give me $20-$25.
[01:50:54.540 --> 01:50:56.680]  And if you return it, you can have the $25.
[01:50:56.720 --> 01:50:58.280]  But I don't want them to walk away.
[01:50:58.460 --> 01:51:00.580]  A lot of locks. We're going to have a good time.
[01:51:00.580 --> 01:51:02.760]  So come on in if we run out of time here for questions.
[01:51:02.780 --> 01:51:03.840]  We'll do it in there.
[01:51:06.700 --> 01:51:08.560]  Can you carry a lockpick in your check bag?
[01:51:08.560 --> 01:51:10.240]  I'll talk about that in the legal section.
[01:51:10.480 --> 01:51:11.700]  Do you have a legal section?
[01:51:11.740 --> 01:51:13.060]  Dude, you really did add a lot of shit.
[01:51:14.020 --> 01:51:15.780]  Alright, we've really got to fly through.
[01:51:15.780 --> 01:51:17.180]  We've got about a half hour left.
[01:51:17.220 --> 01:51:18.960]  And I have like 150 slides.
[01:51:18.960 --> 01:51:20.600]  So we're maybe two-thirds of the way through.
[01:51:22.460 --> 01:51:23.380]  Really quick.
[01:51:23.380 --> 01:51:24.340]  Wafer locks.
[01:51:24.540 --> 01:51:26.280]  Just going to cover what they are.
[01:51:26.520 --> 01:51:27.880]  They're not that sophisticated.
[01:51:27.900 --> 01:51:29.040]  Oh, what happened?
[01:51:29.440 --> 01:51:31.780]  Is there another cooler talk than me?
[01:51:36.350 --> 01:51:37.950]  Imagine when we do the topless section
[01:51:37.950 --> 01:51:39.110]  for all you guys leaving.
[01:51:39.250 --> 01:51:41.870]  Alright, let's just blow through a lot of this now.
[01:51:42.010 --> 01:51:42.990]  Wafer locks.
[01:51:42.990 --> 01:51:45.270]  If you look at a lock,
[01:51:45.270 --> 01:51:47.250]  notice how this lock, there's no
[01:51:47.250 --> 01:51:49.110]  upper mechanism up here.
[01:51:49.170 --> 01:51:51.270]  This lock just kind of cuts off right here.
[01:51:51.270 --> 01:51:53.390]  There's no space where a pin stack
[01:51:53.390 --> 01:51:55.330]  could be hiding. There's no room
[01:51:55.330 --> 01:51:56.950]  up here for springs and pins.
[01:51:57.050 --> 01:51:58.990]  This is an entirely different type of mechanism.
[01:51:58.990 --> 01:52:00.470]  It's called a wafer mechanism.
[01:52:00.570 --> 01:52:03.290]  They're popular in very compact places.
[01:52:03.290 --> 01:52:05.010]  A lot of filing cabinets,
[01:52:05.090 --> 01:52:07.510]  a lot of display racks and things use wafer locks.
[01:52:07.510 --> 01:52:09.870]  Also automobiles, but they're more sophisticated.
[01:52:11.230 --> 01:52:12.250]  Not alone.
[01:52:12.510 --> 01:52:14.470]  If you look at a wafer from the front,
[01:52:14.470 --> 01:52:16.450]  and you cut on into it,
[01:52:16.870 --> 01:52:19.070]  this is the inside of a wafer lock, essentially.
[01:52:19.070 --> 01:52:21.590]  And there's stacks of these wafers in a row.
[01:52:21.950 --> 01:52:23.210]  The wafers have to be raised
[01:52:23.210 --> 01:52:24.850]  to the right height, and they'll clear.
[01:52:24.850 --> 01:52:26.250]  It's not that difficult.
[01:52:26.950 --> 01:52:29.630]  There are complex wafers that are double-sided.
[01:52:29.630 --> 01:52:31.130]  You can see if you raise them too high,
[01:52:31.130 --> 01:52:32.990]  they won't go. Too low, they won't go.
[01:52:33.110 --> 01:52:34.970]  And all they'll have to do is just have
[01:52:34.970 --> 01:52:36.830]  this rectangle cut in different places
[01:52:36.830 --> 01:52:39.570]  on the wafer. So that's how the key cutting works.
[01:52:39.970 --> 01:52:40.890]  Wafers are a really
[01:52:40.890 --> 01:52:42.850]  interesting sort of mix.
[01:52:43.050 --> 01:52:45.250]  They're very unsophisticated,
[01:52:45.250 --> 01:52:46.930]  but they don't lend themselves
[01:52:46.930 --> 01:52:49.390]  very well to most picking techniques.
[01:52:49.730 --> 01:52:51.330]  You can kind of pin-by-pin
[01:52:51.330 --> 01:52:52.890]  pick them, right? But most people
[01:52:52.890 --> 01:52:54.570]  just use what's called jigglers.
[01:52:54.650 --> 01:52:56.850]  And you just jam it in, bang it all around,
[01:52:56.850 --> 01:52:58.790]  and hope for the best. And you get about
[01:52:58.790 --> 01:53:00.890]  as good a result as you would get if you just tried to
[01:53:00.890 --> 01:53:02.110]  individually pick it.
[01:53:05.290 --> 01:53:07.150]  Yeah, raking, jiggling,
[01:53:07.150 --> 01:53:08.090]  the unsophisticated
[01:53:08.730 --> 01:53:10.970]  bang attack ends up a lot better.
[01:53:11.790 --> 01:53:13.390]  Alright, still moving along.
[01:53:13.590 --> 01:53:15.050]  Rotating disc locks.
[01:53:15.050 --> 01:53:16.670]  Not going to talk too much about these, because
[01:53:16.670 --> 01:53:18.770]  I can't pick them. I don't even own some.
[01:53:18.770 --> 01:53:21.710]  Anything you want to say? Or should we just show Barry and you doing a video?
[01:53:22.470 --> 01:53:23.170]  Show a video?
[01:53:23.170 --> 01:53:24.290]  I was drunk that day.
[01:53:24.490 --> 01:53:27.210]  If you have any questions...
[01:53:27.210 --> 01:53:29.390]  There's this brand called Abus.
[01:53:29.790 --> 01:53:31.370]  As a side note...
[01:53:31.370 --> 01:53:33.270]  Yeah, so this is the fucking video of me on the other side.
[01:53:33.270 --> 01:53:34.230]  He didn't tell me.
[01:53:36.950 --> 01:53:38.970]  Schedule, if you look at your schedule, there were
[01:53:38.970 --> 01:53:40.990]  two talks today. First is two hour intro, then
[01:53:40.990 --> 01:53:43.490]  another hour on high security stuff specifically.
[01:53:43.490 --> 01:53:45.630]  Due to some scheduling conflicts, the high security
[01:53:45.630 --> 01:53:47.470]  stuff was cut down to about a half an hour.
[01:53:47.490 --> 01:53:49.110]  And Paul Graham will be coming and giving a speech.
[01:53:49.110 --> 01:53:50.890]  And we'll go through all that right before we're done.
[01:53:51.090 --> 01:53:53.310]  So just for anyone who has high security questions, hold it off
[01:53:53.310 --> 01:53:54.650]  until a little bit later.
[01:53:54.910 --> 01:53:56.610]  This is real quick though, just showing you.
[01:53:56.610 --> 01:53:59.390]  And they had on their website this very challenging text
[01:53:59.390 --> 01:54:01.470]  saying, nobody can pick our locks.
[01:54:01.470 --> 01:54:03.670]  No locksmith, no test institute,
[01:54:03.670 --> 01:54:05.310]  no burglars are ever known to
[01:54:05.310 --> 01:54:06.710]  pick our locks.
[01:54:06.950 --> 01:54:09.830]  And this is actually the type of key...
[01:54:09.830 --> 01:54:10.730]  Okay.
[01:54:10.730 --> 01:54:11.690]  Okay.
[01:54:13.270 --> 01:54:14.690]  Don't you love
[01:54:14.690 --> 01:54:16.530]  when someone says it's impossible?
[01:54:16.610 --> 01:54:19.190]  Isn't that just so great when you prove them wrong?
[01:54:21.130 --> 01:54:24.730]  Okay. In focus. Hope everybody
[01:54:24.730 --> 01:54:25.810]  can see.
[01:54:26.110 --> 01:54:28.610]  In Germany, from my German lockpicking
[01:54:28.610 --> 01:54:30.670]  friends, I bought this tool.
[01:54:32.830 --> 01:54:34.450]  Nobody leave.
[01:54:34.510 --> 01:54:36.960]  And it's this tool.
[01:54:38.500 --> 01:54:39.600]  And it's called
[01:54:39.600 --> 01:54:41.720]  the Fall tool, because Mr. Fall
[01:54:41.720 --> 01:54:43.160]  made it.
[01:54:43.160 --> 01:54:45.480]  And it's a decoder pick.
[01:54:45.480 --> 01:54:47.320]  It picks the lock, but it also
[01:54:47.320 --> 01:54:48.900]  reads the lock.
[01:54:48.900 --> 01:54:50.540]  So you can make the key.
[01:54:50.560 --> 01:54:51.740]  Here you can
[01:54:53.800 --> 01:54:55.080]  see what
[01:54:55.080 --> 01:54:56.540]  pin you are
[01:54:56.540 --> 01:54:58.900]  picking. And here you can see
[01:54:58.900 --> 01:55:00.460]  the depth of the
[01:55:00.460 --> 01:55:02.020]  key.
[01:55:02.680 --> 01:55:05.180]  With this tool you can open the
[01:55:05.180 --> 01:55:07.260]  lock that they claimed on their website
[01:55:07.260 --> 01:55:08.660]  could not be picked.
[01:55:08.840 --> 01:55:11.760]  It was a real challenge for us to pick it.
[01:55:13.180 --> 01:55:15.220]  What they do with this lock
[01:55:15.220 --> 01:55:17.000]  is they have discs
[01:55:17.000 --> 01:55:19.620]  in the lock. There's no pins but discs.
[01:55:19.860 --> 01:55:21.000]  I'll just show you
[01:55:21.160 --> 01:55:22.340]  a few of these discs.
[01:55:22.340 --> 01:55:30.260]  I hope I'm in focus.
[01:55:36.620 --> 01:55:38.680]  Okay, well here you can see
[01:55:38.680 --> 01:55:40.560]  the discs
[01:55:40.560 --> 01:55:42.060]  that are inside.
[01:55:42.200 --> 01:55:44.220]  And here's the real notch.
[01:55:44.220 --> 01:55:47.040]  And they put some fake notches in as well.
[01:55:47.160 --> 01:55:48.480]  So when you start
[01:55:48.480 --> 01:55:49.600]  manipulating the lock
[01:55:50.600 --> 01:55:52.260]  you'll experience like
[01:55:52.260 --> 01:55:54.420]  it's in the right position.
[01:55:54.420 --> 01:55:56.080]  But it's actually not.
[01:55:56.080 --> 01:55:58.260]  And it took us quite a while to figure out
[01:55:58.260 --> 01:56:00.500]  how to actually pick this lock because of the
[01:56:00.500 --> 01:56:02.080]  false notches.
[01:56:02.460 --> 01:56:04.260]  And then Paul, Paul Crowell
[01:56:04.260 --> 01:56:06.620]  from Montelus, he found out that
[01:56:06.620 --> 01:56:08.660]  there's a technique that if you
[01:56:09.900 --> 01:56:10.780]  put the pick
[01:56:10.780 --> 01:56:11.960]  in the lock.
[01:56:20.060 --> 01:56:22.380]  Wow, that's a big thumb.
[01:56:26.360 --> 01:56:28.300]  Okay, now I'm at the
[01:56:28.300 --> 01:56:30.300]  first disc and
[01:56:32.700 --> 01:56:34.860]  I'm trying to feel the cuts.
[01:56:34.860 --> 01:56:36.040]  Here's one cut.
[01:56:36.680 --> 01:56:41.860]  Go to disc two.
[01:56:47.890 --> 01:56:49.010]  How many discs are
[01:56:49.010 --> 01:56:50.250]  usually in there?
[01:56:50.270 --> 01:56:51.330]  Like eight.
[01:56:55.170 --> 01:56:57.630]  I should have cut this video down, I apologize.
[01:56:57.810 --> 01:56:59.390]  It's possible to get a false cut.
[01:56:59.670 --> 01:57:00.910]  Now, what Paul
[01:57:00.910 --> 01:57:02.950]  found out about these false cuts is
[01:57:02.950 --> 01:57:05.090]  that they are actually just a little bit
[01:57:05.090 --> 01:57:07.030]  tighter. So what you do is you go to one
[01:57:07.030 --> 01:57:08.750]  disc. You feel
[01:57:08.750 --> 01:57:11.110]  hey, okay, it's getting. And you feel it's getting
[01:57:11.110 --> 01:57:13.050]  again. And you just
[01:57:13.050 --> 01:57:14.450]  go for the widest
[01:57:15.430 --> 01:57:17.150]  you just go from one
[01:57:17.150 --> 01:57:19.130]  point of the cut to the other.
[01:57:19.130 --> 01:57:21.650]  And the widest is the right cut.
[01:57:21.910 --> 01:57:23.650]  And that actually was the trick.
[01:57:23.650 --> 01:57:25.030]  You have to
[01:57:25.030 --> 01:57:26.130]  feel the
[01:57:27.190 --> 01:57:28.390]  cuts.
[01:57:29.690 --> 01:57:30.750]  Okay, it's open.
[01:57:31.470 --> 01:57:32.570]  Applause.
[01:57:44.070 --> 01:57:44.670]  Abes
[01:57:44.670 --> 01:57:46.950]  made an improvement on the lock.
[01:57:46.950 --> 01:57:48.630]  So that this tool actually
[01:57:48.630 --> 01:57:50.790]  only works at a certain
[01:57:50.790 --> 01:57:52.610]  range of their locks.
[01:57:52.610 --> 01:57:54.690]  But the people from the German sport group
[01:57:54.690 --> 01:57:56.190]  they made a tool that
[01:57:56.190 --> 01:57:57.570]  beats that.
[01:57:58.570 --> 01:58:00.710]  At this moment there is a negotiation
[01:58:00.710 --> 01:58:02.790]  with Abes what to do.
[01:58:03.670 --> 01:58:04.610]  But when Abes
[01:58:04.610 --> 01:58:06.590]  they just had to take the text
[01:58:06.590 --> 01:58:08.730]  down and now you read our locks are
[01:58:08.730 --> 01:58:11.130]  really secure and very hard to pick.
[01:58:11.270 --> 01:58:12.350]  They don't say
[01:58:12.350 --> 01:58:14.630]  it's impossible to pick anymore.
[01:58:17.490 --> 01:58:18.670]  So that's rotating
[01:58:18.670 --> 01:58:20.650]  discs. Gotta really keep
[01:58:20.650 --> 01:58:23.210]  moving here. Alright, Master Keying Theory.
[01:58:23.210 --> 01:58:24.930]  Once again, how many people were in the last talk
[01:58:24.930 --> 01:58:26.390]  with Mark and Matt?
[01:58:26.570 --> 01:58:28.190]  So they mentioned that
[01:58:28.910 --> 01:58:31.290]  there was a big fuss about this.
[01:58:31.290 --> 01:58:33.150]  About, oh why are people disclosing
[01:58:33.150 --> 01:58:35.270]  these secrets? This has been known
[01:58:35.270 --> 01:58:37.150]  to people all over for a long time
[01:58:37.150 --> 01:58:39.910]  but it's just not talked about publicly that often.
[01:58:41.190 --> 01:58:43.010]  Master Locks, Master not the brand
[01:58:43.010 --> 01:58:44.830]  but you know Master Systems where
[01:58:44.830 --> 01:58:47.870]  there's different levels of escalated privilege.
[01:58:47.870 --> 01:58:49.110]  That's achieved by
[01:58:49.110 --> 01:58:51.110]  an additional wafer or an
[01:58:51.110 --> 01:58:53.290]  additional pin in the stack.
[01:58:53.610 --> 01:58:54.930]  It's a standard stack
[01:58:54.930 --> 01:58:56.750]  but it just has more pins.
[01:58:56.950 --> 01:58:59.130]  So a Master Pinned Lock might look
[01:58:59.130 --> 01:59:01.110]  something like this. I say might
[01:59:01.110 --> 01:59:03.090]  because there's a couple types of Mastering
[01:59:03.090 --> 01:59:04.270]  Conventions.
[01:59:04.890 --> 01:59:07.370]  For a Red Bull, a
[01:59:07.370 --> 01:59:09.450]  lighter and one of those hard drives
[01:59:09.450 --> 01:59:11.510]  do we have any more frack? No, no more frack.
[01:59:11.510 --> 01:59:13.470]  Can anyone tell me which of the
[01:59:13.470 --> 01:59:15.610]  two Master Pinning Systems
[01:59:15.610 --> 01:59:17.870]  which type this is?
[01:59:19.010 --> 01:59:20.030]  No one.
[01:59:20.130 --> 01:59:21.890]  Silence. Can you tell me?
[01:59:22.010 --> 01:59:24.390]  I don't know what the fuck the question means. I know a lot about this stuff.
[01:59:24.390 --> 01:59:25.710]  Well there are, this is what's called
[01:59:25.710 --> 01:59:27.790]  TPP or Total
[01:59:27.790 --> 01:59:29.810]  Position Progression Master. There's another type called
[01:59:29.810 --> 01:59:31.730]  RC or Rotating Constant which is
[01:59:31.910 --> 01:59:33.850]  a different algorithm. Oh well.
[01:59:33.950 --> 01:59:35.750]  I'll just give some, whoever can ask me cool questions
[01:59:35.750 --> 01:59:37.710]  at the end, I'll give you hard drives for that.
[01:59:37.830 --> 01:59:39.570]  Can I have one? Yeah, sure.
[01:59:40.170 --> 01:59:42.010]  Alright, so Master
[01:59:42.010 --> 01:59:43.130]  you can see how
[01:59:44.150 --> 01:59:45.890]  let's see, you might have a user
[01:59:45.890 --> 01:59:48.030]  with the lowest end of the
[01:59:48.030 --> 01:59:50.150]  totem pole is just called a change key.
[01:59:50.330 --> 01:59:51.970]  That's you know, just will open this one
[01:59:51.970 --> 01:59:54.030]  lock. But you might
[01:59:54.030 --> 01:59:55.950]  have a master key. If you have
[01:59:56.070 --> 01:59:57.370]  a key, now this is obviously very
[01:59:58.050 --> 02:00:00.070]  exaggerated. If you have a master
[02:00:00.070 --> 02:00:02.050]  cut key, these red
[02:00:02.050 --> 02:00:03.910]  pins are different. These shear lines
[02:00:03.910 --> 02:00:05.730]  are different throughout every lock.
[02:00:05.730 --> 02:00:07.950]  But the combination of a red
[02:00:07.950 --> 02:00:09.910]  and a green, and you know these aren't the real colors.
[02:00:09.910 --> 02:00:12.210]  The combination of the key pin and a
[02:00:12.210 --> 02:00:13.810]  master pin together,
[02:00:13.810 --> 02:00:16.050]  that is universal throughout all the locks
[02:00:16.050 --> 02:00:17.890]  in let's say one facility.
[02:00:17.930 --> 02:00:19.890]  So a master key would
[02:00:19.890 --> 02:00:21.950]  always be able to find this shear line
[02:00:21.950 --> 02:00:23.810]  no matter what lock was in what
[02:00:23.810 --> 02:00:25.970]  door. Whereas a person's change
[02:00:25.970 --> 02:00:28.470]  key would only work on their door.
[02:00:29.410 --> 02:00:30.530]  However,
[02:00:30.530 --> 02:00:31.830]  and many of us who
[02:00:31.830 --> 02:00:33.950]  had college dorms with master keyed systems
[02:00:33.950 --> 02:00:35.550]  played with this,
[02:00:35.550 --> 02:00:37.770]  there is a very, very simple way that
[02:00:37.770 --> 02:00:39.770]  if you have any key that works
[02:00:39.770 --> 02:00:41.670]  in the system, you can
[02:00:41.670 --> 02:00:44.070]  very easily make a master key.
[02:00:44.670 --> 02:00:45.510]  Sometimes.
[02:00:45.670 --> 02:00:47.230]  Would you like to know how?
[02:00:50.830 --> 02:00:51.670]  That's pretty
[02:00:51.670 --> 02:00:53.470]  much where it starts to go to. This is
[02:00:53.470 --> 02:00:55.730]  what happens. Let's say I have this key.
[02:00:55.990 --> 02:00:57.710]  And it opens my door to my, let's
[02:00:57.710 --> 02:00:59.670]  say dorm room. I
[02:00:59.670 --> 02:01:02.130]  take it out and I file this down.
[02:01:02.630 --> 02:01:03.590]  And I say, well
[02:01:03.590 --> 02:01:05.710]  that screws me because now I can't get into my
[02:01:05.710 --> 02:01:07.610]  room. Because you can see this is
[02:01:07.610 --> 02:01:09.710]  binding. Well I
[02:01:09.710 --> 02:01:11.490]  better keep filing it because I got to get my room
[02:01:11.490 --> 02:01:13.650]  somehow. Keep filing.
[02:01:13.830 --> 02:01:14.850]  Keep filing.
[02:01:19.950 --> 02:01:20.790]  Well it couldn't be
[02:01:20.790 --> 02:01:23.310]  higher because then you'd have a
[02:01:23.310 --> 02:01:25.170]  bottom pin that's completely
[02:01:25.170 --> 02:01:31.090]  out of the shear line. So it has to be lower.
[02:01:31.090 --> 02:01:33.010]  I see what you're saying. We're going to touch on that. There
[02:01:33.190 --> 02:01:35.250]  is a vendor that has two completely
[02:01:35.250 --> 02:01:38.670]  independent shear lines.
[02:01:38.670 --> 02:01:39.490]  Oh yeah.
[02:01:39.490 --> 02:01:40.750]  Bump keying and picking is
[02:01:40.750 --> 02:01:42.490]  easier on traditional
[02:01:42.490 --> 02:01:44.370]  master keyed systems because
[02:01:44.370 --> 02:01:46.770]  if you bump or you pick, you might
[02:01:46.770 --> 02:01:48.450]  pick half of these at a master height.
[02:01:48.450 --> 02:01:50.830]  The lock doesn't care. As long as you got shear lines going
[02:01:50.830 --> 02:01:52.790]  on, it's going to open. So yeah, if you
[02:01:52.790 --> 02:01:54.710]  have a really poorly engineered master
[02:01:54.710 --> 02:01:56.890]  pinned lock, you just... there
[02:01:56.890 --> 02:01:57.690]  it goes.
[02:01:58.670 --> 02:02:00.730]  But a very nice mastering type
[02:02:00.730 --> 02:02:01.990]  system, a very nice system
[02:02:03.210 --> 02:02:04.970]  is made by Best.
[02:02:04.970 --> 02:02:06.690]  And they're called SFIC.
[02:02:06.690 --> 02:02:08.810]  Small Format Interchangeable Core.
[02:02:08.810 --> 02:02:10.830]  Best is the most popular vendor. Some other
[02:02:10.830 --> 02:02:12.790]  vendors make them. These are very
[02:02:12.790 --> 02:02:15.250]  easily managed locks.
[02:02:15.250 --> 02:02:17.150]  It's very, very popular in large
[02:02:17.150 --> 02:02:18.970]  enterprise deployments when you have...
[02:02:18.970 --> 02:02:20.370]  you're trying to manage logistics
[02:02:20.370 --> 02:02:22.850]  and you're swapping out core. You're trying to manage
[02:02:22.850 --> 02:02:24.890]  who's who. The best lock
[02:02:24.890 --> 02:02:28.230]  or the SFIC, this figure eight shape,
[02:02:28.230 --> 02:02:28.770]  you can
[02:02:28.770 --> 02:02:30.890]  pull this whole core right out of the lock
[02:02:30.890 --> 02:02:33.130]  with the use of what's called a control key.
[02:02:34.790 --> 02:02:36.790]  This lock core, the pins are all
[02:02:36.790 --> 02:02:38.850]  sitting up here. There's a plug in here.
[02:02:38.850 --> 02:02:41.110]  The control key engages what's called a
[02:02:41.110 --> 02:02:42.970]  control sleeve. And you
[02:02:42.970 --> 02:02:44.970]  can see this sleeve has a big piece sticking out
[02:02:44.970 --> 02:02:46.940]  the side. If that sleeve is
[02:02:47.310 --> 02:02:49.090]  engaged, it's not going to pull out of the lock.
[02:02:49.090 --> 02:02:51.630]  But if you stick a control key in,
[02:02:51.630 --> 02:02:53.090]  turn it, and actually rotate
[02:02:53.090 --> 02:02:55.250]  the plug and the sleeve all at once,
[02:02:55.250 --> 02:02:57.210]  you can actually rotate the sleeve out of the way,
[02:02:57.210 --> 02:02:58.850]  pull the whole lock out, and then that
[02:02:58.850 --> 02:03:01.030]  can be... you can eject the pins, you can
[02:03:01.030 --> 02:03:03.130]  manage who's what, you can swap the cores very easily.
[02:03:03.130 --> 02:03:04.290]  They're very nicely made.
[02:03:05.490 --> 02:03:06.390]  This is also
[02:03:06.610 --> 02:03:08.250]  a disaster to try to pick with normal
[02:03:08.250 --> 02:03:09.110]  tools.
[02:03:10.350 --> 02:03:12.370]  If you just... you can see this is the brown
[02:03:12.370 --> 02:03:14.290]  is sort of the control sleeve. The light
[02:03:14.290 --> 02:03:16.330]  color is the plug. These
[02:03:16.330 --> 02:03:18.250]  shear lines are completely independent
[02:03:18.250 --> 02:03:20.550]  of one another. So you have the top shear,
[02:03:20.550 --> 02:03:22.330]  the bottom shear, and if you
[02:03:22.330 --> 02:03:24.370]  stick... this is a regular
[02:03:24.370 --> 02:03:26.410]  key, this would be a control key.
[02:03:27.310 --> 02:03:28.730]  If you stick a
[02:03:28.730 --> 02:03:30.370]  regular wrench in there,
[02:03:30.370 --> 02:03:31.910]  and you tension it, you're going to get
[02:03:31.910 --> 02:03:34.430]  binding all across these shear lines.
[02:03:34.590 --> 02:03:35.990]  So going in and trying to lift pins
[02:03:35.990 --> 02:03:37.770]  up, you're almost
[02:03:37.770 --> 02:03:39.970]  always going to not pick them all at the
[02:03:39.970 --> 02:03:41.910]  right shear line. You're going to catch some top, some
[02:03:41.910 --> 02:03:44.110]  low, you're not going to get it picked.
[02:03:44.550 --> 02:03:46.130]  Matt Blaze did the math on this.
[02:03:46.130 --> 02:03:47.850]  You know, the odds and the likelihood of actually
[02:03:47.850 --> 02:03:49.650]  hitting it correctly are not good.
[02:03:50.650 --> 02:03:52.130]  There is, however,
[02:03:52.130 --> 02:03:55.050]  manufactured by our good friends at Peterson,
[02:03:55.050 --> 02:03:56.010]  something called
[02:03:56.850 --> 02:03:57.910]  a finger wrench,
[02:03:58.610 --> 02:04:00.170]  which can stick in the lock...
[02:04:00.170 --> 02:04:02.690]  Let me actually switch up here.
[02:04:04.150 --> 02:04:05.510]  There is a tension wrench
[02:04:06.370 --> 02:04:08.550]  that has little fingers on it.
[02:04:09.450 --> 02:04:10.290]  It's hard to
[02:04:10.290 --> 02:04:11.710]  see. Can you see those?
[02:04:13.050 --> 02:04:14.350]  What that does
[02:04:14.910 --> 02:04:17.110]  is stick into the keyway,
[02:04:17.110 --> 02:04:18.350]  stick completely through
[02:04:18.350 --> 02:04:20.010]  the bottom of the keyway,
[02:04:21.870 --> 02:04:22.370]  because
[02:04:22.370 --> 02:04:24.630]  there's holes in the bottom.
[02:04:25.130 --> 02:04:26.150]  These holes don't actually
[02:04:26.150 --> 02:04:28.190]  serve a purpose in the lock's function.
[02:04:28.190 --> 02:04:30.110]  What they do is allow an ejector
[02:04:30.110 --> 02:04:32.310]  tool to stick into the lock if you want to pop the pins
[02:04:32.310 --> 02:04:34.110]  out and manage your pinning.
[02:04:34.390 --> 02:04:36.670]  But if you reach down through these holes,
[02:04:36.670 --> 02:04:37.970]  you can actually engage
[02:04:37.970 --> 02:04:40.710]  just the control sleeve.
[02:04:42.210 --> 02:04:44.190]  By just engaging the control sleeve,
[02:04:44.190 --> 02:04:46.330]  you're only going to tension the top
[02:04:46.330 --> 02:04:48.290]  shear line. Go in with a regular
[02:04:48.290 --> 02:04:50.150]  pick, set the pins,
[02:04:50.150 --> 02:04:52.190]  this is not as easy as it sounds,
[02:04:52.190 --> 02:04:54.210]  and then turn the control sleeve and eject
[02:04:54.210 --> 02:04:55.350]  the entire core.
[02:04:58.690 --> 02:05:00.330]  This is one example
[02:05:00.330 --> 02:05:02.390]  in what I'm going to wrap up at the end
[02:05:02.390 --> 02:05:04.690]  talking about the idea that disclosing
[02:05:04.690 --> 02:05:06.410]  these vulnerabilities helps
[02:05:06.410 --> 02:05:08.590]  us because...
[02:05:08.590 --> 02:05:10.090]  Oh, by the way, this is...
[02:05:10.090 --> 02:05:12.110]  Is anyone going to know this? This will be for...
[02:05:12.110 --> 02:05:12.850]  Question?
[02:05:19.760 --> 02:05:21.320]  I can't hear what you're saying.
[02:05:27.480 --> 02:05:28.480]  I don't really
[02:05:28.480 --> 02:05:29.280]  understand what you mean.
[02:05:31.340 --> 02:05:32.620]  Oh, it's not unlocked.
[02:05:32.620 --> 02:05:34.320]  You're just pulling the whole thing out.
[02:05:34.320 --> 02:05:36.560]  And you can look down and there's little pins
[02:05:36.560 --> 02:05:38.080]  that you can flip. Go ahead.
[02:05:40.540 --> 02:05:41.400]  Pardon me?
[02:05:42.640 --> 02:05:44.600]  Yeah, with the core out, you can eject the pins
[02:05:44.600 --> 02:05:46.600]  right out of it and get the entire... Not only that,
[02:05:46.600 --> 02:05:48.680]  if it's a mastered system, you can get the entire
[02:05:48.680 --> 02:05:51.260]  master scheme for the entire facility and so forth.
[02:05:52.380 --> 02:05:53.100]  Yes.
[02:05:53.960 --> 02:05:56.520]  Does anyone know who originally came up with
[02:05:56.520 --> 02:05:58.800]  this design for this finger wrench for a hard drive
[02:05:58.800 --> 02:06:00.000]  and a Red Bull?
[02:06:00.980 --> 02:06:02.140]  No, not Barry.
[02:06:02.140 --> 02:06:04.200]  Somebody at Peterson. Peterson makes these.
[02:06:05.820 --> 02:06:08.140]  No, not Ken. Good guess though.
[02:06:08.360 --> 02:06:10.020]  Anybody? If you don't know it, a guy
[02:06:10.020 --> 02:06:12.060]  named Jerry Finch. Very smart cat.
[02:06:12.060 --> 02:06:12.700]  Question?
[02:06:29.780 --> 02:06:30.500]  Right.
[02:06:31.400 --> 02:06:33.200]  Well, that's closer to the rotating
[02:06:33.200 --> 02:06:35.040]  constant system. I can talk about that.
[02:06:35.040 --> 02:06:36.900]  I'm going to get one more... I'm going to talk about that
[02:06:36.980 --> 02:06:38.900]  a little later. One more question and then we're going to try
[02:06:38.900 --> 02:06:40.880]  to fire through the rest of these and any more
[02:06:40.880 --> 02:06:42.940]  questions, if we run out of time, you're going to have the whole
[02:06:42.940 --> 02:06:45.160]  hands-on time to talk to me.
[02:06:48.440 --> 02:06:49.280]  Pardon?
[02:06:50.780 --> 02:06:51.820]  Yes.
[02:06:52.820 --> 02:06:55.100]  Very good point. This is why
[02:06:55.100 --> 02:06:57.020]  I'm so pleased with this information
[02:06:57.020 --> 02:06:58.780]  coming out. He mentions that there are new
[02:06:58.780 --> 02:07:01.180]  sleeve designs. In fact,
[02:07:01.180 --> 02:07:03.480]  Matt, when he first talked about this,
[02:07:03.480 --> 02:07:04.780]  he took his control sleeve
[02:07:04.780 --> 02:07:06.780]  and just cut the holes
[02:07:06.780 --> 02:07:08.920]  really huge in the bottom.
[02:07:09.220 --> 02:07:11.140]  You can still stick an ejector tool in there.
[02:07:11.140 --> 02:07:12.900]  It doesn't hurt, but there's nothing
[02:07:12.900 --> 02:07:14.800]  for the finger wrench to grab onto.
[02:07:15.000 --> 02:07:16.780]  And I believe best manufacture
[02:07:16.780 --> 02:07:18.920]  sleeves like this now. You mentioned that sometimes
[02:07:18.920 --> 02:07:20.920]  the control sleeves are in segments.
[02:07:21.500 --> 02:07:22.920]  So, yeah, the fact that this
[02:07:22.920 --> 02:07:24.880]  was publicly discussed means
[02:07:24.880 --> 02:07:26.660]  that it's safer for everyone now.
[02:07:26.660 --> 02:07:29.100]  And people are retrofitting their locks with better sleeves.
[02:07:29.100 --> 02:07:31.260]  It's a very, very good thing to talk about.
[02:07:32.320 --> 02:07:33.080]  Alright.
[02:07:33.260 --> 02:07:35.040]  Real quick, if you... How many people
[02:07:35.040 --> 02:07:37.040]  are enjoying this? How many people want to get more knowledge,
[02:07:37.040 --> 02:07:38.000]  more involved?
[02:07:38.000 --> 02:07:39.640]  Are you in the room?
[02:07:40.500 --> 02:07:41.820]  That's what I like to hear.
[02:07:41.820 --> 02:07:44.080]  There's plenty of books you can read. There's a lot of good
[02:07:44.080 --> 02:07:45.940]  places to go online.
[02:07:46.260 --> 02:07:48.000]  Let's shoot through some of these real fast.
[02:07:48.000 --> 02:07:50.100]  These slides are all online, by the way, and I'll tell you at the end
[02:07:50.100 --> 02:07:51.740]  so we can really flip through this.
[02:07:52.380 --> 02:07:54.440]  Two of the best books that I know of.
[02:07:54.480 --> 02:07:56.080]  Very intro, very beginners,
[02:07:56.080 --> 02:07:58.200]  very what-do-you-want-to-know-immediately-first
[02:07:58.200 --> 02:08:00.380]  is Steel Bolt Hacking by Douglas Chick.
[02:08:00.480 --> 02:08:02.020]  Doug was here last year. I don't know if he's
[02:08:02.020 --> 02:08:04.020]  here this year. His books probably are in the vendor
[02:08:04.020 --> 02:08:05.000]  area somewhere.
[02:08:05.000 --> 02:08:07.200]  The high end is written by
[02:08:07.200 --> 02:08:08.960]  the gentleman who spoke before us today.
[02:08:08.960 --> 02:08:11.100]  Mark Tobias wrote a book called Lock, Safes, and
[02:08:11.100 --> 02:08:12.780]  Security. That's called by
[02:08:12.780 --> 02:08:14.960]  many people the Lockpick Bible. It's just like
[02:08:14.960 --> 02:08:16.900]  the history of locks starting in ancient Egypt
[02:08:16.900 --> 02:08:19.100]  forward. It's a very, very good
[02:08:19.100 --> 02:08:21.040]  tome of knowledge. Online
[02:08:21.040 --> 02:08:23.300]  you can Google for the MIT Guide to Lockpicking.
[02:08:23.300 --> 02:08:24.940]  It's hosted at a few places.
[02:08:25.000 --> 02:08:26.960]  Some of the videos I'm showing you were cropped
[02:08:26.960 --> 02:08:28.840]  from Barry's presentations available
[02:08:28.840 --> 02:08:31.240]  here. There's a lot of informative pages.
[02:08:31.240 --> 02:08:33.120]  All these links, you don't have to scribble them right now.
[02:08:33.120 --> 02:08:34.600]  There's going to be all up at the end.
[02:08:35.920 --> 02:08:37.020]  There are sport-picking
[02:08:37.020 --> 02:08:39.180]  groups. There are hobbyist groups. There's a lot of
[02:08:39.180 --> 02:08:41.100]  fun things you can get involved with that way, with
[02:08:41.100 --> 02:08:43.160]  local people. Every con
[02:08:43.160 --> 02:08:45.160]  that you can go to now, DEFCON, back
[02:08:45.160 --> 02:08:47.100]  east, the HOPE cons, what the hack
[02:08:47.100 --> 02:08:49.040]  is happening now in Europe, there's
[02:08:49.040 --> 02:08:51.160]  sport-picking competitions usually. In fact,
[02:08:51.160 --> 02:08:53.100]  KyGoth and the DC719 crew
[02:08:53.100 --> 02:08:55.160]  are running that this year again. They do a great job
[02:08:55.160 --> 02:08:57.260]  of it. There's groups. I mentioned
[02:08:57.260 --> 02:08:58.640]  Barry's group, TOOL.
[02:08:58.780 --> 02:09:01.460]  The German group, which I think has a thousand members.
[02:09:01.460 --> 02:09:04.000]  It's really huge. It's from the Dispotechnik.
[02:09:04.060 --> 02:09:05.680]  TOOL USA, we recently
[02:09:05.680 --> 02:09:07.340]  founded with Barry's blessing.
[02:09:07.340 --> 02:09:09.580]  We're based out of Princeton University.
[02:09:09.800 --> 02:09:11.740]  If there's any people near you,
[02:09:11.740 --> 02:09:13.840]  meet people here. Talk and go home.
[02:09:13.840 --> 02:09:15.540]  Get together and play with stuff.
[02:09:15.540 --> 02:09:17.460]  Take it apart. It's excellent to do with
[02:09:17.460 --> 02:09:19.500]  friends or as an individual activity.
[02:09:19.500 --> 02:09:21.420]  I take a train up to Newark to go to
[02:09:21.420 --> 02:09:22.880]  school and I'll just sit there
[02:09:23.540 --> 02:09:25.560]  fussing with lockpicks on the train, just popping stuff
[02:09:25.560 --> 02:09:27.380]  open. It's a great way to pass the time.
[02:09:27.980 --> 02:09:29.500]  You get a few strange looks, but you're
[02:09:29.500 --> 02:09:31.020]  not doing anything very illegal.
[02:09:31.620 --> 02:09:33.500]  We're going to cover that now in the legal section.
[02:09:35.020 --> 02:09:35.480]  You've got to
[02:09:35.480 --> 02:09:37.720]  hold the question. I'm sorry. We're going to run out of time if we don't.
[02:09:37.720 --> 02:09:38.200]  Sorry.
[02:09:39.360 --> 02:09:41.760]  Buying picks. Southerd guys.
[02:09:41.820 --> 02:09:43.480]  Excellent, excellent picks for starter
[02:09:43.480 --> 02:09:45.360]  kits. They're very simple. The Peterson
[02:09:45.860 --> 02:09:47.340]  manufacturing company makes very nice
[02:09:47.340 --> 02:09:49.380]  high-end equipment. You can get
[02:09:49.380 --> 02:09:51.740]  stuff here. I know the guys from IVU are around.
[02:09:51.740 --> 02:09:53.560]  Check out their table. Check out some of
[02:09:53.560 --> 02:09:55.460]  our stuff in the hands-on area if you want to
[02:09:55.460 --> 02:09:57.720]  just pick them up from us. You can make your own.
[02:09:57.720 --> 02:09:59.680]  We'll cover all kind of fun stuff, but we're
[02:09:59.680 --> 02:10:01.680]  going to have our grinder tools out. We're going to make some picks
[02:10:01.680 --> 02:10:03.920]  and make some fun stuff in the hands-on session.
[02:10:04.200 --> 02:10:05.840]  Those of you with legal concerns,
[02:10:06.620 --> 02:10:07.820]  I am not a lawyer.
[02:10:07.820 --> 02:10:09.660]  I am not sleeping with one. This is
[02:10:09.660 --> 02:10:12.060]  not legal advice. Take it for what it's worth.
[02:10:12.060 --> 02:10:13.580]  Check your local laws.
[02:10:13.880 --> 02:10:15.980]  To purchase, ship, and
[02:10:15.980 --> 02:10:17.660]  in general just be involved in
[02:10:17.660 --> 02:10:19.600]  the transportation of picks, there
[02:10:19.600 --> 02:10:21.660]  is a federal standard. The federal
[02:10:21.660 --> 02:10:23.000]  standard is a five-point
[02:10:23.920 --> 02:10:25.720]  eligibility. You can be
[02:10:25.940 --> 02:10:27.640]  a lock manufacturer. You can be law
[02:10:27.640 --> 02:10:29.720]  enforcement. You can be in the auto
[02:10:29.720 --> 02:10:31.860]  business. You can be a repo man.
[02:10:31.860 --> 02:10:34.120]  Or you can be a bona fide locksmith.
[02:10:34.260 --> 02:10:35.680]  The lawyers in the room will tell you
[02:10:35.680 --> 02:10:37.680]  bona fide meaning in good faith. It doesn't
[02:10:37.680 --> 02:10:39.760]  mean a professional locksmith. It doesn't
[02:10:39.760 --> 02:10:41.840]  mean a certified locksmith. It just
[02:10:41.840 --> 02:10:44.600]  means you have a good faith interest in locksmithing.
[02:10:44.600 --> 02:10:45.780]  In many circles,
[02:10:45.780 --> 02:10:47.820]  check with a lawyer, in many circles
[02:10:47.820 --> 02:10:49.880]  this is extended to hobbyist and academic
[02:10:50.600 --> 02:10:51.800]  interests. I've got to have you
[02:10:51.800 --> 02:10:53.140]  wait for the question. I'm sorry.
[02:10:53.620 --> 02:10:55.000]  If you have a legitimate
[02:10:55.000 --> 02:10:57.200]  non-criminal interest in this, you
[02:10:57.200 --> 02:10:59.100]  are covered under that part of the law.
[02:10:59.100 --> 02:11:00.960]  If you're dealing with a vendor and they say
[02:11:00.960 --> 02:11:03.100]  you have to fill out this form, fill it out
[02:11:03.100 --> 02:11:05.200]  under check box number five and you should
[02:11:05.200 --> 02:11:07.300]  be clear. Possession
[02:11:07.300 --> 02:11:09.240]  of lock picks, however, can be
[02:11:09.240 --> 02:11:11.260]  squirrely. Lock picks
[02:11:11.260 --> 02:11:13.340]  per se, right Mike, are not illegal.
[02:11:13.380 --> 02:11:15.200]  Burglary tools are illegal, right?
[02:11:15.360 --> 02:11:17.080]  Depends where, but generally yes.
[02:11:17.480 --> 02:11:19.240]  Burglary tools, what makes a burglary
[02:11:19.240 --> 02:11:21.320]  tool? Intent. Intent
[02:11:21.320 --> 02:11:23.120]  is much of the law.
[02:11:23.880 --> 02:11:25.380]  Most laws, every
[02:11:25.380 --> 02:11:27.540]  state, by the way, the lockpick101.com
[02:11:27.540 --> 02:11:30.200]  those guys, lockpicking101.org
[02:11:30.200 --> 02:11:31.440]  or com,
[02:11:31.440 --> 02:11:33.360]  we'll check it again, they have a whole
[02:11:33.360 --> 02:11:34.960]  legal section you can get
[02:11:34.960 --> 02:11:37.880]  all the information you need. Basically,
[02:11:37.880 --> 02:11:38.920]  if you have
[02:11:40.220 --> 02:11:41.060]  demonstrable intent
[02:11:41.060 --> 02:11:43.520]  that you're trying to commit a crime,
[02:11:43.520 --> 02:11:45.100]  you've got a whole other
[02:11:45.100 --> 02:11:47.480]  bag of shit you're trying to deal with. If you're just a guy
[02:11:47.480 --> 02:11:49.160]  on a subway and they're doing
[02:11:49.160 --> 02:11:51.220]  fascist crap in New York, patting people down now
[02:11:51.220 --> 02:11:53.320]  and they say, what are these? What are these? Lock
[02:11:53.320 --> 02:11:55.160]  picks? Well, you're a guy frigging
[02:11:55.160 --> 02:11:56.260]  riding the subway.
[02:11:57.080 --> 02:11:59.140]  I wasn't going to go somewhere and pick a lock.
[02:11:59.140 --> 02:12:01.220]  No, there's no intent that you were going to do anything.
[02:12:01.220 --> 02:12:02.960]  If you are squatting behind
[02:12:02.960 --> 02:12:04.420]  Best Buy at 3 in the morning
[02:12:06.100 --> 02:12:07.220]  at the back door
[02:12:07.220 --> 02:12:09.020]  and a cop's like, what are you doing? You're like,
[02:12:09.020 --> 02:12:11.280]  I'm taking a piss. And they find
[02:12:11.280 --> 02:12:12.960]  lock picks on you, you've got a whole
[02:12:12.960 --> 02:12:14.920]  different situation you're in there.
[02:12:15.400 --> 02:12:17.140]  So, be aware of that.
[02:12:17.140 --> 02:12:19.180]  Many states do not have
[02:12:19.180 --> 02:12:21.100]  intent laws or they have kind of more
[02:12:21.100 --> 02:12:23.120]  draconian laws. We can cover that later
[02:12:23.120 --> 02:12:25.280]  on or talk to a lawyer.
[02:12:25.320 --> 02:12:26.580]  These are states of concern
[02:12:27.020 --> 02:12:29.500]  with what are called prima facie evidence laws.
[02:12:30.100 --> 02:12:31.520]  It's all kind of relative.
[02:12:31.520 --> 02:12:33.340]  Just keep intent in mind. And also
[02:12:33.340 --> 02:12:35.700]  if you do anything else illegal,
[02:12:35.700 --> 02:12:37.200]  sometimes possession of a lock pick
[02:12:37.200 --> 02:12:39.040]  can escalate that crime. For instance,
[02:12:39.040 --> 02:12:41.080]  if you're trespassing, if you have, a lot of people
[02:12:41.080 --> 02:12:43.020]  here like urban exploring,
[02:12:43.020 --> 02:12:45.100]  if you're somewhere you're not supposed to be, you
[02:12:45.100 --> 02:12:47.120]  might turn a misdemeanor
[02:12:47.120 --> 02:12:48.880]  trespass charge into a criminal
[02:12:48.880 --> 02:12:51.200]  trespass charge because you had picks on you.
[02:12:51.200 --> 02:12:53.020]  Keep it in mind. Check with a lawyer.
[02:12:53.160 --> 02:12:55.080]  There's plenty of lawyers here. Talk to the people who
[02:12:55.080 --> 02:12:55.660]  know.
[02:12:58.680 --> 02:12:59.040]  Acquiring
[02:12:59.040 --> 02:13:01.640]  locks. I'll shoot through this real fast. Basically,
[02:13:01.640 --> 02:13:03.160]  the last, the main thing is just don't
[02:13:03.160 --> 02:13:04.840]  go crazy buying them all over.
[02:13:04.980 --> 02:13:07.000]  Most locks are the same. You're gonna, you know,
[02:13:07.000 --> 02:13:09.060]  everyone who gets real, oh, I can pick, it's fun.
[02:13:09.060 --> 02:13:11.040]  You go to the hardware store, you drop 60 bucks, you got
[02:13:11.040 --> 02:13:12.860]  you know, a ton of the same lock.
[02:13:12.860 --> 02:13:14.820]  Look through your basement. Look through old stuff
[02:13:14.820 --> 02:13:16.820]  that relatives have left in a box somewhere.
[02:13:16.820 --> 02:13:18.420]  Look for old exotic designs.
[02:13:18.640 --> 02:13:20.720]  You can get really nice what are called training
[02:13:20.720 --> 02:13:22.600]  kits. I have one that you can play with at
[02:13:22.600 --> 02:13:24.420]  the hands-on where it's
[02:13:24.420 --> 02:13:26.740]  pinned, you know, they're keyed the same, but
[02:13:26.740 --> 02:13:29.000]  it's only like a one pin stack, then a two pin stack,
[02:13:29.000 --> 02:13:30.720]  then a three. So you can actually get the feel
[02:13:30.720 --> 02:13:32.620]  for it and get started that way.
[02:13:32.620 --> 02:13:34.800]  There's a lot of really good places you can acquire
[02:13:34.800 --> 02:13:36.480]  locks. Ask me about later.
[02:13:37.500 --> 02:13:38.920]  So how does this all break
[02:13:38.920 --> 02:13:40.860]  down into the real world? What does this really
[02:13:40.860 --> 02:13:43.200]  bear on in the big picture?
[02:13:43.440 --> 02:13:44.920]  They mentioned in the last talk,
[02:13:44.920 --> 02:13:46.880]  it's very valid. Criminals
[02:13:46.880 --> 02:13:48.920]  don't tend to use lock picks.
[02:13:48.920 --> 02:13:50.760]  I'm not saying no one ever picks a lock
[02:13:50.760 --> 02:13:52.780]  with criminal intent, but usually
[02:13:52.780 --> 02:13:54.620]  yeah, you're going to get a boot to the door.
[02:13:54.640 --> 02:13:56.780]  Anybody who was watching sneakers on the Defcon movie
[02:13:56.780 --> 02:13:59.440]  channel last night, you know, they just kick the door down.
[02:13:59.460 --> 02:14:00.800]  Brute force is what criminals
[02:14:00.800 --> 02:14:02.860]  use. Don't buy the most expensive
[02:14:02.860 --> 02:14:04.520]  lock on the shelf and put it, you know,
[02:14:04.520 --> 02:14:07.000]  in a non-solid core door
[02:14:07.000 --> 02:14:08.860]  with like a balsa wood frame, just, you know,
[02:14:08.860 --> 02:14:10.900]  with little quarter inch screws.
[02:14:11.580 --> 02:14:13.060]  Situate the lock properly.
[02:14:13.060 --> 02:14:14.940]  Consider the overall scope of it.
[02:14:14.940 --> 02:14:16.900]  I mentioned, you know, if a guy can sit
[02:14:16.900 --> 02:14:18.980]  there next to your server room or your records
[02:14:18.980 --> 02:14:21.360]  room picking a lock for an hour,
[02:14:21.360 --> 02:14:22.800]  why don't you have a security
[02:14:22.800 --> 02:14:24.960]  camera near that door? Why don't you have a security guard
[02:14:24.960 --> 02:14:26.560]  who occasionally walks by?
[02:14:26.620 --> 02:14:29.200]  Keep the big picture in mind.
[02:14:31.240 --> 02:14:32.580]  What make good locks?
[02:14:32.580 --> 02:14:34.680]  I always get asked this, so I put this page in
[02:14:34.680 --> 02:14:36.820]  just to shoot down a few names. I don't work for any of
[02:14:36.820 --> 02:14:39.340]  these guys. They just kind of impress me.
[02:14:39.340 --> 02:14:40.780]  Those Medicos with the biaxial
[02:14:40.780 --> 02:14:42.580]  pins, I love them to death.
[02:14:42.620 --> 02:14:44.840]  The Assa V10, for the slight flaw that it
[02:14:44.840 --> 02:14:46.420]  has, it's still magnificent.
[02:14:46.500 --> 02:14:49.140]  Those best FICs, they're very hard to pick.
[02:14:49.140 --> 02:14:50.980]  They're very nice to do logistics
[02:14:50.980 --> 02:14:52.480]  of large scale deployment.
[02:14:52.800 --> 02:14:55.060]  Abus, that was what Barry was picking, the
[02:14:55.060 --> 02:14:57.000]  rotating disk lock. They make a
[02:14:57.000 --> 02:14:58.940]  very, very nice strong lock.
[02:14:58.940 --> 02:15:01.020]  American, we're going to talk about a little bit more at my
[02:15:01.020 --> 02:15:03.020]  very end slide, but they tend to make
[02:15:03.020 --> 02:15:05.140]  good things. And if anybody here is in the military,
[02:15:05.140 --> 02:15:06.980]  by the way, anybody who can
[02:15:06.980 --> 02:15:08.960]  score me one of these bad boys?
[02:15:09.560 --> 02:15:11.000]  The Sergeant in Greenleaf
[02:15:11.000 --> 02:15:13.020]  833, I've heard it told
[02:15:13.020 --> 02:15:15.280]  that if you come across one of these,
[02:15:15.280 --> 02:15:17.160]  somewhere far, far away,
[02:15:17.160 --> 02:15:19.140]  there's a lieutenant screaming at a corporal as to why
[02:15:19.140 --> 02:15:21.100]  it's not inventoried properly, because they're
[02:15:21.100 --> 02:15:22.680]  not supposed to get out there.
[02:15:23.860 --> 02:15:24.940]  You got one? You got one?
[02:15:27.780 --> 02:15:28.940]  That's what I've heard. These are
[02:15:28.940 --> 02:15:31.580]  armory locks. These are a
[02:15:31.580 --> 02:15:33.340]  Medico biaxial core, situated
[02:15:33.340 --> 02:15:35.280]  in what is the most beautifully designed and
[02:15:35.280 --> 02:15:37.300]  engineered housing I've ever
[02:15:37.300 --> 02:15:38.480]  seen in my life.
[02:15:39.120 --> 02:15:41.300]  Yes, some bad locks stand out. We've been kind of
[02:15:41.300 --> 02:15:43.100]  beaten up on Master for this talk, and I
[02:15:43.100 --> 02:15:45.200]  don't like to all the time, because they make a high-end
[02:15:45.200 --> 02:15:47.220]  model, just no one buys them, because they
[02:15:47.220 --> 02:15:49.120]  keep frigging making shitty models that everyone
[02:15:49.120 --> 02:15:51.440]  buys, because they're cheap. Quickset,
[02:15:52.100 --> 02:15:53.220]  everyone who's ever got a door
[02:15:53.220 --> 02:15:55.200]  in your house that has a quickset, you'll
[02:15:55.200 --> 02:15:57.100]  shit your pants when you pick it in three seconds.
[02:15:58.160 --> 02:15:59.120]  Keep in mind,
[02:15:59.120 --> 02:16:01.360]  you get what you pay for. If there's
[02:16:01.360 --> 02:16:03.360]  three different locks on the shelf, one costs
[02:16:03.360 --> 02:16:06.000]  nothing, one costs middle, and one costs a lot,
[02:16:06.000 --> 02:16:07.420]  chances are, the
[02:16:07.420 --> 02:16:09.320]  expensive one's going to be better.
[02:16:09.320 --> 02:16:11.360]  If you're in the American marketplace,
[02:16:11.360 --> 02:16:13.100]  if it's a free market system,
[02:16:13.100 --> 02:16:15.060]  if you're a recognizable name,
[02:16:15.060 --> 02:16:17.240]  you can't keep producing garbage
[02:16:17.240 --> 02:16:19.220]  year after year, and people aren't going to keep
[02:16:19.220 --> 02:16:21.900]  buying your product, unless you're Microsoft.
[02:16:24.100 --> 02:16:25.540]  If it's a
[02:16:25.540 --> 02:16:28.020]  reputable brand and it's expensive, you're probably halfway
[02:16:27.360 --> 02:16:29.360]  there.
[02:16:31.360 --> 02:16:33.600]  You picked a quickset with a popsicle stick?
[02:16:33.600 --> 02:16:35.380]  It wouldn't surprise me.
[02:16:36.240 --> 02:16:37.480]  Keep playing
[02:16:37.480 --> 02:16:39.200]  with these locks. Keep
[02:16:39.200 --> 02:16:41.660]  experimenting. Security
[02:16:41.660 --> 02:16:43.860]  is achieved through openness,
[02:16:43.860 --> 02:16:45.620]  not just in the digital world.
[02:16:45.620 --> 02:16:47.040]  We should not be
[02:16:47.040 --> 02:16:49.180]  so eager to be hushed up
[02:16:49.180 --> 02:16:51.360]  about when we discover things in the physical
[02:16:51.360 --> 02:16:53.640]  world. Craziness
[02:16:53.640 --> 02:16:55.480]  next door. The American
[02:16:55.480 --> 02:16:57.820]  700 is a story I love to tell,
[02:16:57.820 --> 02:16:59.260]  because it's a complete example
[02:16:59.260 --> 02:17:01.060]  of this phenomenon.
[02:17:01.920 --> 02:17:03.820]  Anybody live in a big city?
[02:17:03.820 --> 02:17:05.120]  Been to a big city?
[02:17:06.380 --> 02:17:07.400]  So if you're walking
[02:17:07.400 --> 02:17:09.260]  around at night,
[02:17:10.840 --> 02:17:11.360]  you'll see that
[02:17:11.360 --> 02:17:13.560]  every storefront is closed down
[02:17:13.560 --> 02:17:15.640]  with a big honking sucker.
[02:17:16.600 --> 02:17:17.940]  Almost always,
[02:17:17.940 --> 02:17:19.500]  storefronts and big
[02:17:19.500 --> 02:17:21.620]  where brute force, where some guy with a crowbar
[02:17:21.620 --> 02:17:23.700]  is going to be the assault, is going to be
[02:17:23.700 --> 02:17:25.360]  either an American lock or
[02:17:25.580 --> 02:17:27.240]  a clone of an American lock.
[02:17:27.240 --> 02:17:29.360]  This is their 700 series lock.
[02:17:29.360 --> 02:17:31.040]  It's a very nice padlock.
[02:17:31.400 --> 02:17:33.060]  It has a flaw, however,
[02:17:33.060 --> 02:17:34.380]  which was discovered.
[02:17:35.940 --> 02:17:36.860]  This lock
[02:17:36.860 --> 02:17:39.240]  is a removable core. You can see that
[02:17:39.240 --> 02:17:41.160]  when the lock is unlocked, you can
[02:17:41.160 --> 02:17:43.740]  unscrew from the inside, drop the eight plate off,
[02:17:43.740 --> 02:17:45.320]  eject the core. The core is a nice
[02:17:45.320 --> 02:17:47.200]  little self-contained unit. This
[02:17:47.200 --> 02:17:49.280]  core interfaces with
[02:17:49.280 --> 02:17:51.200]  the double ball control cylinder
[02:17:51.200 --> 02:17:52.500]  by means of
[02:17:53.340 --> 02:17:54.880]  the core has a raised
[02:17:54.880 --> 02:17:56.900]  half circle piece and the control
[02:17:56.900 --> 02:17:58.800]  cylinder has a raised quarter circle
[02:17:58.800 --> 02:18:00.740]  piece. Can you guys see that? How they just
[02:18:00.740 --> 02:18:02.600]  fit together and when they're together,
[02:18:02.600 --> 02:18:04.280]  they turn and they engage.
[02:18:06.120 --> 02:18:06.840]  Peterson makes
[02:18:06.840 --> 02:18:08.900]  this tool called
[02:18:08.900 --> 02:18:10.660]  the American Bypass Tool.
[02:18:13.020 --> 02:18:14.380]  This is the bypass tool
[02:18:16.340 --> 02:18:16.900]  and if
[02:18:16.900 --> 02:18:18.600]  I stick this all the way down this lock
[02:18:24.380 --> 02:18:24.940]  and I
[02:18:24.940 --> 02:18:25.960]  beat this tool to hell
[02:18:29.020 --> 02:18:29.500]  that
[02:18:29.500 --> 02:18:30.880]  opens that lock.
[02:18:32.240 --> 02:18:33.220]  Why is that?
[02:18:33.220 --> 02:18:34.500]  Well, it's because if you're looking
[02:18:34.500 --> 02:18:36.780]  at this core, this ejected
[02:18:36.780 --> 02:18:38.680]  core, this is the back end of it.
[02:18:38.760 --> 02:18:40.420]  The keyway is
[02:18:40.420 --> 02:18:42.460]  visible. The keyway is cut all the way
[02:18:42.460 --> 02:18:44.420]  through and the
[02:18:44.420 --> 02:18:46.580]  Peterson tool, the bypass tool
[02:18:46.580 --> 02:18:47.860]  just has a little
[02:18:47.860 --> 02:18:50.340]  hockey stick kind of end. It slips
[02:18:50.340 --> 02:18:52.020]  all the way down through the keyway
[02:18:52.020 --> 02:18:53.520]  and it spins
[02:18:54.820 --> 02:18:55.620]  that second
[02:18:56.620 --> 02:18:57.420]  cylinder.
[02:18:57.580 --> 02:18:59.540]  The cylinder, it just fits right in where it should be
[02:18:59.540 --> 02:19:02.080]  and it just kind of just flicks the cylinder and just turns it.
[02:19:02.380 --> 02:19:03.640]  It's a very elegant
[02:19:03.640 --> 02:19:05.740]  bypass. It's got a lot of attention
[02:19:06.600 --> 02:19:07.580]  but American is
[02:19:07.740 --> 02:19:09.720]  a great company. Instead of trying to sue people
[02:19:09.720 --> 02:19:13.000]  over this, instead of trying to make a huge fuss,
[02:19:13.000 --> 02:19:13.640]  American just
[02:19:13.640 --> 02:19:15.480]  came out with something called a security
[02:19:15.480 --> 02:19:17.600]  wafer. They're hard to order but they
[02:19:17.600 --> 02:19:19.460]  do have a part number. You can find them by some
[02:19:19.460 --> 02:19:21.620]  vendors. You can take your core,
[02:19:21.620 --> 02:19:23.540]  eject it out, and put this security wafer
[02:19:23.540 --> 02:19:25.420]  in. And it's literally, I
[02:19:25.420 --> 02:19:27.640]  love how it's such a, like the digital world,
[02:19:27.640 --> 02:19:29.200]  it's like they released a patch.
[02:19:29.560 --> 02:19:31.680]  So it's like a hot fix.
[02:19:32.020 --> 02:19:33.600]  And you put the lock back together
[02:19:33.600 --> 02:19:35.740]  and you can't stick the American tool
[02:19:35.740 --> 02:19:37.120]  down the keyway.
[02:19:37.660 --> 02:19:41.240]  Never one to be discouraged,
[02:19:41.240 --> 02:19:41.720]  Ken came
[02:19:41.720 --> 02:19:43.620]  up with this, which
[02:19:43.620 --> 02:19:45.220]  is a wafer breaker kit.
[02:19:47.420 --> 02:19:48.260]  You stick
[02:19:48.260 --> 02:19:50.000]  these down the
[02:19:50.000 --> 02:19:51.940]  keyway, you smash on them, and those
[02:19:51.940 --> 02:19:53.920]  wafers are spread out in their history.
[02:19:54.360 --> 02:19:56.380]  So we'll see what happens next.
[02:19:56.520 --> 02:19:58.000]  I would like to think American
[02:19:58.000 --> 02:20:00.000]  is a good company. Chances are they're going
[02:20:00.000 --> 02:20:01.920]  to try to come up with something even better. And
[02:20:01.920 --> 02:20:03.880]  Ken's going to kind of come up with something better.
[02:20:03.880 --> 02:20:06.040]  And the end result is better security for all
[02:20:06.040 --> 02:20:08.000]  of us. Because we talk about it,
[02:20:08.000 --> 02:20:10.020]  the vendors address it. That's not
[02:20:10.480 --> 02:20:11.480]  a bad thing.
[02:20:12.380 --> 02:20:13.960]  You know, this is, we know
[02:20:13.960 --> 02:20:15.920]  about all of this. You guys, all we know about
[02:20:15.920 --> 02:20:18.000]  security through obscurity versus real
[02:20:18.000 --> 02:20:19.780]  security in the digital world.
[02:20:19.860 --> 02:20:22.140]  Think about it the same way in the real world.
[02:20:22.140 --> 02:20:23.760]  The physical world is no different.
[02:20:24.120 --> 02:20:26.280]  Matt Blaze wrote a couple of great papers about this.
[02:20:26.280 --> 02:20:27.480]  I have the links later.
[02:20:28.800 --> 02:20:29.600]  Ultimately,
[02:20:29.600 --> 02:20:32.100]  I like to kind of wrap it up by saying
[02:20:32.980 --> 02:20:34.260]  don't be super
[02:20:34.260 --> 02:20:35.620]  trusting of anything.
[02:20:35.860 --> 02:20:38.100]  When I was real young, my dad
[02:20:38.100 --> 02:20:39.960]  was in the service, and he had his
[02:20:39.960 --> 02:20:42.560]  issue weapons in the house. And when I was growing up,
[02:20:42.560 --> 02:20:44.080]  he showed me guns when I was
[02:20:44.080 --> 02:20:46.020]  real little. And he said, you know, he's showing me
[02:20:46.020 --> 02:20:47.960]  how this is how it's open and closed, and he's
[02:20:47.960 --> 02:20:49.820]  showing me how you can look down the barrel and the
[02:20:49.820 --> 02:20:52.040]  chamber is empty. And I said, well, why am I showing
[02:20:52.040 --> 02:20:54.020]  you this? Because, son, a gun is
[02:20:54.020 --> 02:20:56.200]  not safe. A gun is not
[02:20:57.260 --> 02:20:58.060]  okay unless
[02:20:58.060 --> 02:20:59.920]  you've seen that it's safe. You're not
[02:20:59.920 --> 02:21:01.900]  protected unless you've seen it. What did I just
[02:21:01.900 --> 02:21:04.200]  tell you? And I was like, a gun's
[02:21:04.200 --> 02:21:06.000]  not safe unless I know it's safe.
[02:21:06.000 --> 02:21:07.960]  He goes, no. It's not safe unless you've
[02:21:07.960 --> 02:21:09.980]  seen that it's safe. See
[02:21:09.980 --> 02:21:11.960]  it for yourself. Take things
[02:21:11.960 --> 02:21:13.940]  apart. Play with them.
[02:21:13.940 --> 02:21:15.980]  Don't just take people at their word.
[02:21:16.460 --> 02:21:17.740]  You know, we joke around, and
[02:21:17.740 --> 02:21:20.060]  when AST Cell and other guys are out walking
[02:21:20.060 --> 02:21:21.880]  around at night, and we all take pictures, you know,
[02:21:21.880 --> 02:21:24.640]  oh, the hacker salute, DEF CON salute.
[02:21:25.340 --> 02:21:25.940]  This is
[02:21:25.940 --> 02:21:27.540]  more powerful than you know.
[02:21:28.020 --> 02:21:30.020]  This is something that you should fly
[02:21:30.020 --> 02:21:32.040]  in the face of people who try to stop you
[02:21:32.040 --> 02:21:34.100]  from exploring. Nothing
[02:21:34.100 --> 02:21:36.060]  can be healthier than a really
[02:21:36.060 --> 02:21:37.780]  nice, hearty, fuck you
[02:21:37.780 --> 02:21:40.040]  to some people who say that learning
[02:21:40.040 --> 02:21:42.000]  about things is bad. Can I
[02:21:42.000 --> 02:21:44.140]  get everyone to practice this one time all together?
[02:21:44.680 --> 02:21:46.700]  Out loud. One, two, three.
[02:21:46.740 --> 02:21:48.200]  Fuck you!
[02:21:48.620 --> 02:21:50.220]  Hey, man. Those are trade
[02:21:50.220 --> 02:21:52.520]  secrets. Those are copyrighted.
[02:21:52.520 --> 02:21:54.360]  You can't explore our designs.
[02:21:54.360 --> 02:21:56.300]  Just buy them.
[02:21:56.320 --> 02:21:58.040]  Fuck you!
[02:21:58.100 --> 02:22:00.360]  The Department of Justice is in control.
[02:22:00.360 --> 02:22:02.020]  Leave it to your legislators. We will pass
[02:22:02.020 --> 02:22:03.980]  laws that take care of you.
[02:22:03.980 --> 02:22:05.960]  You don't have to know how things work.
[02:22:06.100 --> 02:22:07.600]  Fuck you!
[02:22:07.640 --> 02:22:10.040]  Why are you trying to explore things? You're just
[02:22:10.180 --> 02:22:12.560]  a criminal. You're not interested in security.
[02:22:12.980 --> 02:22:14.220]  Fuck you!
[02:22:14.460 --> 02:22:15.680]  Exposing bad security
[02:22:15.680 --> 02:22:17.960]  is what protects us all.
[02:22:33.230 --> 02:22:34.170]  Thank you very
[02:22:34.170 --> 02:22:36.130]  much. I could not have...
[02:22:36.130 --> 02:22:36.950]  Oh, sorry.
[02:22:38.550 --> 02:22:40.210]  To say that I came up
[02:22:40.210 --> 02:22:42.790]  and did this on my own would be just ridiculous.
[02:22:43.270 --> 02:22:44.410]  Barry, Matt,
[02:22:44.410 --> 02:22:46.250]  Mike here, RenderMan, who you've seen
[02:22:46.250 --> 02:22:47.550]  around with the fedora.
[02:22:48.070 --> 02:22:49.870]  Before everyone leaves, there's going to be a Q&A.
[02:22:49.870 --> 02:22:52.170]  Everybody from Tool, DC719
[02:22:52.170 --> 02:22:54.410]  and Kygoth, everybody in Tool USA,
[02:22:54.410 --> 02:22:55.930]  I've got to thank them all.
[02:22:56.150 --> 02:22:58.430]  We can do Q&A with the few minutes we've got.
[02:22:58.430 --> 02:23:00.570]  Here's all the links.
[02:23:01.030 --> 02:23:02.290]  Or if you want, we're really
[02:23:02.290 --> 02:23:04.250]  short on time. Do you guys want to just break
[02:23:04.250 --> 02:23:06.330]  it down here? I'll pack all this up.
[02:23:06.330 --> 02:23:08.230]  We can meet in the contest area, do some
[02:23:08.230 --> 02:23:09.850]  hands-on work, and
[02:23:09.850 --> 02:23:12.310]  we'll do questions there. Everyone, pie and punch will be
[02:23:12.310 --> 02:23:14.030]  served at the contest area.
[02:23:15.750 --> 02:23:16.290]  By the
[02:23:16.290 --> 02:23:18.250]  way, if you're leaving, leave through
[02:23:18.250 --> 02:23:20.230]  those doors. Doors to your
[02:23:20.230 --> 02:23:22.330]  left as you face the stage.
[02:23:22.650 --> 02:23:23.610]  Thank you.