[00:00.000 --> 00:06.700]  All right. Welcome to my presentation. This is Hybrid PhysSec Tools. The best of both worlds
[00:06.700 --> 00:12.980]  are just weird. This part of the tool is Lockpick Village for DEF CON 2018. My name is Didymus.
[00:15.200 --> 00:19.480]  So I always like to start out with an agenda so we kind of know where we're going with the
[00:19.960 --> 00:24.060]  conversation, as well as if you come back and watch this recording or view these slides,
[00:24.060 --> 00:29.280]  then you know, kind of bookmark where different things were. So we're going to start out talking
[00:29.280 --> 00:34.680]  about what are PhysSec tools? What do we use them for? And then why? Why are we looking into
[00:34.680 --> 00:41.020]  the whole hybrid concept? And is there even a need? And then what about PhysSec tools? What's
[00:41.020 --> 00:47.620]  already out there? What are some ideas that work? What don't work? And then we'll go to the how.
[00:47.840 --> 00:52.620]  So this is something I'm interested in. How do I start? Or what would I do if this is something that
[00:53.060 --> 00:57.700]  speaks to me that I'm kind of interested in? So with that, we'll launch right into it.
[00:59.280 --> 01:04.340]  A little bit about me. I've been picking locks for about 13 years. I picked it up when I was
[01:04.340 --> 01:09.820]  in college. I had a locksmith uncle who taught me a lot of the things and just went from there.
[01:09.840 --> 01:16.500]  My favorite pick is DeForest Offset. And my least favorite pick is this thing.
[01:17.060 --> 01:22.860]  My day job, I'm a security engineer for a technology company on their security operations
[01:22.860 --> 01:28.320]  and engineering team. And I'm a lockpick enthusiast. And I'm also happily married
[01:28.320 --> 01:35.440]  and a father of four children. All right, launching into it. So what are PhysSec tools?
[01:35.820 --> 01:40.860]  First of all, when I say PhysSec, I mean physical security. I mostly say that because I don't want
[01:40.860 --> 01:44.700]  to have to say physical security tools a million times in this presentation.
[01:45.820 --> 01:51.580]  So if you think about it, any tools that are used to test and or compromise physical security.
[01:51.820 --> 01:57.920]  I made up this definition, but that's the basic gist of it. So a few examples of this that you
[01:57.920 --> 02:02.220]  may or may not be familiar with. If you're watching this presentation, you're most likely
[02:02.220 --> 02:08.180]  familiar with it. So things like lockpicks, bypass tools, drivers, jigglers, shims, etc.
[02:08.180 --> 02:16.180]  are all examples of PhysSec tools. A couple weird examples, not so much weird, maybe just
[02:17.100 --> 02:21.800]  a bit different, or maybe things that you might not consider as physical security tools,
[02:21.800 --> 02:27.420]  are things like multi-tools, your standard Gerber, Leatherman, SOG type things. Wedges,
[02:27.420 --> 02:33.420]  these could be aluminum, these could be the air compressed wedges, as well as compressed air.
[02:33.420 --> 02:38.600]  These are the cans that clean your keyboard and computer parts. And then film reel, you can
[02:38.600 --> 02:46.500]  actually use reel-to-reel theater film reel to compromise certain types of doors. Check out Pope,
[02:46.500 --> 02:50.220]  he's got a few videos talking about this as well.
[02:52.000 --> 02:55.920]  Some awesome examples, so things like the thumb latch tool. If you don't know what this is,
[02:55.920 --> 03:00.160]  you should definitely check it out. It's a really neat tool, extremely useful, especially with
[03:00.160 --> 03:04.440]  double doors and things like that. And then the under-the-door tool. I don't know a single
[03:04.440 --> 03:08.460]  physical security pen tester who does not have an under-the-door tool.
[03:08.860 --> 03:14.780]  They are a must-have. They make the job very easy and very nice to have.
[03:16.660 --> 03:21.020]  And then there's the stuff that works in the pinch. So this would be like your standard
[03:21.020 --> 03:26.940]  bobby pins, paper clips, safety pins, stuff you find around. Like you could take a pop bottle and
[03:26.940 --> 03:31.280]  cut it and then you have something that you could shim with. This would be, you know, kind of the
[03:31.280 --> 03:38.540]  MacGyver method, I guess you could say. So let's talk hybrid for a minute. Hybrid tools, the way
[03:38.540 --> 03:46.320]  I'm interpreting them, is like when typically there's one tool that's used traditionally to
[03:46.320 --> 03:52.680]  manipulate a lock or bypass a latch or a door or something like that. But a hybrid tool is like
[03:53.220 --> 03:59.140]  there's more than one use for it instead of just the very specific one. I didn't want to use the
[03:59.140 --> 04:02.980]  word multi-tool in this presentation because I didn't want to confuse it with actual multi-tools,
[04:02.980 --> 04:10.720]  your Leatherman, your Gerbers, your things like that. Also, I do want to get this disclaimer out
[04:10.720 --> 04:16.220]  right here at the beginning, but hybrid doesn't always mean better. And what I mean by that is
[04:16.220 --> 04:23.300]  just because it can do two things, it doesn't mean it can do two things really well. I remember years
[04:23.300 --> 04:28.040]  ago I was thinking about getting a motorcycle, but I wanted something that I could ride and have
[04:28.040 --> 04:32.580]  it be street legal, but I could also go dirt biking in the mountains. I was talking to some
[04:32.580 --> 04:36.540]  of my friends and they said, yeah, you could totally do that. It's going to suck at both of
[04:36.540 --> 04:41.820]  them though, so it's better to get something more specific. But that's not always the case. Sometimes
[04:41.820 --> 04:48.480]  something that can do two things is still good at two things. It just might not be as well. So
[04:48.480 --> 04:54.000]  kind of have this dichotomy of you have this super specific exact tool for this exact situation.
[04:54.460 --> 05:00.280]  You want that or possibly compromise to have something that is more versatile, maybe not be
[05:00.280 --> 05:06.240]  the exact perfect one you would use, but you're trained, you use it, and you can do more with
[05:06.240 --> 05:11.020]  less kind of philosophy. So that's what I mean when I'm talking about hybrid tools. There's a
[05:11.020 --> 05:16.720]  picture of a couple here where you have a top of the keyway tensioner here, as well as a tubular
[05:16.720 --> 05:23.620]  tensioner, and then a comb pick. There's space on that. It's three tools in one. It's small,
[05:23.620 --> 05:27.440]  it's slim, it's compact. And then another one is a double-sided pick.
[05:29.440 --> 05:34.780]  And also creativity. This is kind of a way various people can express their creativity.
[05:35.140 --> 05:39.440]  Someone will like it. There's always trolls. Someone will hate it, but someone will always
[05:39.440 --> 05:46.440]  like it, is what I've discovered. So now we get to the why. So why would you want to do this?
[05:46.440 --> 05:52.080]  Well, it comes back to that, can I do more with less? I like to think of the example where let's
[05:52.080 --> 05:57.980]  say you're doing a physical pen test engagement, and you're going in during business hours. Like,
[05:57.980 --> 06:03.200]  yeah, after hours, take your full tactical bag, you know, and everything. But if you're going in
[06:03.200 --> 06:07.740]  trying to masquerade as an employee or tailgate or something like that, you can't go in with your
[06:07.740 --> 06:13.680]  whole kit. You can't walk in in like a suit and tie, and then you have a 5.11 MOLLE tactical backpack
[06:13.680 --> 06:18.600]  with all of your goodies and your go bag and everything in it. It's gonna stick out. So
[06:18.600 --> 06:24.180]  sometimes you need like custom tools. A lot of times physical pen testers will actually have
[06:24.180 --> 06:31.540]  custom tools for these type of situations. Again, creativity. This is a great way to do it. I'm not
[06:31.660 --> 06:36.200]  a developer. You know, you come to DEF CON, a lot of people have these brand new zero days and
[06:36.200 --> 06:42.260]  Metasploit modules and things like that. I'm not much of a programmer, but I like designing things.
[06:42.260 --> 06:48.120]  I'm more of a physical tool kind of person. I like the actual creating something and holding it in
[06:48.120 --> 06:53.420]  your hand. And another thing, like it could lead to better tools overall. And we're going to have a
[06:54.040 --> 06:59.240]  couple examples of that coming up. You know, your silly idea might be the tool that locksmiths
[06:59.240 --> 07:05.600]  and locksport enthusiasts have been wanting, but you just didn't know. So some things that
[07:05.600 --> 07:11.340]  inspire me. I really like spy stuff. I like the James Bond films. I like the International
[07:11.340 --> 07:17.440]  Spy Museum in Washington, D.C. I'd recommend, you know, when you can, check it out. It's well worth it.
[07:17.920 --> 07:24.040]  Also, I like the S.E.A.R. stuff. So the survival, evasion, resistance, escape type stuff.
[07:24.460 --> 07:32.120]  So this first thing here at the top is an actual titanium escape ring. It's got inside the ring.
[07:32.120 --> 07:40.340]  It has a saw blade. It also functions as a handcuff shim. And it's kind of cool. I don't
[07:40.340 --> 07:44.560]  have one myself, but I always thought that'd be kind of cool to have. Then the top right, bottom
[07:44.560 --> 07:50.220]  left, these are two exhibits from the International Spy Museum. One is a jackknife from several years
[07:50.220 --> 07:56.500]  ago. And then in the bottom left, we have one of the first lockpick pens, where the picks were
[07:56.500 --> 08:01.740]  actually concealed inside the pen body. And then on the bottom right, we have an example of a Gerber
[08:01.740 --> 08:07.320]  multi-tool that someone took and actually added lockpicks to it. So in this person's everyday
[08:07.320 --> 08:11.800]  carry, he had a tensioner, he had a couple, you know, your go-to lockpicks. And there's
[08:11.800 --> 08:17.220]  instructables on that. You can go to instructables and find this. And the link is in the notes as
[08:17.220 --> 08:23.540]  well. So let's talk about an improvement example. I really like Sparrow stuff. They're not sponsoring
[08:23.540 --> 08:28.380]  this or anything like this. I have a lot of their tools, but I do like Sparrow stuff. Some of the
[08:28.380 --> 08:33.200]  things they have, kind of looking over here on the left, we've got their wafer jigglers, their
[08:33.200 --> 08:36.940]  wafer picks. You know, four of them, they come on a keychain. They're really nice. They're good at
[08:36.940 --> 08:42.140]  getting in cabinet locks and some simpler locks and things like that. And then on the bottom left,
[08:42.140 --> 08:47.700]  you have your mini gem. This is something that I have a couple of. I really like it. And then
[08:47.700 --> 08:52.960]  there in the middle, you have the Sparrow shank, which is used for decoding as well as bypassing
[08:53.620 --> 08:57.980]  unshielded padlocks, different things like that. So you take these three different tools, three,
[08:57.980 --> 09:03.280]  however many different tools, and they actually have a set called Sparrow's Dark Shift. So they
[09:03.280 --> 09:09.220]  created an expansion set for this. And here on the right, you have your standard slim gem,
[09:09.220 --> 09:13.920]  but they actually narrowed the handle down, kind of cut a few holes in it to give it a little bit
[09:13.920 --> 09:18.500]  lighter weight. And then you look at the next two tools. Those are double-sided wafer picks.
[09:18.500 --> 09:23.920]  They have the exact same profile as the Sparrow's wafers over on the left, but they're double-sided
[09:23.920 --> 09:28.380]  and take up less space. They're very skinny. In fact, I carry these in my wallet.
[09:28.980 --> 09:33.460]  Next, you have a Sparrow shank, which is shorter and it has a bit wider handle. So maybe you can
[09:33.460 --> 09:39.100]  palm it better. And then this thing on the end is a hook rake pick that you can use both for
[09:39.100 --> 09:44.480]  single pin picking as well as for raking. It's called the Quick Strike. And from what I can tell,
[09:44.480 --> 09:50.000]  you can only get it in the Dark Shift expansion set. I really like it. It's fun. It's definitely
[09:50.000 --> 09:55.620]  worth looking into if you haven't played around with them before. And then a couple things,
[09:55.620 --> 10:01.580]  you know, first, you can use it as a hook or as a rake. And then they add these serrations. So
[10:01.580 --> 10:05.620]  starting with that left one, it's kind of hard to see in this picture, but they're actually very
[10:05.620 --> 10:11.420]  fine serrations. Part of the Dark Shift set that they made was so you could use it with or without
[10:11.420 --> 10:16.180]  gloves on. So having those serrations, especially in the dark, would be extremely valuable.
[10:16.180 --> 10:21.480]  Looking at the serrations on the two double-sided wafer picks as well as the Mini Jim,
[10:21.480 --> 10:25.140]  you can see those look a lot more pronounced. And they actually look a little painful. They're
[10:25.140 --> 10:29.580]  really not that bad because they're flat on top. I'll be talking about serrations here in a little
[10:29.580 --> 10:34.100]  bit. But that's something where they took a couple existing tools, how can we combine them,
[10:34.100 --> 10:39.220]  make them more useful, more versatile, smaller form factor, that kind of stuff.
[10:40.440 --> 10:47.340]  Another example. So this is the Tag 5 Industries Scorpion lock pick set. This is something that I
[10:47.340 --> 10:54.900]  acquired a few years, a couple years ago. And you'll notice that it's your standard tumbler,
[10:54.900 --> 11:00.460]  sorry, your standard tension tools, as well as your standard picks. However, the handles are
[11:00.460 --> 11:07.140]  very different. Definitely check them out. The reason why is because these were designed by a
[11:07.140 --> 11:13.680]  covert entry specialist. He worked, from what I understand, exclusively for the government
[11:13.680 --> 11:19.600]  agencies designing covert entry tools. Now, whereas with a standard lock pick, you hold it
[11:19.600 --> 11:24.220]  more like you would hold a pencil. These you actually hold kind of like you're holding a
[11:24.220 --> 11:30.040]  handle of some sort. Typically, when you're doing covert entry, you don't want to like
[11:30.040 --> 11:34.660]  go up to a door, get down on your knees and start working on the doorknob. This is something where
[11:34.660 --> 11:40.160]  you could actually stand up, hold it a different way, and look way less conspicuous. And this is
[11:40.160 --> 11:46.200]  something that he designed for government agencies and the like before coming and making them
[11:46.200 --> 11:51.280]  available to the public. They're really neat. They are different to get used to, but they are really,
[11:51.280 --> 11:56.720]  really nice. I'm a fan of them. And as I mentioned earlier, I'm a fan of International Spy Museum.
[11:56.720 --> 12:03.960]  They're actually featured in some of the exhibits. So let's talk about some hybrid tool examples.
[12:03.960 --> 12:09.900]  This is Lock Noob. If you don't follow Lock Noob on Twitter and on YouTube, I highly recommend it.
[12:09.900 --> 12:14.700]  He puts out great content. He's done a few collaborations. These are just three of the
[12:14.700 --> 12:20.000]  collaborations that he's done. And then an interesting hybrid multi-tool that he designed.
[12:20.860 --> 12:25.060]  I could go and explain it, but he does a much better job. Definitely check out his stuff. But
[12:25.060 --> 12:31.020]  starting at the top left, we have the gut wrench. This is a locksmithing tool where when you would
[12:31.020 --> 12:37.620]  take apart cylinders and change out the pins and stuff, at times you would need four or five
[12:37.620 --> 12:42.800]  different tools. And he thought, why don't I just design one that has all of them in one? And I know
[12:42.800 --> 12:47.580]  locksmiths that actually use this because I have one tool instead of having to rummage all over my
[12:47.580 --> 12:51.820]  workbench and find the right tool to fit the right cylinder and the right diameter and stuff.
[12:52.520 --> 12:58.260]  Moving over to the top right, this is a lock... I kind of think of it like a locksmith
[12:58.260 --> 13:06.160]  kit in a multi-tool. He designed it in such a way that it had various picks, a knife,
[13:06.340 --> 13:10.280]  a screwdriver so you could take out Phillips head screws and things like that, and your
[13:10.280 --> 13:15.500]  standard American padlocks. A place to put tensioners, tweezers, as well as plug followers.
[13:15.880 --> 13:20.380]  Again, these are YouTube videos. Check them out. He breaks it down way better than I could.
[13:20.820 --> 13:25.600]  Moving to the bottom right, you have the goat wrench. So this is where he took
[13:25.600 --> 13:33.740]  um where he took that tensioner that I showed earlier and there's some tubular locks that it
[13:33.740 --> 13:37.700]  fits in there's some that it doesn't so he actually did a few prototypes took some
[13:38.340 --> 13:42.940]  stock steel and designed his own and then once he got the prototypes where he wanted
[13:42.940 --> 13:47.300]  did a collaboration with Sparrows and you can actually get the goat wrench today.
[13:47.780 --> 13:51.460]  And then finally on the bottom left we have the Sparrows Medusa.
[13:51.460 --> 13:57.000]  We'll we'll have a bit close up here in a second. I don't want you to point to notice
[13:57.000 --> 14:02.860]  that it's a pick that you can do single pin picking as well as raking with.
[14:05.160 --> 14:10.080]  All right, and now we get to the or just plain weird. So remember back in 1999,
[14:10.080 --> 14:12.860]  the James Bond movie, The World is Not Enough, he had to break into someplace
[14:12.860 --> 14:19.720]  and so he had like this switchblade actioned credit card and he flipped it out and you know I
[14:19.720 --> 14:25.400]  I didn't pick locks at the time but going back looking at it it's very interesting. I mean
[14:25.400 --> 14:32.480]  it's kind of we've got like some kind of S snake rate going on and then on the backside it's like
[14:32.620 --> 14:39.260]  a multi multiple ridge type raking lock. I don't know it looked cool for Hollywood.
[14:39.440 --> 14:44.220]  And then here on the right more practical from uh Johnny Depp's rendition of Sherlock Holmes
[14:44.220 --> 14:52.540]  where he had various tryout lever lock warded style picks which is interesting. So or just
[14:52.540 --> 14:56.960]  weird or practical or Hollywood I don't know but it is kind of interesting to see this stuff in
[14:56.960 --> 15:04.280]  media. So back to Lock Noon for a second. This is a YouTube video where he talks specifically about
[15:04.280 --> 15:10.480]  the Medusa and I kind of follow the same process he does at least that he laid out in this video
[15:10.480 --> 15:17.460]  about designing new picks. So starts with sketches starts designing them you know here's what I kind
[15:17.460 --> 15:22.640]  of want here's what I want it to do and start you know it's a lot easier to make mistakes
[15:23.220 --> 15:27.540]  on pen and paper before you start making prototypes. So he started running through
[15:27.900 --> 15:31.400]  a couple different designs what he was kind of thinking where he wanted to go with it.
[15:32.280 --> 15:37.580]  Once you get to that point you can take the one you like and then you start making your own custom
[15:37.580 --> 15:43.420]  prototypes. You can you know get some kind of rotary tool create this yourself or you could
[15:43.420 --> 15:48.560]  even switch it over to computer-based modeling like CAD design go from that and then you tweak
[15:48.560 --> 15:54.500]  and work with your prototype until you have something that you really like which eventually
[15:54.500 --> 16:01.160]  ended up being the Sparrow's Medusa. And of course Lazarus you got this really beautiful artwork of
[16:01.160 --> 16:06.640]  this Medusa figure with the snakes and the hair and everything it's a really it's a really beautiful
[16:06.640 --> 16:13.580]  pick and it's also really functional when in doubt laser etching is pretty cool. So where to
[16:13.580 --> 16:16.880]  begin this is something that's kind of interesting or maybe you've thought of a tool or something
[16:16.880 --> 16:21.740]  like that so this is kind of the process I follow but it's like you know what am I trying to solve
[16:21.740 --> 16:27.520]  or improve upon kind of start there like start brainstorming and I found that brainstorming
[16:27.520 --> 16:33.920]  always works best when I'm picking. So and then ask yourself what's currently out there who's
[16:33.920 --> 16:38.920]  already done a lot of the work like think of Sparrows taking their own designs and then tweaking
[16:38.920 --> 16:44.160]  them and making them better in the dark shift expansion. Then you get to the design and drawing
[16:44.160 --> 16:48.780]  phase then you start doing prototypes and testing and then you know you repeat that until you're
[16:48.780 --> 16:54.280]  happy with how your prototypes are and then you move to the production phase. So this is something
[16:54.280 --> 16:59.720]  I did a few years ago when I when I came up with this crazy idea like I wanted something sort of
[16:59.720 --> 17:04.260]  like a lock pick wallet card that was more than a one-time use like there's some that are good
[17:04.260 --> 17:08.200]  like tool makes a great one I like that once you break it out you can actually put on a keychain
[17:08.200 --> 17:15.400]  it's useful and there's some that you know they're definitely one-time use they're still good they
[17:15.400 --> 17:20.080]  work in a pinch but I wanted something that was like reusable and durable and stuff like that
[17:20.080 --> 17:25.800]  and I was trying to think of you know the spy type stuff so that's when I came up with like lock pick
[17:25.800 --> 17:33.400]  And I did the same processes before I even followed Lock Noob, but it was like, I'm going to draw this out, you know.
[17:33.460 --> 17:37.420]  This is definitely a hybrid tool. It stiffens my collar and it picks locks.
[17:37.420 --> 17:43.300]  And then I started taking actual collar stays and cutting them up and trying to make useful picks out of them.
[17:43.540 --> 17:47.420]  At that point, I started, I reached out to my brother-in-law, who is a machinist.
[17:47.420 --> 17:51.520]  We started cutting them up and trying them and we started making them.
[17:51.520 --> 17:58.900]  And you can see these are like Mark 1 and Mark 2 prototypes where I had really sharp lines and things like that.
[17:58.900 --> 18:02.180]  And it wasn't really smooth. And, you know, that S-rake looks really dorky.
[18:02.180 --> 18:05.540]  And I started tweaking the S-rake and then the diamond pick just looks ridiculous.
[18:05.540 --> 18:11.260]  And so I worked on that. So still realize this is the first time I ever did something like this.
[18:11.260 --> 18:19.360]  It's kind of like, OK, it may not be good at both things, but it's an interesting little spy gadget, what have you.
[18:20.020 --> 18:25.700]  So let's say you do that, get your prototypes working the way you want it. Now it's time for manufacturing and production.
[18:25.840 --> 18:30.780]  So I usually get my my raw materials from McMaster Car. I like their website.
[18:30.780 --> 18:36.300]  You can order metal from there. It's very specific on the type, the gauge, the dimensions.
[18:36.740 --> 18:40.860]  You pay more for it, but it's actually been pretty good for me.
[18:40.940 --> 18:47.900]  As far as production, you can either design these all yourself if you have that kind of time or what I like to do, I actually pay someone.
[18:47.900 --> 18:53.080]  I have a metal shop that does precision laser. I can give them my CAD drawings. I can give them the metal.
[18:53.260 --> 18:58.780]  And then they just charge me for thickness and laser runtime.
[18:58.900 --> 19:03.620]  So it's fairly affordable. And then as far as shipping, I've done it both ways.
[19:04.560 --> 19:07.540]  You know, you could have like a Google Forms or a Google Sites type thing.
[19:07.540 --> 19:13.120]  And once you fill it out, it sends you to a PayPal button. PayPal handles all the shipping and postage and stuff like that.
[19:13.120 --> 19:14.700]  It works pretty well.
[19:16.560 --> 19:23.140]  So when I did my Lockpick Caller stays, I did do a crowdfunding through Kickstarter, and it was definitely a learning experience.
[19:23.140 --> 19:26.820]  There's some pros and cons, but, you know, this is all my opinion on it.
[19:27.060 --> 19:30.620]  You know, what's nice is it's a great platform to get your stuff out there.
[19:30.940 --> 19:36.260]  It handles all the campaigning, the deadlines. It reaches out to the buyers securely.
[19:36.380 --> 19:39.800]  They handle all the processing and stuff. It's great.
[19:39.800 --> 19:47.920]  There are some cons to it. Basically, you know, there's taxes. No matter how you do this, you should be paying taxes, right?
[19:47.940 --> 19:57.960]  If you make more than you make, if you, from your backers, get up to $20,000 raised, they give you tax forms.
[19:57.960 --> 20:00.700]  Otherwise, they're like, you take care of it yourself.
[20:00.840 --> 20:07.680]  Also, they're completely, they can't be held liable in any way if you don't fulfill on payments or things like that.
[20:07.680 --> 20:12.440]  And then, you know, when the campaign ends and you're funded, you don't immediately get the money.
[20:12.440 --> 20:17.700]  It could be anywhere from one to four weeks, depending, because they're gathering money from the backers on your behalf.
[20:18.940 --> 20:24.800]  And then, you know, so my advice, you know, figure out your design, your manufacturing, your production first.
[20:25.180 --> 20:30.260]  Do not ever use funds for your own research and development and figuring out mistakes.
[20:30.260 --> 20:33.680]  Because I don't know how thin your margins are if you're doing a crowdfunding.
[20:33.680 --> 20:39.040]  But if they're thin and then you're using that money to figure out your mistakes, you're going to have a bad time.
[20:39.040 --> 20:46.500]  So and then always be responsive. Reach out to people, you know, have a Twitter presence, whatever, and make sure you fulfill commitments.
[20:47.500 --> 20:53.820]  So these are my lock pick collar stays I designed. These are actually the DEF CON 27 ones that I did.
[20:53.820 --> 20:59.560]  I did some like a limited edition, like run of them and did some laser etching.
[20:59.560 --> 21:06.740]  So when in doubt, you know, lasers. So current projects that I'm working on, I kind of only have one right now.
[21:06.740 --> 21:10.380]  I've had a bit more time because of COVID-19 and things like that.
[21:10.500 --> 21:19.680]  But a little bit of backstory. My wife and I moved into a new house in December and all of the internal doors had like different locks on them.
[21:19.680 --> 21:27.280]  Some of them were like the small flathead screwdrivers, some were like the pushpin and some were even like cheap Kwikset handles.
[21:27.280 --> 21:32.740]  And I was like, why are you putting this inside a house? And my kids would like lock these and close the door.
[21:32.740 --> 21:36.040]  So I got to the point where I was always carrying around a Sparrows Minijim with me.
[21:36.040 --> 21:44.660]  And then sometimes it would be that Kwikset and I was like, OK, I pull out my, you know, my RCS jackknife or whatever and I pick it open because I didn't have the key to it.
[21:44.660 --> 21:49.140]  I eventually replaced the doorknobs and we ordered, you know, the little screwdriver keys for it.
[21:50.320 --> 21:59.980]  But I kind of got thinking like it'd be nice to have like a bypass tool that was like, you know, I can jim, but I can also use it to like Kwik pick or jiggle open things.
[22:00.160 --> 22:05.060]  Also, I didn't want to carry a traveler's hook around in my pocket because that's really sharp and uncomfortable.
[22:05.600 --> 22:10.000]  So. All right. So let's take this process. This is where I'm currently at.
[22:10.140 --> 22:13.980]  I definitely wanted a bypass tool, something that I could latch slip or Lloyd with.
[22:13.980 --> 22:21.860]  I want a small form factor. I wanted something that I could take on an airplane if I needed like there wasn't anything sharp or bladed.
[22:21.860 --> 22:26.320]  It was under seven inches, reusable, durable, versatile, things like that.
[22:27.260 --> 22:30.560]  So I started looking at what was currently available. You know, we have your mini jim.
[22:30.560 --> 22:39.280]  I started thinking about common keys, you know, your CH751s and then auto jigglers, which you can use for more than just cars.
[22:39.340 --> 22:46.040]  Also, the wafer picks that we showed earlier. I started thinking about the TSA007 because that's the most common TSA key.
[22:46.300 --> 22:51.640]  And then like a shank or decoder type thing. And then we go to the design phase.
[22:51.880 --> 22:58.340]  So I'm a pen and paper kind of guy. What's nice about this is you can actually put the lock pick tools directly on the paper and trace it out.
[22:58.340 --> 23:04.820]  It's much easier than free handing it. So I started sketching out the ideas, started thinking about the different kind of tools that I wanted.
[23:05.260 --> 23:10.200]  And then at that point, I switched over to CAD. Now I've done both LibreCAD, which is an open source.
[23:10.440 --> 23:15.440]  You can tell it's open source. Then I've also used Autodesk Fusion 360. It's great.
[23:15.440 --> 23:22.480]  It seems like it's a lot more developed. It is a paid service, but you can get it through like a student one.
[23:22.480 --> 23:27.120]  Or they do have a startup license if you make less than a hundred thousand type thing.
[23:29.040 --> 23:37.040]  So I started designing it and it was really intuitive. I mean, I watched a couple of YouTube videos and some Pluralsight courses on how to use it.
[23:37.040 --> 23:46.820]  It really got me going pretty quick. And so I designed a, you know, I took a mini gem on the one side and then I wanted like a double sided wafer pick.
[23:46.820 --> 23:52.480]  And then I built in a little finger well, because I think it's important that tools are comfortable in the hand, you know, work on ergonomics.
[23:52.900 --> 24:01.600]  And then at that point, you can extrude it out to the width and everything that you want and then start working with the designs and stuff like that.
[24:01.620 --> 24:07.500]  So that's what I did. And then I designed three more. And these are my Mark 1 prototypes.
[24:07.680 --> 24:13.380]  And I put a hole in it because I was thinking, you know, maybe we want a lanyard hole or put this on a key chain or something like that.
[24:13.380 --> 24:19.060]  And so at the top, working our way down, we have our CH751 and we have our double sided wafer pick.
[24:19.140 --> 24:29.340]  Then the next two are auto jigglers that you could use as a double sided auto jiggler or kind of like a dull, kind of a shallower half diamond pick.
[24:29.820 --> 24:39.000]  You can't see it too well, but I did try to add serrations. My next one I need to, my next designs, I actually need to tweak this a little bit.
[24:39.000 --> 24:43.860]  Kind of standardize the size of the mini gym side and things like that.
[24:45.700 --> 24:51.580]  I will say something about serrations. If you do put serrations in, they are nice. Make sure they're dull serrations.
[24:51.580 --> 24:57.040]  And the way I found that works pretty well for that is half circles with lines connecting them. They're really nice.
[24:57.040 --> 25:03.420]  You can fill them, but they don't cut into you. Don't do the sawtooth serrations. So something you should think about.
[25:04.160 --> 25:14.520]  So at this point, I have my Mark 1 prototypes. I did a batch of about a hundred of them. Well, no, I did a batch of like 40 sets or so.
[25:14.720 --> 25:21.060]  I sent them out to a couple people. I still have quite a few, but you can see a few things that I want to make some changes on.
[25:21.060 --> 25:27.160]  There was a little, in the wafer pick, you can see a little half circle that was cut out there. That was just a mistake by the manufacturer.
[25:27.160 --> 25:32.320]  And you can see that the serrations didn't really come through. I didn't have a fine enough laser going.
[25:32.320 --> 25:44.220]  A couple ideas that I scrapped was like the TSA-007. The reason why is this is in 31 thousandths of an inch or 0.787 millimeter steel.
[25:44.260 --> 25:50.560]  And the way the TSA-007 is set up, it's more like a Z-shaped keyway. It just wasn't feasible.
[25:50.560 --> 25:56.960]  However, the CH-751 works great. It works perfect. I'm not going to change anything with that. I really like it.
[25:56.960 --> 26:03.820]  Also, I did decide to get rid of the decoder, because if I want this to be TSA-safe, I can't have a sharp spike on it.
[26:04.680 --> 26:10.320]  So next steps, I'm going to standardize the jim dimensions across all of them. I'm going to fix that weird circle.
[26:10.520 --> 26:19.000]  Change the pick profile on the wafer pick. You'll notice at the point, there's actually two peaks on the top and the bottom. It makes it just a bit too thick.
[26:19.000 --> 26:24.400]  So I'm going to change those dimensions a little bit. And then, you know, deeper, more pronounced serrations.
[26:27.200 --> 26:33.040]  All right. So kind of what I just said here. Keep improving prototypes, because I'm not happy how they are yet.
[26:33.040 --> 26:38.660]  But I do recommend you send them out to trusted friends who will give candid feedback.
[26:38.740 --> 26:47.360]  Don't send it out to people who are only positive, like, oh, this is so great. You're going to make a million dollars off of this. So clever of you.
[26:47.480 --> 26:54.700]  Send out to people who, like, know what they're talking about. Like, I can see the value of this. Here's something I would change. Here's how it feels in my hand.
[26:54.700 --> 27:02.640]  This is really valuable because then you're getting the feedback you want. If you're doing a crowdfunding type thing, you're not spending money on figuring this out.
[27:02.640 --> 27:09.500]  You know, I'm paying this up front. Whatever. Raw materials manufacturing. I've already covered that. Things I like to do.
[27:09.500 --> 27:16.040]  And then once you're happy, is this a point where you want to reach out to lock pick companies and look at some kind of a collaboration?
[27:16.600 --> 27:19.900]  Sparrows, I've reached out to them before. They seem pretty good to work with.
[27:20.520 --> 27:27.200]  You know, I don't have any negative feelings against them. I decided not to go with them, just make it on my own.
[27:27.340 --> 27:34.160]  But I know other people have had success with it and been happy with it. And I, you know, more power to them.
[27:35.120 --> 27:40.920]  Let's see. Yeah, I've already talked about how I hire a metal shop to laser cut them for me.
[27:40.920 --> 27:51.180]  I send them the CAD files and they're really good with CAD and they can, like, find out the most, the best layout to get the most out of my sheet metal and stuff and calculate costs and things like that.
[27:51.360 --> 27:56.020]  And then distribution. I mean, are you going to send this domestic? Are you going to send international?
[27:56.280 --> 28:00.200]  One thing I discovered is I had all these international buyers in my caller states.
[28:00.200 --> 28:04.200]  Like, is this going to be customs friendly? And I didn't consider it and said, you know what?
[28:04.200 --> 28:08.920]  Yep, I could probably make a lot more money, but I'm going to cover customs because I don't want to be a jerk.
[28:09.620 --> 28:14.480]  But that's kind of the point you get to, you know, it's like I want to make something good.
[28:14.480 --> 28:17.960]  I want people to be happy. Yeah, some people are going to think it's dumb.
[28:17.960 --> 28:20.920]  They don't have to buy it. Some people are going to think, hey, this is kind of cool.
[28:20.920 --> 28:28.460]  This is this is clever. I mean, it's something I might throw in my wallet or, you know, I like this kind of hybrid tool.
[28:28.460 --> 28:32.520]  It's really interesting. So that's that's kind of where I'm at.
[28:33.160 --> 28:40.080]  And that is my talk, pretty much. I'm on Discord. I go by Didymus. I'm also on Twitter.
[28:40.080 --> 28:44.580]  If you want to send me a DM, I think they'll be open for a little while, but same handle.
[28:44.580 --> 28:48.180]  And if you have any questions, I'd be happy to answer them as best I can.
[28:48.180 --> 28:55.140]  But, you know, I'm curious to see what what kind of hybrid PhysTech tools you might have out there, what ideas you might have.
[28:55.920 --> 29:00.520]  And yeah, if you have any questions, feel free to reach out and thanks for taking the time.
[29:00.520 --> 29:05.320]  So with that, I will say thanks and enjoy the rest of the con.