Kryptonite Evolution 2000 U- Lock hacked by a Bic pen
By Phillip Torrone 
posted Sep 14th 2004 5:04PM
posted Sep 14th 2004 5:04PM
Much to our surprise, we were able to hack our
Kryptonite Evolution 2000 U- Lock with a ballpoint pen. This $50 lock is supposed to be one of the best for
"toughest bicycle security in moderate to high crime areas"—unless the thief happens to have a Bic pen. We
used to use these to lock up our bicycles, but we're switching to something else ASAP. (Oh, and just to be
trite, the pen is mightier than the lock.)
Click here to watch the video (WindowsMedia)
[Via Metafilter]
I emailed them the link to this yesterday. Here is their response:
We understand there are concerns regarding tubular cylinders used in some Kryptonite locks. The tubular cylinder, a standard industry-wide design, has been successfully used for more than 30 years in our products and other security applications without significant issues.
The current Kryptonite locks based on a tubular cylinder design continue to present an effective deterrent to theft. As part of our continuing commitment to produce performance and improved security, Kryptonite has been developing a disc-style cylinder for some years. In 2000, Kryptonite introduced the disc-style cylinder in its premier line of products, the New York series. In 2002, Kryptonite began development of a new disc cylinder system for both its Evolution and KryptoLok product lines, which currently use the tubular cylinder design. These products are scheduled to be introduced in the next few weeks.
We are accelerating the delivery of the new disc cylinder locks and we will communicate directly with our distributors, dealers and consumers within the coming days. The world just got tougher and so did our locks.
Lee Yuszczak
Customer Service Representative
Kryptonite
437 Turnpike St
Canton, MA 02021
Phone: (781) 828-6655 Ext 275
Fax: (781) 821-4777
Lee_Yuszczak@irco.com
I don't really understand how anyone couldn't have seen this design flaw... especially the ones who designed it.
I have a Kryptonite 2000 purchased in '99 or '00, and a Bic pen barrel is too wide to fit into the keyhole on my lock, unless a *huge* amount of force was used.
The inner diameter of the keyhole (i.e., the outer diameter of the round "plug" in the middle) is about 7mm, and I measure the inner diameter of a Bic "round stic" pen barrel at 6mm. Not much difference, but I can't force the barrel over that central plug, and I can't imagine anyone doing it without a press of some sort.
Can someone who is able to do this hack measure their keyhole (inner and outer diameters; and measure their Bic pen, too, I suppose), and post these dimensions?
I have a Kryptonite 2000 purchased in '99 or '00, and a Bic pen barrel is too wide to fit into the keyhole on my lock, unless a *huge* amount of force was used.
The inner diameter of the keyhole (i.e., the outer diameter of the round "plug" in the middle) is about 7mm, and I measure the inner diameter of a Bic "round stic" pen barrel at 6mm. Not much difference, but I can't force the barrel over that central plug, and I can't imagine anyone doing it without a press of some sort.
Can someone who is able to do this hack measure their keyhole (inner and outer diameters; and measure their Bic pen, too, I suppose), and post these dimensions?
Dear Kryptonite,
Great, your new disc cylinder system will be out shortly. Meanwhile, thousands, probably millions of your customers are holding "locks" for their bicycles that are effectively worthless.
First of all, you are touting your new products in the face of the failure of your current product. Do you expect your customers to accept that your first product was a failure and to immediately turn around and buy a new one from you? I for one, will not. You should, however be catering to your customers and be unconditionally supplying them with a functionally improved replacement product. Free from all charges, shipping, handling or otherwise.
Secondly, do you think that your customers and potential customers still have faith in your product? It is likely that your claims of a new and improved disc cylinder system will be of no consequence to those who have trusted your product until now. You will have to work hard to restore the faith in your products that your customers once held. This can only be done by having respect for your customers, admitting that there is a fault with your product, and committing yourself to rectifying the issue and satisfying your customers as soon as possible. I am sure that other customers will reinforce my thoughts here. I am not alone.
-Sol
Kryptonite Customer
Falls Church, Virginia
It's only fair for the lock manufacturer to replace old locks with new locks at cost. That would be the Yankee way.
as has been mentioned before, the cylinder is significantly largter on older kryptolocks. Not only that, but even with all the pins shoved down, the cylinder wouldn't budge.
Here is the deal,
Yes this works not only on Kryptonite but all companies who use the current Tube key tech. Your insurance policy should still apply because it does include being picked if this is done to your lock some plastic will remain in the barrel and the middle pin will 9/10 will be offset rendering your lock useless because even the key will not function in there and that should be evidence enough. As for the anti Kryptonite comments they are funny but that’s all they are. Kryptonite has already upgraded their lock systems to use flat keys. Kryptonite is still staying ahead of the game, they designed a lock that every other company in the world copied and it remained safe for approximately 30years, find me another lock company that has done that and I'll switch brands but for the time being I am going to by a new Kryptonite with the flat key and those who disagree can go pound sand.
Peace
Here is the deal,
Yes this works not only on Kryptonite but all companies who use the current Tube key tech. Your insurance policy should still apply because it does include being picked if this is done to your lock some plastic will remain in the barrel and the middle pin will 9/10 will be offset rendering your lock useless because even the key will not function in there and that should be evidence enough. As for the anti Kryptonite comments they are funny but that’s all they are. Kryptonite has already upgraded their lock systems to use flat keys. Kryptonite is still staying ahead of the game, they designed a lock that every other company in the world copied and it remained safe for approximately 30years, find me another lock company that has done that and I'll switch brands but for the time being I am going to by a new Kryptonite with the flat key and those who disagree can go pound sand.
Peace
Boston Globe and Kansas City Star picked up the story. NY Times will be running article in Friday's edition.
I have been using Kryptonite locks for almost 10 years and have never had any problems with their product and have never had a bike stolen due to their locks. this includes 4 1/2 years as a bike messenger in San Francisco and 10 years of daily commuting and locking my bikes outside in urban areas. THERE IS NO TECHNOLOGY DESIGNED TO DETER CRIME THAT WILL NOT EVENTUALLY BE HACKED. That's not Kryptonite's fault. They can't foresee every goofy method of breaking their locks.
ps
I tried the BIC pen on my old Krypto mini (maybe a 96 or something?) and I couldn't open it. The pen was too small. It probably could be done, but it was not easy.
Several of us were messing around picking each others locks of various ages and makes (all Kryptonite though) and there was no problem opening most of them. I've done it with three different locks of both the large and small key diameters. All you have to do is stretch out the plastic first. There was only one lock that we couldn't open. Part of its pin pattern was long-short-long-short so it was difficult to hit. Most locks are vulnerable though.
In the Internet age we can see ppl. posting this Kryptonite 2000 lock easily being compromised. Is it possible that this flaw existed before the Internet?
HOLY JESUS!! hahahaha!!! the mighty kryptonite!!! f-ed up by the one and only... ...BIC PEN!!! lmao! nice man.
I would watch out for snipers... kryptonite might want revenge.
P.S. WHAT THE FRICK DID YOU FEED THOSE PLANTS??
i have an older evo 2000 and was able to use a bic erasable pen because it has a larger diameter barrel...but it took me a considerably longer time to pick it than my newer kryptonite did.
One thing I'd like to note is that ANY lock can be defeated with enough time and determination (or dumb luck). Locks are just to keep honest people honest. I'm just gonna lock my bike to a pit bull.
I have an Evo 2000 circa 2000-2001... I fitted the bic pen inside and push in twisted/turned/wiggled and I got nothing... I tried other pens etc but I guess I just wasted an hour I'll never get back...
I have a relatively new Kryptonite Krypto Lok and (after shaving the interior of the pen barrel w/ a paring knife for a couple seconds to thin it out) I was able to shove the bic pen into the lock and open it.
Pretty disappointing. Does anyone know if this works in other subular cylinder locks? Like those big honkers they use to chain motorcycles??
I have a relatively new Kryptonite Krypto Lok and (after shaving the interior of the pen barrel w/ a paring knife for a couple seconds to thin it out) I was able to shove the bic pen into the lock and open it.
Pretty disappointing. Does anyone know if this works in other subular cylinder locks? Like those big honkers they use to chain motorcycles??
I have a relatively new Kryptonite Krypto Lok and (after shaving the interior of the pen barrel w/ a paring knife for a couple seconds to thin it out) I was able to shove the bic pen into the lock and open it.
Pretty disappointing. Does anyone know if this works in other subular cylinder locks? Like those big honkers they use to chain motorcycles??
I have a Krypto 2000 lock that has to be old I bought it in 2001 and the box was faded as hell. It was from the shop I work at and we just could not sell a $55 lock.
Anyway, I could not get it to work, but I am glad that I found out as I was going to buy a lock for my roommate tomorrow, that will have to wait.
Still I would imagine that with enough force you could get the pen in my lock, It sure would be nice if krypto had some sort of replacement plan for these.
And now, how can I honestly sell a customer these defective locks?
I didn't get it to work quite like the guy in the video (however that is how a thief would probably be) but it didn't take me longer than two minutes to get it done. I have a lock bought in the last three years... FYI, for people feeling smug because they can't figure it out... I think almost all models (maybe 3 or 4 models are not) are affected by this. Scary, disappointing, and yeah... the whole thing sucks. I have 3 of these guys. If they don't handle this right their brand will cease to exist. Then what?
Any lock that has some kind of space or opening to defeat the way the shacle is held in can most likely be defeated.Locksmiths can purchase a set of curved shims for various padlocks to slip the lock open.
I hope you all don't think your gonna stick your Bic pen in the key hole and open the lock. If your gonna try ,you better buy a lot of pens and get a large trash can too through them away because it ain't gonna happen.
That's video is hogwash.
HE EITHER:
-didn't shut the lock completely on purpose for this video
-milled the end of the pen to in essence 'become a key' (not hard if you
HAVE the key)
-had a lock where the mechanism had suffered complete failure, either due to
a manufacturing defect (shame on Kryptonite).
OTHER FLAWS:
-The real key has a nub on the end which rotates the tumbler, and his pen
does not. What can you 'grip' with just a smooth cylinder? Lockpicking
101: You need a tension wrench to physically twist/operate the lock
cylinder after you defeat all of the lock pins (Although I suppose it's
possible that his cylindrical pen fits so tightly around the lock cylinder
that it grips it by friction.).
WORST, MOST GLARING FLAW OF ALL:
Last time I opened my kryptonite, I didn't "put in the key and wiggle it
around a little bit", I had to put it in, and rotate it 180 degrees in order
to (depending on the model) move the rotary cam out of the way, or twist the
helix gear to retract the ball bearing WATCH THE MARK ON THE PEN, AND
WATCH HIS THUMB. HE DOESN'T EVEN TWIST!! Is the lock SO BROKEN that it no
longer needs
Bullshit notwithstanding, I'm sure engadget.com is going to become
temporarily world-famous as this video circulates, which is surely what they
were after. Boring truth travels more slowly that glamorous fiction.
By the way, I'm not defending those locks. They're not as hard to pick as
people think, you just need a special tool which is hard to find and
expensive (thank god). Any moron can learn to do it in a weekend
The video aint hogwash. The video is the real deal. I have an old kryptonite motorcycle disc lock. I walked out to the garage. Yanked apart my bic, and about 4 minutes later it was open. At first I didn't think it would happen. I really had to jam the bic in there and it was hard on the hands. 3 minutes later...click. And no, you don't need the "nub" to rotate the cylinders. Nice try. But it really was that easy.
Oh and with a little practice, I'm down to under a minute.
Evil
Remember when someone found the best way to defeat CD copy protection schemes was with a Sharpie marker? :D
Karl, if you think it's all hogwash, then just let us know where you lock up your bike :)
Back in the day, maybe 1985 or so, someone showed me how to use a hammer and a can of freon to defeat these U locks. I thought that was amazing, but when I purchased a lock, it was a Kryptonite because I thought, "My bike is not a really expensive one, and who is gonna carry a can of freon around with them?." Since then, I have had two bikes stolen. The locks were left on the post/bike rack, but (obviously) the bikes were gone. At the time I realized someone had picked my lock. This pick has been arounbd for well over a decade, why did it take this long to surface?? Why didn't bike shops know about it (or did they???)?
- with a 'v', not "walla" (in the video)... It's French, roughly meaning "look, there". I know some people are still pissed off at France for being right about Iraq after all, but making up new words to avoid using French ones it taking it a bit far... ;-).
Don't take the bike, take the lock. Make em get a real lock!
My friend and I just tried to reproduce what we saw on the video. We took a Kryptonite Evolution 2000 U- Lock and a Bic pen and tried to open the lock. It's didn't open! The pen was able to push all the tumblers down and we were able to get sufficient torque on the barrel, but the barrel did not rotate and thus the lock was not compromised.
It is possible that this guy had an unfortunate key that required all 7 tumblers to be pushed down, but I think it is much more likely that this was a hoax. By grinding off the tab of the key he could have rotated the barrel a little bit--enough to hold the tumblers open and then remove the key. The video could be shot without showing the key. Note that he never showed us the barrel in the locked position. Or maybe his lock was defective. In any case, our Kryptonite Evolution could not be broken into without pushing all 7 tumblers to their correct positions.
i shot the video, once i heard my lock couple be opened wit a pen, i tried it, first time i got it open, i practiced a few times then shot the video in one take. there are tons of other videos of other people doing the same thing. my lock is an evolution 2000 bought about 1 month ago.
I wouldn't direct too much anger at Krptonite for this, they sell a product with a lock. The truth is the vast majority of products with a lock consumers buy can be just as easily defeated if you know how. Hint: If you bought your lock hardware or safe from WalMart or Home Depot (or any standard retail outlet) it most likely can be defeated as easily as that bike lock, and I'm sure what you keep inside your house or safe is much more valuable than a bike. It won't be with a bic pen, but with the proper knowledge it will be in only a few minutes in most cases.
The hardest part about picking my brand new Kryptonite New York noose lock was getting the black cap off the end of the Bic pen. I finally just used a sharp knife to cut the pen barrel further down and pushed out the ink holder. It was easy to shove the plastic pen end down into the circle on the lock and twist; the plastic grips well enough that it easily turns the mechanism without needing a 'nub' to rotate the tumbler. It took much longer to turn it back to line up so the key will work...but what thief would give a hoot about realigning the lock?!
I'll be waiting to see what Kryptonite does to rectify the problem for all the lock owners. Not surprisingly, their 1-800# is jammed.
I can't beleive the lame sales reply from Kryptonite. Like yeah we all have an extra $50 to go buy new locks. I can almost hear the excitment of the sales team as they forcast a renewed market. Not from me for sure!
Here is a guy opening a barrel computer lock with a peice of rolled up cardboard. In case you don't have a bic pen ;-)
http://www.toool.nl/kensington623.wmv
I can't beleive the lame sales reply from Kryptonite. Like yeah we all have an extra $50 to go buy new locks. I can almost hear the excitment of the sales team as they forcast a renewed market. Not from me for sure!
Here is a guy opening a barrel computer lock with a peice of rolled up cardboard. In case you don't have a bic pen ;-)
http://www.toool.nl/kensington623.wmv
I'm sitting here looking at a kryptonite Evolution 2000, for which I have no keys (found it on the street loose attached to nothing) UMMM hey folks it's now open, with the ubiqitous BIC pen. I too thought it was internet spoof when I tried it on my two locks at home and found the size to be too small. This opened with a bit of force on the pen barrel causing it to expand and fit. Wonder how my wife's gonna feel about a bike in the bedroom? I'm four bikes down now. The last was off my car, 3/4" woven cable clipped, Merlin gone, they ignored the krypto. lock. This was in broad daylight. Protect your "loved" ones, swallow the fact your out a few $$, and not $$$$$. Update your technology.
I'm sitting here looking at a kryptonite Evolution 2000, for which I have no keys (found it on the street loose attached to nothing) UMMM hey folks it's now open, with the ubiqitous BIC pen. I too thought it was internet spoof when I tried it on my two locks at home and found the size to be too small. This opened with a bit of force on the pen barrel causing it to expand and fit. Wonder how my wife's gonna feel about a bike in the bedroom? I'm four bikes down now. The last was off my car, 3/4" woven cable clipped, Merlin gone, they ignored the krypto. lock. This was in broad daylight. Protect your "loved" ones, swallow the fact your out a few $$, and not $$$$$. Update your technology.
a total of 94 seconds. my pen was too small but i just jammed it in, turned 90 degrees and it was all over.
I saw the first video of this on Tues, grabbed my extra long Krypto lock and opened it in under a minute, first try.
I then went home, busted out my digital camera in video mode and recorded this:
http://gallery.iamjp.com/ids/albums/Justin/video/MOV00104.MPG
Bad quality, but very real. The pen *is* the key, works just like it in every respect. Just because you cannot do this trick doesn't mean it's fake, get a Bic pen and try it. I'm talking the old school Bic, white shaft with blue (or black, red) end tip and cap to match. It's awesome!
I saw the first video of this on Tues, grabbed my extra long Krypto lock and opened it in under a minute, first try.
I then went home, busted out my digital camera in video mode and recorded this:
http://gallery.iamjp.com/ids/albums/Justin/video/MOV00104.MPG
Bad quality, but very real. The pen *is* the key, works just like it in every respect. Just because you cannot do this trick doesn't mean it's fake, get a Bic pen and try it. I'm talking the old school Bic, white shaft with blue (or black, red) end tip and cap to match. It's awesome!
Do I have to first dip my pen in the brew that is in the flower pot to lube it up?
It works on a number of locks, not just bicycle locks and not just those from Kryptonite:
http://money.cnn.com/2004/09/17/news/midcaps/kryptonite/index.htm?cnn=yes
As a former messenger in SF, my best piece of advice is to take your front wheel with you whenever your bike will be locked for any period of time. Carrying a bike with no front tire is a bit suspicious. I had a Kryptonite NY that no one ever bothered to mess with & I did ride a decent road bike & mtn bike. I'll never trust any U lock after seeing that video. Get renter's insurance, homeowners or whatever it takes to protect your investment.
I have this lock. Managed to do the trick in about 2 minutes and now I can do it in under 15 seconds. !@#$@ It doesn't have to be a BIC pen... don't take it so literally. I used a GT ROUNDEDGE FINE 99206 pen from Grand & Toy and it fits perfect. (sigh)
I paid $80 for my Kryptonite, granted it's not the U-Lock, it does have the same round key hole. I've got over $7000 into my downhill bike which i frequently ride in urban areas. A while back, some one tried to cut the lock with bolt cutters while i was at the mall, i came out to find my tires slashed in anger that they couldn't cut through the lock for the bike. Luckily this news wasn't out then. I will be talking to Kryptonite about a replacement.
oh, the plant needs a little lovin bro.
Those of you with success... describe how. Does the pen fit easily into your lock, or must it be jammed? Do you wiggle? Twist and spin? Press hard? What exact model did it work on, or fail on?
I'm sure they knew about this trick, but why open a can of worms and spend more money on recalls and manufacture of upgrades. That would cost them money. Unbelievable and embarrasing to boot.
I'm sure they knew about this trick, but why open a can of worms and spend more money on recalls and manufacture of upgrades. That would cost them money. Unbelievable and embarrasing to boot.
Someone posted about the French and Iraq in the "voila" post. Here's more, BIC is owned by a French company...
Also, I didn't have a Kryptonite lock so I tried it on the Keningston lock for my laptop. Only took about 30 seconds to detach it. Guess I'll be looking for something new.
The diameter is a little bigger on this lock, I opened up the bic with the end of a screwdriver for a few seconds and it works like a charm every time.
It boils down to this, dont ride your $$$$ bike around town. Buy a good BUT cheap old road bike.
Paint it ugly colors and still lock it up well. There will be another bike better than yours worth stealing near by, im sure.