Kryptonite Evolution 2000 U- Lock hacked by a Bic pen
By Phillip Torrone 
posted September 14th 2004 5:04PM
posted September 14th 2004 5:04PM
Much to our surprise, we were able to hack our
Kryptonite Evolution 2000 U- Lock with a ballpoint pen. This $50 lock is supposed to be one of the best for
"toughest bicycle security in moderate to high crime areas"—unless the thief happens to have a Bic pen. We
used to use these to lock up our bicycles, but we're switching to something else ASAP. (Oh, and just to be
trite, the pen is mightier than the lock.)
Click here to watch the video (WindowsMedia)
[Via Metafilter]
so what IS a good lock then? any recommendations?
i used to just laugh and say " its a huffy and no one is going to steal a huffy!"
well the huffy has now been retired after i put it thru the hell of me riding it EVERYWHERE and isnt worth the money it would cost to fix it, so i went and bought a nice mtn bike. i was going to get a kryptonite lock, but i had heard about the pen thing and after reading all of this im concerned. my cable and lock and key is too easy to chop with boltcutters....so im stumped.
The video is not clear. I know how to hack. But I don't see the key-hole. Is it really for circular key? Well... stupid me... No other types of exposed keyholes exist.
Back in 2001 I have predicted the risk of the circular keyhole being hacked too easily. This is a flaw by design. Because all security pins are exposed simultaneously for arbitrary manipulation. Any random motion on them can open the lock. That's why I didn't buy these locks, and didn't recommend anyone else. Now my theory is proven by experiment. Not exactly "now"... I am sure thieves have done this long before this one experiment.
Anyway, I am proud of my prediction.
The answer to the question what lock is good is simple: any key of a crown type is far better than a circular key.
However wise I was, the knowledge of the risk of the circular key didn't prevent the loss of my bicycle back in 2002. And perhaps it even facilitated the loss. There were no U-locks in Lithuania with crown keys at that time. So I was stuck with a cable lock. Having a U-lock even with a circular key might save my bike from a stupid thief. Just might.
The "Bic-Pen" method works allright on u-locks, but an even easier way to bust almost any normal sized or long sized u-lock is to use a Volvo Car Jack for flats. You place the car jack in the on the middle of the lock where the staight U bar is and wind the volvo jack so it presses and bends the u lock and it falls right out of the holster. Tried and true, seen it done many times. Enjoy!
While it might appear that explaining how to pick this lock is education for thieves, I prefer to think that it is education for consumers about something that many thieves already know. Now that I know this I am equal to the thieves, whereas I was previously at a disadvantage.
well i lost my one and only krypto lock key over thanksgiving. I've had it over 10 years and sort of knew this day would come. so I tried the bic pen-- it didn't fit my old model lock, though let's face it: there are plenty of various size pens out there! Anyway, last night I readied my volvo car jack for the purpose of busting my lock, and the last entry by wouldie has sealed it. I just hope no one questions me for 'stealing' my unregistered bike from my sweetheart's back stoop since she's gone for the day. I can't wait to bust this lock.
What about the combination U style lock?
Are they secure?
Welcome comments
I guess they run out of pens at there design meeting then :)
... !
Now that's a neat little trick! Does anyone know if it only works on this model or if the Bic Hack actually works on all models? I always knew there was something fishy about the Key Hole.
Now that's a neat little trick! Does anyone know if it only works on this model or if the Bic Hack actually works on all models? I always knew there was something fishy about the Key Hole.
With their Anti-Theft Protection program, I can get me a new bike with that. Isn't it great?
The lock did not fail, or was not broken so it is not covered by the Protection Program. There is no evidence that the lock was broken into. You are screwed if it happens.
What's that foul brew those plants rest in the background of the video?
Now where did I put that pen....
ha now does this mean you are going to get sued for the dmca for breaking protections?
hahahahahahahahahaahahahaha
ha now does this mean you are going to get sued for the dmca for breaking protections?
hahahahahahahahahaahahahaha
Now that's an eye-opener. I might have to get a new lock!
Please change the water for those poor flowers.
I tried it with a BIC pen on my regular Kryptonite Krpyto-Lok model. First, the barrel of the pen doesn't fit into the keyhole unless you really push hard and stretch it out. Second, no matter how I twisted, I couldn't get the lock open. I hope this is an issue exclusive to the Evolution 2000 series.
I did it on my evolution 2000. It swear it worked in 10 seconds at most. it took me longer to get the black plastic piece out of the end of the pen.
The only prob is how do I get the lock back into the ready to lock position?, so that I can try it again.
i've got one of the first evolution 2000 locks (circa 1992-93); i'm sitting right here with a bic pen and the lock in hand, and there is NO WAY the pen barrel will go in the lock. the barrel of the pen is just too narrow/wall of the barrel is just too thick.
maybe they've changed the lock barrel in later models, but those of us with old skool evolution 2000's can rest assured that bic pen-packing thieves won't get our bikes.
mine is circa 1996, it worked
does it have to be a marriott hotel pen? hahhah, jk. really cool, that company is going to have problems now.
*lol* The google ad for this page is a link for Kryptonite locks. How ironic is that?! :)
What really needs to be answered here is whether or not this works for other Kryptonite locks, and if so, which ones? Those of us with or about to buy them would really like to know.
I just came home with a spanking new Evo2000 Mini today and saw this story on 3 sites. Dang.
If you read the bikeforums.net thread, there are folks claiming success with various models. I think that includes the KryptoLok (less pricey than Evolution 2000)
The bike forum mentioned that you can just twist the Bic pen the opposite way to relock the lock. This may explain how some bikes just "disappear", with the lock still locked to the rack.
One guy said it was about as easy as using his keys to lock/unlock...
Another way is to file the nub on one of your keys down enough so you can insert it into the lock and return the tumblers back to their original, locked position.
Is that beer in your flower vase? Seattle is taking this brewpub thing a little too seriously I guess.
http://www.bikeforums.net/showthread.php?t=66128
Hell, there's more than one way to skin a cat. Those long-shackle U-locks are easy to break if there's enough open shackle -- put a car jack into the space of the U so that the plates of the jack are touching the flat parts of it. Then crank the jack open, and eventually the shackle will break loose.
wow, thats pretty funny. I wonder if that works with other U locks?
This technique has apparently been around for a decade or so (see Google groups), but now the cat's definitely out of the bag. If not with a Bic, then someone can make cheap skeleton key with a custom plastic cyllinder, effectively making circular keyed locks obsolete.
That said, it's now a race between the newly-tooled thieves and bike owners. I'm of the mind that as many people should know about this as possible, since the pool of thieves is smaller than the pool of owners. If it just remains in the blogosphere, then the thieves have a great window of opportunity.
On the way to work today, I saw a few dozen bikes locked up with compromized equipment. How long until they're penjacked?
To pick a master lock (maybe not all) with an aluminum can. You need a knife or sissors to cut the can. Make a "key" similar to an E but without the top and bottom bar. "|-" is kind of what it would look like. Then you hug the metal loop and sneak the "-" part into the body, turn around and if you are lucky you can pull the "U" portion of the lock and open it up. Without gloves you might cut your fingers on the thin metal.
Thank You Kryptonite Locks and Small Little Hick Towns, With all Types of People Without Internet Obsession... hahahah ---omg when I see a Police I have to Hide My Bic-Pen Now........
I just popped my kryptonite evolution 2000 *AND* the kryptonite ev disc lock that came with the nyc lock/chain. There goes $150 down the drain.
Tried this on my old Schwinn U lock. Worked like a charm. This is really bad. Guess its back to the Padlock and Cable for me!!
Tried this on my old Schwinn U lock. Worked like a charm. This is really bad. Guess its back to the Padlock and Cable for me!!
I've heard of the cardboard tube from toilet paper rolls used to do the same thing as the bic pen for any diameter lock...