http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/ Engadget Comments for Hacking the Evolution 2000 bike lock with a Bic pen: Kryptonite responds http://www.engadget.com/media/feedlogo.gif http://www.engadget.com en-us Copyright 2012 Weblogs, Inc. The contents of this feed are available for non-commercial use only. Blogsmith http://www.blogsmith.com/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/
They should have hired me years ago when I applied as an artist, and I'd probably have been bored enough to pick their lock before it got out of prototype phase.

Oh well. I guess I can still safely say that there is no such thing as a bike lock that legitimately works.]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/
I just took off the lock in about 10 seconds using the same method.]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/
And the thread that started it all: http://www.bikeforums.net/showthread.php?t=66128]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/
http://www.bikebiz.co.uk/daily-news/article.php?id=4637

http://groups.google.com/groups?q=kryptonite+lock+pen&hl=en&lr=&ie=UTF-8&selm=1992Dec3.114116.25385%40ericsson.se&rnum=7

If your business was bike locks, wouldn't you have heard about this way back then?

I'm looking for more proof, but clearly bicpicking was only rediscovered this week - the issue has been out there for a long time. Unfortunately, it's not just bikes - how about laptop Kensington locks? How about people who lock their garage with a U-lock?

In the end, though, it's better to know and protect, then not know and lose.

(please erase previous comment if there is a double post. this one has one more source url. thanks for the site).]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/
WAY TO GO!!
KCT]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/
My co-worker regularly picked the cylinder lock of the drinks machine in the cafeteria with the cap to a dried out bottle of White Out. (brush thingy removed)
]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/"If a thief really really wants somethin there gonna get it"

BUT

Jesus H Crist, Kryptonite a BIC PEN ?
say it aint so..]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/
We've got a big 'ole security box here that holds a lot of *very* important documents. Which made it a bit annoying when someone lost the key...

But never fear, spurred-on by reading how easily the locks can be opened on here, I jimmied it open.

Just a shame that I work in a bank and now my colleagues are all rather suspicious of my lock-picking skills...]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/Below is the NYTimes article about same. If you go to their website (or buy the paper) you will find pictures to illustrate!


The Pen Is Mightier Than the Lock
By LYDIA POLGREEN

The cunning bicycle thieves of New York City always seem to be one step ahead of lockmakers. Design a more sophisticated lock and the thieves make a better pick. Make a sturdier chain and they get bigger bolt cutters. And if all else fails, they just dig up the parking meter or stop sign to unshackle the bike from it. But to open some of the toughest locks on the market, a thief needs only to flick his Bic pen.

Many cyclists erupted in disbelief and anger this week after videos were posted on the Internet showing how a few seconds of work could pick many of the most expensive and common U-shaped locks, including several models made by Kryptonite, the most recognized brand.

Mashing the empty barrel of a ballpoint pen into the cylindrical keyhole and turning it clockwise does the trick that has struck fear into the hearts of bicycle owners, especially those in New York, where thousands of bikes are stolen each year.

"There was murmuring on various Web sites, and so I decided to go home and pick up a pen and see it if works," said Benjamin Running, a graphic designer who lives in downtown Brooklyn. "Sure enough, within 30 seconds I had broken into my $90 lock. I was in awe. My jaw literally dropped to the floor. It was so easy."

And many Internet users had the same reaction this week when they saw the homemade video he posted on his blog of his Kryptonite NY Chain popping open.

The problem could have wider consequences. Lock experts said the fault was with a particular type of cylindrical lock that is used not just in bike locks but in vending machines, cable locks for laptop computers, alarm system panels and countless other places.

Not all such locks are vulnerable, because some are built with more sophistication. Older Kryptonite locks made before 2002 appear to be less susceptible, according to bike shops that have tried to use the technique on them.

But this type of mechanism is used on most of the bicycle locks that are used by millions of people around the country, not just those made by Kryptonite (although the company said yesterday that a new and better model was on the way).

As the news spread, bicycle shops across the nation pulled the locks off their shelves and cyclists left their bikes at home, wondering if anything could keep their wheels safe.

"You would think for $80 for a bike lock it would be secure," said Marc Weber Tobias, an investigative lawyer and security expert, whose Web site, security.org, has posted warnings about the flaws of cylindrical locks like the ones used in U-locks. "But this doesn't surprise me at all."

The trick works because the pen has the right diameter and is rigid enough to hold its general shape but pliable enough to mold into a sort of key that opens the lock. Mr. Tobias said the vulnerability of such locks was well known in security circles.

"These are cheaply manufactured locks with serious design flaws," he said. "You can't possibly think your bike is safe with one of these locks."

The uproar appears to have started on Sunday, when Chris Brennan, a cyclist in San Francisco, posted an urgent message on the bikeforums.net bulletin board after he was able to pop open his lock with a pen.

Like many people, he had been skeptical, but doubts were quickly dispelled when users like Mr. Running started posting digital video clips of the trick. By yesterday, 125,000 people had downloaded it from, his site, thirdrate.com, he said. Meanwhile, nearly 170,000 had seen Mr. Brennan's posting, starting a full-fledged panic.

"We are especially concerned because we thought these were the best," said Noah Budnick, projects director at Transportation Alternatives, an advocacy group representing bicyclists in New York City. "Our members get a discount on these locks. What is really shocking is the casualness with which someone could steal a bike with one of these locks on it."

Kryptonite, which is based in Canton, Mass., and was bought by Ingersoll-Rand in 2001, is named for the only material that can defeat Superman. The company has been making locks since the 1970's and is recognized by most bicycle shops as the leading lockmaker.

It is so confident in the security of its locks that if a bicycle is stolen by someone who broke the lock, Kryptonite will pay up to $3,500 to replace the bike, depending on the model of lock, though there are several caveats to the policy. Bike shops in New York City overwhelmingly recommend the company's locks, particularly the four locks that are designed specifically for New York riders.

In a statement sent by e-mail yesterday, the company said that it was aware of the problem and was moving quickly to get locks featuring a different mechanism to bike shops and that it was designing a program to let users of compromised locks to upgrade to new ones.

Donna M. Tocci, a spokeswoman for the company, stressed that locks made by other manufacturers shared the same vulnerabilities.

Cyclists across the city marveled at how easy it was to crack their locks. With a little practice, opening a Kryptonite with a Bic barrel takes as little time as using a key, said Arone Dyer, a mechanic at Bicycle Habitat in SoHo. She produced the white plastic barrel of a Bic pen from her pocket along with a Kryptonite brand lock and provided a demonstration. In less than five seconds, the shackle popped and slid open.

"It is that easy," Ms. Dyer said.

The NY Chain lock, the product most shops recommend for city cyclists, consists of a heavy chain and small U-shaped lock. It weighs about six pounds, so heavy that many riders wear it slung around their waists. The chain is made of squared links of hardened steel that is impossible to cut by hand, so that part of the lock is still sound.

Bike shops are recommending that customers replace the small U-lock with a sturdy padlock, like the ones that bodegas use to secure their roll-down gates. These padlocks cost less than $20 at most hardware stores.

In addition, Kryptonite has a line of locks that feature flat keys; Transportation Alternatives recommended that its members buy one of those.

The group's Mr. Budnick said that most bike thefts could be prevented if only office buildings allowed people to bring their bicycles indoors, but few do. A bill requiring buildings to allow bikes inside was introduced by City Councilman David Yassky but has been stuck in the Housing and Buildings Committee.

Will Wood, whose Spokes and Strings shop in Williamsburg caters to the commuter market, said he was warning anyone who would listen.

"I feel like a Cassandra, but for years I have said to my customers, 'This is the industry standard, and this will keep your bike safe,' " Mr. Wood said. "Now I tell everyone who comes in, 'Tell your friends before the thieves tell theirs.' ''
]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/
http://money.cnn.com/2004/09/17/news/midcaps/kryptonite/index.htm?cnn=yes]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/
Still I guess if you limit the audience of the video to windows users you won't get anyone smart enough to understand how you did it.]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/
On the one in the video the keyhole is on the side of the tube (like my roomate's) and opens readily. This type of U-lock has the locking "pin" gradually crank towards or away from the notch in the shackle as you turn the cylinder.

However, mine has the keyhole at the tip of the tube oriented so that when you put the key into it, it's right in line with the tube. This type of U-lock rotates the "pin" around and over a knob on the shackle (the "pin" rotates exactly the same direction as the key). I think that there's too much initial friction in the cylinder for the Bic tube to overcome in this case.]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/
http://shop.store.yahoo.com/rodi/autolockpro.html]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/Autolock which also has a cylindrical lock on it like the Kryptonite? It
locks the brake lever on the car so it cannot be driven.

http://shop.store.yahoo.com/rodi/autolockpro.html

]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/ http://groups.google.com/groups?q=kryptonite+lock+pen&hl=en&lr=&ie=UTF-8&selm=1992Dec3.114116.25385%40ericsson.se&rnum=7
Note it says to use the PEN CAP,
I'd hazard a guess that it's carved to fit including
the clip, pushed in firmly, and slowly eased out
whilst twisting. Perhaps it's the other way round,
gently press in whilst twisting.
Seems the same idea as picking a Yale, but attacks
all the pins at the same time, so should be faster.
Haven't got one to try, so I'm probably wrong.]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/ http://groups.google.com/groups?q=kryptonite+lock+pen&hl=en&lr=&ie=UTF-8&selm=1992Dec3.114116.25385%40ericsson.se&rnum=7
Note it says to use the PEN CAP,
I'd hazard a guess that it's carved to fit including
the clip, pushed in firmly, and slowly eased out
whilst twisting. Perhaps it's the other way round,
gently press in whilst twisting.
Seems the same idea as picking a Yale, but attacks
all the pins at the same time, so should be faster.
Haven't got one to try, so I'm probably wrong.]]>Dec 19th 2005 2:26AMhttp://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/http://www.engadget.com/2004/09/16/hacking-the-evolution-2000-bike-lock-with-a-bic-pen-kryptonite/Dec 19th 2005 2:26AM