http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/ Engadget Comments for The Lockdown: Locked, but not secure (Part I) http://www.engadget.com/media/feedlogo.gif http://www.engadget.com en-us Copyright 2012 Weblogs, Inc. The contents of this feed are available for non-commercial use only. Blogsmith http://www.blogsmith.com/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
I wanted to know if any of you can suggest me a good locksmith in New York. So far I've only found them:

http://www.locksmithnewyorkcity.com]]>Jan 24th 2008 8:33AMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Jan 29th 2008 11:02PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Feb 27th 2008 10:23AMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Mar 12th 2008 9:27AMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.a1qualitysafe.com/site/408162/page/91221
Hopefully the crook will not find it hidden in the floor and if he does safe locks are always much harder to pick than door locks
]]>Jul 7th 2008 2:44PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.a1qualitysafe.com/site/408162/page/91221
Hopefully the crook will not find it hidden in the floor and if he does safe locks are always much harder to pick than door locks
]]>Jul 7th 2008 3:03PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.unbumpable.com.

Thanks!]]>Dec 1st 2008 12:06AMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/May 21st 2009 6:06PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.bumpmylock.com just got them today and going to try it out.]]>Feb 27th 2009 10:51PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Mar 20th 2009 11:02PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
Stay tuned for our exciting conclusion....



Thanks engadget! Now I don't need to worry about sleeping.]]>Aug 24th 2006 3:06PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.crypto.com/papers/mk.pdf#search=%22rights%20amplification%20master%20key%22]]>Aug 24th 2006 3:12PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Second time this is being posted here and I wonder if it makes thieves out of unsuspecting gadget geeks?]]>Aug 24th 2006 3:12PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 3:15PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
Case in point - what's quicker to break into, start up, and drive away in? A car with The Club? Or the car without? The Club may add an extra 30 seconds; 30 seconds you can use to get the engine turned over, put it into grear, and drive off.

What's quicker? Kicking the door down (nearest to the knob), or picking the locks one way or the other?

And remember this; there's always the window folks. ]]>Aug 24th 2006 3:19PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 3:40PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
The secrets only keep the public in the blind and make them think that the 'pick resistant' Defiant brand lock from Home Depot is really protecting their house. Right now bumping is a fad, and I'm a good lockpicker but sometimes it takes me 10 minutes to bump a Kwikset. It's not like you put a bump key into a lock and boom it's open, it takes practice and skill. Same with lock picks, you don't just stick a pick into a lock and it opens in 10 seconds.. that takes skill and commitment, and a crook would sooner use a brick to get into a window than learn bumping or picking. ]]>Sep 19th 2006 10:00AMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2007/07/19/the-lockdown-the-medeco-m3-meets-the-perilous-paper-clip/

and if you want to buy a set of bumps,
www.bumpkey.us is where I bought mine, and they work GREAT. ]]>Aug 23rd 2007 10:15PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/No, it does not apply to cars. However, cars are already insanely insecure. Using a slim jim (you can fashion out of a coat hanger if needed), you can slip the tool between the rubber and the window and open the majority of cars (execpt for some luxury cars). Also, car keys are not really as unique as you would like to believe (many cars use the same key). Err, bascially, cars are designed to be insecure on purpose.

In reply to Mack Swift:
The point is, if you break into a house by lock picking, people wouldn't know you broke in (except with detailed forensic analysis). It's pretty hard to tell that a lock has been bumped without at least breaking open the lock. Also, keep in mind that the lockpicking community does not aim to break into people's houses, but rather learn about locks and developing lockpicking skills. Thieves and criminals are already able to bypass locks with lock drills that do the same thing.

So the bottom line: Bad guys don't pick locks. People pick locks for fun.]]>Aug 24th 2006 3:46PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 3:46PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 3:49PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Mar 11th 2008 3:15PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/The key is the bump key, the tool is for bumping. The key isn't specifically for that lock.]]>Aug 24th 2006 3:58PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
* Cheap crappy locks can't be bumped as easily. The reason is that they have larger tolerance margins for the lock parts. The pins are sort of loose. Thus, they are less likely to bump the right way

* Abloy locks can't be bumped. They use a system of disks instead of pins. However, there are tools to pick cheaper/less secure abloy locks using more conventional methods (for fun).

* Those circular locks you might see on bicycle locks or computer/laptop locks are probably harder to bump, but definately not worth it. You can pick those in a minute easily which a thin piece of cardboard or what have you.

Also, now that we are on the subject of locks and stuffs, I should also like to talk about those pesky master locks. You've seen them everywhere. They are in Walmart, gyms, and every US high school. You know, the upside down U shaped latch and the dial where you have to enter 3 numbers...

Well, if you search on google, chances are you'll find the technique whereby you can limit the possible combinations to 100. What isn't so well known is that they can be opened in about 3 seconds with a padlock shim. Basically, it's a thin piece of metal that you insert between the latch and the hole where the latch goes in. If you rotate it a bit, the lock just pops open. This was kind of popularized by Hack a day (hi Elliot, it's David Li again) and the lock enthusiast, Barry Wels in Hope 5 (or was it 6?).]]>Aug 24th 2006 3:58PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
http://www.medeco.com/about/whats_new/pr/bump.html]]>Aug 24th 2006 4:03PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Did you read the fine article? Anyways, here's a quick summary:
Bump keys are specialized keys that can open any lock that it fits in if you "bump" it in the the lock. So the "key" in the lock is not the key that open's the lock, but it's the bump key that can open the locks like that.

A bump key can be easily made for almost any lock at it doesn't require any specialized equipment (a nail filer is fine) and no very speciallized knowledge. It is not like a "master key" backdoor to some locks.]]>Aug 24th 2006 4:03PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 4:03PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 4:06PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Medeco's pin based locks are as vulnrable as any. The thing is, Medeco is a subsidary (or something like that) of Abloy with does make bump proof locks. See my post above about Abloy.]]>Aug 24th 2006 4:13PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
Paul, I'm guessing you have Medeco locks? I was shocked to learn my Mul-T-Locks were compromised this way. However, I have seen video of this performed on a variety of locks but not a Medeco3. (the one with the sidebar) That doesn't mean it's impervious, but to compromise it you might need to have several bump keys made with the sidebar notch in different places. Hopefully, the Mul-T-Lock CLIQ cylinders will come down in price ($700 per, ouch) and I can recylinder my locks with them, which would be resistant to bumping.]]>Aug 24th 2006 4:17PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 4:22PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
The best home security measure is to make your house tougher to break into than your neighbors. Otherwise if you have something they want, they will find a way to get it.

It's like keeping 14 year old boys out of porno. When there's a will, there's always a way. If you think differently you're kidding yourself.]]>Aug 24th 2006 4:24PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Yes, RFID keys is one solution that can potentially prevent bumping or picking for that matter. Beware however, becuase the technology is fairly new are prone to new attacks. Specifically, there was one company whose's RFID lock compnent could be disabled by simply attaching a strong magenet to the lock. After attaching the magnet, the lock acted like a normal lock :D.

Also, to add to the list of bump proof locks, there are locks that move pins up and down using magenets instead of through physical contact. They can't be bumped for obvious reasons. However, they potentially suffer from a problem that the pin states are atomic. They are either "up" or "down" with no in between state. Thus, it's possible to build brute forcing equipement that tries every single key combination quickly. Plus, magnetic locks are extremely rare/expensive.]]>Aug 24th 2006 4:27PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Yes, you are correct sir. It's believed that bumping could be detected if it has been done many times on a lock. There's nothing that put's strain on the pins like the way bumping does. However, it probably needs some specialized forensics because AFAIK, a quick visual inspection can't detect anything.

Also, the lock warranty/insurace won't cover stolen property if the lock is picked/bumped instead of broken.]]>Aug 24th 2006 4:31PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 4:54PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 5:03PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
Here is Mul-T-Lock's response, btw:

"In recent months some printed information has been circulated on the subject of bump keys. Despite seeing themselves as breaking new news, the bump key technique, also known as the “999 Method”, has been familiar to locksmiths around the world for many years.

The two most recent publications are really the same one. Both were written following a meeting of a group of hackers that took place in Amsterdam, Holland. Severely weakening their claims and perhaps most noteworthy in these documents is the “Important disclaimer” it contains:

“Locks are expensive and we are not a commercial testing lab, so we have had only a very limited number of testing locks available to us. The presence of a lock in the list just means bumping worked at least once on a cylinder we had access to.”

The article published in the January edition of “Keynotes” is written almost two years after most of the testing institutes in Europe have made it mandatory for lock manufacturers to test against this “technique” as well. Mul-T-Lock®, a company that puts standards above all, was tested and passed all the required tests.

Mul-T-Lock’s Standards of High Security

Mul-T-Lock’s telescopic pin cylinders have been equipped for the last 20 years with plug mushroom pins, which are very effective in preventing this opening technique. This same feature was added to the 7X7 line.

In addition, about three years ago Mul-T-lock introduced the new patented “Anti- picking” telescopic pins that defeat even the most skilled lock picker – not only in the field, but also in “comfortable” laboratory conditions.

Always be aware that locks can be “cooked” (prepared in advance) to look like they have been picked open. Through the years we have seen many variations: cylinders in which 1 pin tumbler was left and other cases in which the “objective examiner” had looked at the working key, before he performed his magic. This is more show business than High Security. So be aware and do not fall into the traps they set."
]]>Aug 24th 2006 5:19PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.youtube.com/watch?v=7Uv45y6vkcQ&search=bump%20key]]>Aug 24th 2006 5:54PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 6:43PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 6:52PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 7:02PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/That's what I do too, but with my shades on!]]>Mar 11th 2008 3:02PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
The original key was 3-D scanned and then a chunk of steel barstock was CADCAMed milled down towo exact copies of the original key.

So much for the "unduplicateable"/Can be duplicated ONLY by MEDCO suthorized licensed locksmiths".]]>Aug 24th 2006 7:12PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
Just a quick note - (quote) "Energy is created and used to split the bottom and top pin, thereby allowing the plug to rotate." - this violates the first law of thermodynamics, which states that energy cannot be created or destroyed, but only transfered (in this case from the speeding tomahawk to the key). Minor detail, I'm just being a picky a**.

Cheers,
]]>Aug 24th 2006 7:22PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 7:40PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
thoughts?]]>Aug 24th 2006 7:43PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 8:30PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/
A good professional locksmith can modify ANY pin tumbler cylinder to be "bump" resistant, if not "bump" PROOF!

Yes, this a old technique for opening locks, and yes, there is a very simple way to defeat it on even the cheapest cylinders--I know, as I do it on a regular basis here in the metro Milwaukee, WI area.

This problem was best summed up by the Bard himself--"Much ado about nothing!"
]]>Aug 24th 2006 8:47PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Knowledge of how to commit a crime doesn't turn you into a criminal. Everyone knows how to commit murder.]]>Aug 24th 2006 9:17PMhttp://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/http://www.engadget.com/2006/08/24/the-lockdown-locked-but-not-secure-part-i/Aug 24th 2006 9:50PM