Droppin Forensics Like It's Hot
A new version of the Mul-T-Lock: Design and Security article is available on the articles page. Updates include many retouched or retaken photos, a greatly expanded MT5/MT5+ section (now includes keying specs), a number of additions to the Security Analysis section (including MT5+ vulnerabilities discovered from 2009-2012), a section on MT5+ key card attacks, and many minor corrections. An earlier…
It's been a while since my last update! I've been very busy with conferences and training events so far this year. At this year's Black Hat & Defcon conferences I gave two talks and a two day training on tamper-evident devices. At Defcon, my team once again won the Tamper-Evident Contest hosted by The Dark Tangent. For anyone interested in locks or forensic locksmithing I would recommend looking…
Details for my next few events are up on the Events page. Of particular interest, I will be at AUSCert in a few weeks to talk about how lockpicking and forensic locksmithing are affected by the spread of information, particularly that of vulnerability information on locks that everyone relies on day to day. The theme for AUSCert 2011 is "overexposed"; "a reflection of the increasing exposure to…
"Beating the BiLock" has (finally) been added to the articles section. This is the result of many months work with Jon King to look at the Australian lock and evaluate its strengths and weaknesses. The article covers the history of the BiLock series of locks and then looks at its defenses against a variety of attacks. There is not much information about the BiLock available online outside of…
Hello everyone! I got back from Defcon a few days ago and as always it was a blast. There was a very active lockpicking village, many contests, and lots of great talks. Marc Tobias, Tobias Bluzmanis, and Matt Fiddler presented their research on several vulnerabilities in mechanical and electromechanical locks. You can read more about how they defeated these locks on Marc Tobias' blog,…
It's been a while since I've updated the site, but there is much news. First off, some new events have been added to the Events page. If you're coming to any of these events make sure to say hi. Over at Renderman's site there is a great write up on a potentially massive slip up on the media's part . The jist: Is the key in the photograph really the MTA master key? If so, this will be a huge…
A new article called "Anti-Forensics: The Keys to the Farm" has been added to the Articles section. It details a new type of lockpicking tool designed by a Lockpicking 101 member. It was an attempt to evade forensic detection, and a very creative one, at that! Start reading: Anti-Forensics: The Keys to the Farm . The Mul-T-Lock article is also updated with information on the Mul-T-Lock CLIQ…
Hello! Sorry for the delay in updates, but I've been very busy working on a few projects, including Lockwiki.com . I'll be speaking on "Lockpicking Forensics" at Toorcon 11 in sunny San Diego, CA at the end of the October. This version of the talk will be somewhat different, as it is extended and includes material that I haven't had time to present in the past. I'll also be running the Lockpicking…
Another fine year of Black Hat and Defcon has passed. I spoke at both conferences, and the talk seemed to go over well even with people that were unfamiliar with locks and lockpicking. At Defcon I stopped in on Alek Amrani and Schyuler Towne's "Intro to Lockpicking" pre-con workshop. It was a great introduction for beginners, and most of the people in the room seemed glued to their seats. I worked…
The first article for the site is available, titled "Mul-T-Lock: Design and Security". It is a comprehensive guide to Mul-T-Lock telescoping pin-tumblers over the company's nearly forty year history. It also includes analysis of the attacks against various Mul-T-Lock systems and references for keying, coding, and patent information. Much of the information is not available elsewhere, especially…
Well it's about that time of year again. I'll be speaking at both conferences on Lockpicking Forensics, but the Black Hat version is slightly longer (75 minutes). At Defcon I'll be working in the Lockpicking Village most of the weekend, manning the tables and giving mini-talks on various topics. If you'll be at either conference come introduce yourself! More info on upcoming events is available on…
Well, LayerOne was a blast. Special thanks to Deviant Ollam and scorche for working hard to make the Lockpicking Village awesome. Pictures from the village are now included on the Events page under "Past Events". The next scheduled events are talks at Black Hat USA and Defcon 17, both in the same week in Las Vegas at the end of July. I'll also be with TOOOL USA in the lockpicking village at…