News for hackers. Stuff that matters.
Re:Saintcon: Lock Picking Lawyer Keynote by IgorPartola on Sunday November 28, 2021 @09:13AM (#29369021)
From what I gather:

Bump keys are the simplest way to bypass common locks. You can make one in a few hours and it’s pretty much universal.

Most doors aren’t that strong. You can’t pick a lock but you can just knock the door in.

If you can’t knock a door in, try a window.

House has a security system? Get a ladder and go to the second floor. Most security systems are only installed on the first floor.

Or cut the phone line outside the house as that’ll disable the security system entirely (unless it’s wireless).

If the security system has a combined control panel and main board, just run in and smash it. Good systems separate the control panel from the main board to delay the burglar finding it and allowing the system to call for authorities.

Basically locks, security systems, cameras, reinforced door frames, and protective film on windows are just delays, not preventatives. The idea is to delay the burglar enough such that they either get caught or so they decide to hit the next house without as many obstacles.

Re:Saintcon: Lock Picking Lawyer Keynote by mschuster91 on Sunday November 28, 2021 @10:28AM (#29369611)
> You can’t pick a lock but you can just knock the door in.

A knocked-out door has the disadvantage of being noisy and visible - random passersby may spot either the act or the result and alert the police, whereas most won't even spot the difference between someone using a legit key and a comb key.

The more time passes between the burglary and the discovery, the better for the burglar - if you're already two counties away when the police establishes local roadblocks these won't catch you, CCTV camera or ALPR records get deleted, phone tower (=which phone was logged in at a certain time in a certain area) records grow bigger and harder to sift through, potential witnesses forget details.

Re:Saintcon: Lock Picking Lawyer Keynote by IgorPartola on Monday November 29, 2021 @12:19AM (#29376678)
Show up in a pickup truck in an orange vest. Use power tools to remove the door or better yet a window. Act like you belong.
Re:Saintcon: Lock Picking Lawyer Keynote by BenjiWiebe on Sunday November 28, 2021 @09:45AM (#29369283)
Bump keys aren't quite universal. There are different keyways. Plus, not all locks are pin-tumbler locks. Also, this I'm not sure of, but I think some quality pin-tumbler locks are bump-resistant.
Re:Saintcon: Lock Picking Lawyer Keynote by ploxiln on Sunday November 28, 2021 @11:11AM (#29369993)
That's all true, but what's interesting is how ubiquitous the worst pin-tumbler lock design is. (I'll be honest, I never shopped for a good lock either! I've only bought one extra lock for an apartment once, and didn't care to get anything but the typical kind!)

The LPL is really similar to a lot of us, complaining that "right-click isn't really hacking, view-source isn't really hacking, come on your system is trivially broken" but about the locks practically everyone uses.

We also complain about companies marketing Super Military-Strength Proprietary Encryption but basic key management not making sense ... similar to how LPL likes to get the Pro Max Security big beefy trailer/fence locks and show how they have some of the same trivial design bugs as the cheap locks.

Re:Saintcon: Lock Picking Lawyer Keynote by albrewer on Monday November 29, 2021 @01:29PM (#29383305)
I like this guy's talk about doors:

https://www.youtube.com/watch?v=4YYvBLAF4T8

Re:Saintcon: Lock Picking Lawyer Keynote by randombits0 on Sunday November 28, 2021 @05:26PM (#29373732)
Raking is the simplest way to bypass common locks. I don’t recall ever seeing LPL bump a lock. It’s certainly not his first attack.