Shop OBEX P1 Docs P2 Docs Learn Events
3-D Printed Robot Cracks Combination Locks in 30 Seconds — Parallax Forums

3-D Printed Robot Cracks Combination Locks in 30 Seconds

Ron CzapalaRon Czapala Posts: 2,418
edited 2015-05-17 04:43 in General Discussion
http://www.wired.com/2015/05/little-3-d-printed-robot-cracks-combination-locks-30-seconds/
On Thursday, well-known hacker Samy Kamkar published on his website the blueprint and software code for a 3-D-printable Arduino-based lock-opening robot he calls the “Combo Breaker.” Attach it to any of millions of Master Lock combination locks, turn it on, and it can take advantage of a Master Lock security vulnerability Kamkar recently discovered to open the lock in a maximum of five minutes with no human interaction,

Comments

  • LoopyBytelooseLoopyByteloose Posts: 12,537
    edited 2015-05-15 06:08
    Master Lock (tm) has never been that hard to crack.

    Back in high school, a fellow student simply had their book that lists the combo for each and every serial number. We had Master Lock combo locks on all the high school lockers, and of course the school administrators had a copy of the code book as well.

    Conventional Master Locks without an actual cylinder tumbler are even easier to open. I used to use a bent finishing nail.... but any key can be made into a master key by removing the right material.

    But possesing a device that will open any lock in 30 seconds may be a crime. A lot of localities have laws against the possession of burlary tools and require one to be a registered locksmith if one wants to possess such.
  • Ron CzapalaRon Czapala Posts: 2,418
    edited 2015-05-15 07:00
    Despite the nefarious aspects of such a device, from a technical perspective, it is rather ingenious.

    It uses an analog feedback servo " to detect the state of the shackle and whether it has opened or not" - https://www.adafruit.com/products/1404

    http://samy.pl/combobreaker/
  • LoopyBytelooseLoopyByteloose Posts: 12,537
    edited 2015-05-16 10:21
    To really open locks quickly, you need to know what works with all the different brands.

    When I first arrived in Taiwan, English Teaching Schools were all the rage. One disturbing trend I noticed at our school is that whenever we had a typhoon, a student would loose a new motor scooter to theft. I presumed the theives came out because the theif alarms on the scooter were ignored in typhoon conditions.

    So a few years later when I purchased my first new motor scooter, I put all the locks I had on it during typhoons. Aside from the ignition lock, I had two good cyclinder locks, and even a silly cheapo bicycle lock.

    Coming out of work in a typhoon, a found all the locks had been tampered with. All the good ones broken into and by-passed. But the thief gave up on the cheapo bicycle lock..

    The funny thing is that cheapo bicycle lock would open with any key from the same brand of lock -- the same key worked for all of Taiwan.

    But we all know that theives are not known for their intelligence. I rekeyed the ignition and switched over to a barrel-like key that you see on high security vending machine locks.

    I seem to recall being able to use my finger as a sensor to determine the first digit of those Master Locks -- maybe the first two -- and a few other tricks that made opening them easy without the microcontroller. I love encouraging design and learning, but not empowering a thief. Samy seems to have just taken on an easy lock.
  • Martin_HMartin_H Posts: 4,051
    edited 2015-05-16 11:11
    In highschool I twice had the school issued master lock stolen off my locker with the contents untouched. I had to pay the school $5 per lock in 1980's money for my "losing" their lock. After the second I concluded that they were worse than useless and went without a lock for the remainder of highschool. I never had anything stolen for the rest of my time there.

    So honestly I think a cockroach in a fit of pique could probably pick a master lock in five minutes.
  • LoopyBytelooseLoopyByteloose Posts: 12,537
    edited 2015-05-16 12:45
    The 3 -digit 0 through 9 luggage and briefcase combos are much harder to crack -- only brute force of trying every combo will work. In Junior High, a electronics pal's father owned a luggage store and purchased a thousand with unknown combos in the hopes that we would taking on cracking them cheaply paid by the piece.

    We would sit in class and try each selection until success. I simply learned that piece work was frowned upon by the AFL-CIO and illegal in many states. We never did open all of them.

    +++++
    It seems to me that would be a more realistic project as people do forget those combos all the time and the only other alternative is to damage a nice piece of luggage. People with a locked briefcase are often in a big hurry to get it open.

    But such service are a lot like being an accountant. While you get many honest, decent folks in need of your services; there are always a few that want you to be the stooge for their wrongs. I gave up tax accounting as the ratio was too high. It is important to teach kids that these things attract unwanted trouble and attention.

    ++++++
    I actually created a CANbus scheme for an electronic lock that is extremely secure. But if I were to put it on a locker and the batteries died, you would never get the locker open without some sort of back door.

    It could be used as a security override for private elevators and electric doors by fire and emergency service personal. Thieves would have to bring a lot of equipment, know-how, and still spend hours on site to actually crack an unknown combo. Part of the security was to have each setup use non-standard crystal frequencies, so that an automated search would take more time.

    The reality is the vast majority of homes in the USA can have their front door unlocked in 5-10 seconds with a cordless drill... no lock picks, no prying around with an old credit card. Locks simply keep honest people honest.
  • garyggaryg Posts: 420
    edited 2015-05-16 17:03
    Hi
    I'm curious as to why Parallax Moderators do not stop this type of thread.
    Sure, this information is available on other websites, forums etc.,, But it really looks like trouble
    to me.
    While the subject matter is quite captivating, It is not a Good use of anyone's skills.

    Just my 2 cents worth.

    Garyg
  • NWCCTVNWCCTV Posts: 3,629
    edited 2015-05-16 19:21
    My experience with Master Lock's combination locks came while in the Military. A swift kick downward with an Army boot worked every time I forgot my combo!!!!
  • LoopyBytelooseLoopyByteloose Posts: 12,537
    edited 2015-05-16 20:30
    garyg wrote: »
    Hi
    I'm curious as to why Parallax Moderators do not stop this type of thread.
    Sure, this information is available on other websites, forums etc.,, But it really looks like trouble
    to me.
    While the subject matter is quite captivating, It is not a Good use of anyone's skills.

    Just my 2 cents worth.

    Garyg

    Good point. I am somewhat divided on offering up discussion to make people aware that they need to know how to buy quality locks, or a bit of concerned that we inspire more thieves. Kids do network and figure out this stuff about the time they start junior high school.

    These days, a bevy of video cameras around a house makes up for a lot of poor locks. And a barking dog will generally send any theif looking for another opportunity.

    Front doors in Taiwan has very complex locks, but we still have people repelling down from roof tops and doing all sorts of odd feats to gain access. Neighbors that mutually respect eachother and watch your back are better than any technology.

    For kids, possession of burlary tools can be the first entry in a criminal record if you are caught in the act or in possession of stolen goods. Locksmithing is not a good entry level hobby for kids, even if the parents think it is cool. Neighbors will worry.
  • Heater.Heater. Posts: 21,230
    edited 2015-05-17 00:44
    garyg,
    I'm curious as to why Parallax Moderators do not stop this type of thread. Sure, this information is available on other websites, forums etc.,, But it really looks like trouble
    to me.
    I'm cool with reminding people how ineffectual locks and other security measures can be.

    Parallax has no qualms with supporting DEFCON so I guess anything goes :)
    http://forums.parallax.com/showthread.php/156782-DEFCON-22-Badge-Code-Schematics-and-Information-Here!
  • potatoheadpotatohead Posts: 10,261
    edited 2015-05-17 01:26
    Seconded.

    BTW, when I was a kid, my uncle gave me a whole bucket of locks to unlock. Understanding that stuff doesn't do any harm. We got most of them done too.

    Using it does the harm, and that's a different sort of problem. Moderating this seems inappropriate to me. It's a cool project.
  • LoopyBytelooseLoopyByteloose Posts: 12,537
    edited 2015-05-17 04:43
    The entertainment industry makes these things seem much more of an adventure and so-called 'victimless crimes'. Movies target the youth of the world as they go quickly to new releases and will go back many times to see the same film again and again.

    I think of Nicholas Cage in 'Gone in 60 seconds', or the very recent 'Fast and Furious 7' with a bit of dismay -- heros that live on the edge of society. It is very difficult for parents to overcome the media and peer pressure around being a young westerner.

    I am sure parents can sit down and teach locksmithing to a kid while explaining that a Breaking and Entering Burglary conviction adds a couple of years to the jail time over walking into an unlocked house and taking something, and in places like California you get a life sentence after your third felony... regardless. But there is all that other stuff in the movie theaters that inspires misadventure as the bad boy always seems to win and get the prettiest girl.

    One has to sort out the fiction from real life. And just saying, 'Do as I tell you,' to a teen isn't going make them aware at how to win in life. Winners tend to understand that there are a lot of scams in life, but not being a scammer sets you up for a lifetime of opportunities based on your good name.

    One book I use in teaching English to Taiwanese is an old 'Everday Law Simplified' text that they seem to love. It covers civil law, criminal law, business transactions, and much more. Having a good idea what law really is trying to do make life a lot easier. On should simply acquire skills that make success easier. It is not all about a fast grab and run.

    Mentor kids on how to win in life. They really will appreciate it.
Sign In or Register to comment.