Deviant Ollam "Mastering Master Keys" [HOPE Number 9]

Sdílet
Vložit
  • čas přidán 5. 03. 2014
  • A couple notes...
    I. master pins of size value 1 are actually semi-valid in Kwikset systems, because of the rather large bitting spacing for that style of lock
    II. zero-bitted depths are actually valid in other systems, Schlage locks for example. They aren't common, but they do not violate code standards.
    III. hand-filing is possible, but using a code cutter is often a much better plan if you have access to one! :-D

Komentáře • 178

  • @StringerNews1
    @StringerNews1 Před 4 lety +143

    I was in college when I defeated my first lock. Not by any of the methods in the presentation, but by finding an unused dorm room that was left open and taking out the cylinder and looking inside. By looking at my key and my friends' I figured out that the first pin was to open the outside doors, and the rest were for the rooms. There were master wafers, but I couldn't easily get Medeco stuff to play with. So I removed all but the pin that all of our keys had, and used the room as a secret hiding place...until the RA decided to move into that room. After he moved, he left the door to his old room hanging open, so I fixed that lock as well. Because everyone had access to both rooms, when he went out drinking one night, someone moved all his stuff back to his old room, and swapped the room number plate. He was very confused by that in his drunken condition!

    • @lillithyukiutacrow2532
      @lillithyukiutacrow2532 Před 4 lety +4

      BLOODY BRILLIANT thanks for the laugh, needed it🤘👹

    • @biscuittechnician
      @biscuittechnician Před 3 lety

      wee bit late to the party and I'm not saying this as hate as I loved your story. but he does actually talk about your method twice, when he says about Alice having the crude option of opening up the lock to look and measure 15:31& 35:54

    • @-bravoechodelta255-6
      @-bravoechodelta255-6 Před rokem +1

      you are my hero, i'd love to get up to silly antics involving locks, but i know for sure i'll lose my apprenticeship when i get caught 😢

  • @gonzo_the_great1675
    @gonzo_the_great1675 Před rokem +6

    Did all this at uni in the bar. We had data from a few room keys and main door keys, noting they were in different numbering (letter) ranges. And knowing from the night porter that there were masters and grand masters.
    It didn't take too many beers to conclude that all the locks must have had had multiple pin stacks.
    Blanks were restricted, but they would replace keys if you lost yours.
    Though these would be supplied cut and we suspected that the masters would always have deeper cuts in the masters. So we built up the key with solder and cut it with a sharp knife.
    Worked like a dream.
    All pre-internet days with no help other than having that sort of mind.

  • @sbunny8
    @sbunny8 Před 4 lety +48

    Very well done presentation. I"m a Certified Master Locksmith and I give it an "A". Vulnerability to hacking is a major reason why master keying residences is usually a bad idea.
    Regarding restricted keyways... if it's protected by a utility patent, the workaround described in this video is still a violation of the patent. Utility patents are based on what *works*. If you create (without permission) a key that works, you violated the patent, even if your key has extra millings that the patent doesn't show. Nonetheless, it's true that restricted keys are not a perfect solution because you can't be 100% sure that no one will obtain blanks.
    A quick note about terminology. This video uses the term "shear line" in a non-standard way, saying that you lift the shear line to the edge of the plug. The LIST Council locksmith dictionary says the shear line *is* the edge of the plug. It's more accurate to say you lift the pin breaks *to* the shear line. At 7:34 the video says "multiple shear lines". There is only one shear line in this type of lock. It's more accurate to say multiple combinations that could reach the shear line. I often hear other locksmiths use the term in this way; it's a common mistake. You might not even call it a mistake, it's just nonstandard.

    • @buggsy5
      @buggsy5 Před 4 lety +3

      I agree. Other than your "shear line" caveat, well done. However, I would like to have seen mention of the ways to avoid "canyoning".
      Also, if you can get some unobserved moments, impressioning can often save a bit of time.

  • @rbmwiv
    @rbmwiv Před 5 lety +33

    I taught myself to make BMW transponder keys. I was able to buy all the equipment to cut and program keys for less than the cost of a new key from the dealership. I charge 1/2 price of the dealer and make good money. I have a special pick for BMWs and mini. It will open the door in under 2 minuets. I love learning how to defeat security. It’s fun. Just don’t do nefarious things with your knowledge. I can have a BMW without a key crunk and running in less than 10 minuets. Flash a transponder and tape it to the pick and off you go. Comes in handy since I work on them and sell them. A replacement cost me $8. Dealer price $275. No thanks. I do it for profit but legally.

    • @lolcatize12
      @lolcatize12 Před 5 lety +2

      That is incradibly cool. And it also made me think of gone in 60 seconds for some reason

  • @MAGACAT
    @MAGACAT Před 6 lety +145

    What happened to Alice? Well we heard she started showing signs of OCD and then quit

  • @birdkitchen6054
    @birdkitchen6054 Před 7 lety +7

    the more I delve into this the more interesting it gets, I love a good puzzle, I keep getting different kinds of padlocks, but they rarely elude me for very long, and videos like this make for a better understanding of what is actually going on in the locks. Keep the videos coming I definitely appreciate what you are doing.

  • @lifeisgood12341
    @lifeisgood12341 Před 5 lety +43

    Thanks you just today installing a new door knob i noticed the anti-carding mechanism was broken and replaced it at the store.

  • @creativeusername8760
    @creativeusername8760 Před 4 lety +8

    best tool concert ever

  • @chrisbusenkell
    @chrisbusenkell Před 4 lety

    thanks for all your work on this deviant. you sure are a natural at giving speeches.

  • @arit8009
    @arit8009 Před 5 lety +6

    I really enjoy watching your talks, they are really interesting! Cool job, btw! I want that job!

    • @DeviantOllam
      @DeviantOllam  Před 5 lety +6

      Thanks! I enjoy giving them.
      I blogged about how I entered this field, BTW... deviating.net/words/?p=1096

  • @gordhenschel1419
    @gordhenschel1419 Před 5 lety +4

    best presentation yet

  • @anteconfig5391
    @anteconfig5391 Před 5 lety +10

    He's the keymaster, like the guy from the matrix. He can get you anywhere you wanna go.

  • @Halfzipp
    @Halfzipp Před 4 lety +3

    Excellent video as always :) Those Miwa's are great locks. Dimples plus magnetic sliders. Definitely a lot of fun. I posted a video picking one of those open with a diy magnetic pick. 3rd ever pick on camera. Anyway, great video and thanks for sharing this. :)

  • @RobertMorgan
    @RobertMorgan Před 5 lety +18

    Those magnetic locks are amazing, but they say to an attacker: kick or pry this door open lol
    Like that scene with Robert Redford in Sneakers, 'How do you defeat a digital keypad lock?' *[kicks door as hard as he can, it flies open]*

    • @hwguy13
      @hwguy13 Před 5 lety +6

      yup... thing is if you have a hole in the wall, you know an attack happend, if someone cloned a key, snuck in and snuck out with no obvious evidence you probably never know till say suddenly you find out like EVERY shred of confidential information you company had is now in public domain because someone snuck in, went hands on hardware and opened themselves a hole in your system

    • @98dizzard
      @98dizzard Před 4 lety +3

      @catothewiser neodymium magnets are pretty strong, even small ones. The spinning magnetic disks are entirely separate from the keyway, which is the main source of dirt ingress. The only other source of dirt is between the cylinder and housing, which is generally a very tight tolerance and unlikely to let dirt in.

  • @TheBenBen253
    @TheBenBen253 Před 5 lety +4

    Awesome idea adding the game. That's genius

    • @Petemtl3
      @Petemtl3 Před 4 lety

      FiOS you instead of gratitude as do most of us such a but she is putting out some he is the great war even his physical security which is not his interview of the best researching the crypto awesome congregation is Alyssa professor is this academic tightally awesome to have a committee to Natalie's and professor down a U-Haul right near where I live in Philly

  • @SteveFrenchWoodNStuff
    @SteveFrenchWoodNStuff Před 7 lety +13

    That was an excellent presentation!

  • @evilone4fun
    @evilone4fun Před 6 lety +23

    I have to ask how did the contest go?

  • @colinbyerly5212
    @colinbyerly5212 Před 4 lety +1

    Thank you , great Topic .

  • @mhrs1999colorado
    @mhrs1999colorado Před 8 lety +65

    Isn't that only one of the possible options for the master key? In reality, couldn't the master key be any combination of her original bitting depths and the new found bitting depths?

    • @Insipidont
      @Insipidont Před 5 lety +43

      I think it also requires that Alice's key does not open any other door except hers. You will notice that the Master bitting is always the one alternative to Alice's key for that same pin. So this would actually be harder to pull off from a sub-master key, as then you might have to keep some of the bitting to your original key.

    • @Christopher_Gibbons
      @Christopher_Gibbons Před 5 lety +50

      Technically, yes. If Alice's key has one bit in common with the master key, they could put in a master bit in anyway to lead her to a false solution. An interesting side effect if this is that would produce a key that unlocks exactly one other door. It would be really funny to arrange for all of the false solutions to open the same room. Inside the room is a guard whose only job it is to wait for someone to come in and get immediately fired.

    • @ilovefunnyamv2nd
      @ilovefunnyamv2nd Před 5 lety +5

      yes, I a good example is my cubical mate has a key that can also open my drawer, so are keys are similar enough, but they have the masterpin, or we both have a master pin, and they have 2 on their key, etc etc. but this still only means another day with a few keys to learn the "True" master I guess, because for each pin, its either one, of the other (are maybe 3 if multi-mastered pins?)

    • @jeremylakeman
      @jeremylakeman Před 5 lety +12

      With those 4 master pins, there are 2^4 = 16 keys that will open that lock. One of them must be the master to the whole system. The other keys could be sub-masters to a smaller group of locks. If you want to be certain, you might need to make all 16 keys.

    • @naphackDT
      @naphackDT Před 4 lety +6

      I thought about this for a bit and in the given scenario, it is unlikely.
      Firstly, if her key has the master cut on that pin, there is no need for a master pin in the first place, so the pin stack would only have one shear line. For example, on Alice's lock, there is that three cut. Maybe that pin is also master keyed, but her specific key uses the master key cut on that pin. Again unlikely, since any master cut on a pin reduces the amount of available key bittings by ~4-5.
      Now what if there IS a master pin even though her key uses a master key value. We are working in a tiered system, after all. In that case, that would be the pin that distinguishes different master key classes, and she works at the lowest level of security, so it would be safe to assume that her key also uses that bitting and the other cut is the one for the top level key.

  • @faisalal-otaibi9914
    @faisalal-otaibi9914 Před 5 lety +3

    Thanks it's like a puzzle

  • @Randy14512
    @Randy14512 Před 4 lety

    Just read Matt Blaze's paper, fairly short. I have watched this video multiple times because I enjoy the puzzle aspect of the attack but Deviant I found that actually reading the paper gave me a much more in-depth understanding on the attack. I hope that I can one day put this knowledge to good use, but not sure were... Maybe when I become a teacher and the school is looking at potential security flaws, IDK. But what I do know is that security through obscurity isn't the answer and intend to attempt to make myself and others I know safer through learning this great information as well as the information from the many other talks of yours I've seen.

  • @suprememagnetic4850
    @suprememagnetic4850 Před rokem

    Those keys with the magnets are great to fight against pickers, but most break-ins just break the door or lock, and if you lose those fancy keys, good luck getting a new one anytime soon, you’ll have to get a new lock. It’s best to get something that’s common and durable because the fancier and least common it is, that harder to replace.

  • @mattnik
    @mattnik Před 7 lety +5

    Awesome video! Does anyone have a link to the "easy entry" system described at 32:00?

    • @false-set
      @false-set Před 6 lety +3

      Matthew Payne www.qtactical.com/easy-entrie-key-machine/

  • @Magiobiwan
    @Magiobiwan Před 7 lety +1

    Is Ray's handcuff demo you mentioned available on CZcams? If it is, does anyone happen to have a link for it?
    Edit: found it, it was in the recommendation section

  • @gg-gg-gg-gg
    @gg-gg-gg-gg Před 5 lety +3

    It's only wafer thin.
    EPIC

  • @blueskiesjazz
    @blueskiesjazz Před 5 lety +6

    Some of Matt Blaze's newest work is on Stingrays... I used to set my laptop on both of the stingrays he had in the security lab at Penn... hahaha...

  • @DavidLindes
    @DavidLindes Před rokem

    How _did_ the contest (38:06) go? Did you get some winners? Anybody mess with anything/break the rules? Seems like a cool contest! And lots of great info in this video; thanks!

  • @wsvitak
    @wsvitak Před 3 lety +4

    Put him up against the lock picking lawyer

    • @knghtbrd
      @knghtbrd Před 2 lety +2

      Deviant Ollam and LPL have done videos together. LPL was there to learn. Deviant doesn't usually waste a lot of time picking locks. He decode, bypasses, disables, or avoids them more often than he picks them.

  • @lbochtler
    @lbochtler Před 5 lety

    What is the most secure lock out there? The EVVA MCS looks rather nice, but is there something more secure?

    • @hwguy13
      @hwguy13 Před 5 lety

      think dev likes the protec, i have evvas at home and my only complaint is what when we get HARD cold in winter they can become a little fussy... im guessing that many components with different thermal expansion and contraction that things dont line up quite right.. not had them refuse to open ever, but you can feel they arent totally happy... (or we got an eeeeh one)

  • @thelatenightguard7763
    @thelatenightguard7763 Před 4 lety +4

    How do I get into Physical Pen Testing?

  • @derekelam9967
    @derekelam9967 Před 4 lety +6

    So this means, a lock that's designed to be opened by only two keys (a change and a master) actually has up to 2^n possible keys that would open it, where n is the number of pins. A mastered 5-pin lock like the one used here actually has 32 possible keys that would work.

    • @DeviantOllam
      @DeviantOllam  Před 4 lety +2

      Math checks out

    • @antonliakhovitch8306
      @antonliakhovitch8306 Před 3 lety +1

      Right, but that doesn't mean that any of those 32 keys can be the master key. If I understand this correctly, for any given pin the master height is guaranteed to be whichever one is not on your non-priviliged key, because they pick your key bitting randomly and the mastering pins represent the difference between your key and the master. The only exception I can think of is if the master happens to match your key at a certain position position and they include a randomly sized mastering pin anyway just to screw with you.

    • @antonliakhovitch8306
      @antonliakhovitch8306 Před 3 lety +1

      I don't think you were implying that any of those 32 could be the master, I'm just trying to wrap my head around this.

    • @xn85d2
      @xn85d2 Před 2 lety +1

      Not quite, I think it'd be 2^n where n is the number of mastered pins, so a mastered 5-pin lock with 3 mastered pins would have 8 keys.

  • @JenovaFPV
    @JenovaFPV Před 5 lety +6

    I understand what Alice is doing with her key and her lock, and the nethod used to discover all the shear lines... But I have trouble to understand how to find the master key afterwards... Why choose one depth instead of the other?

    • @A_Wet_Duck
      @A_Wet_Duck Před 5 lety +5

      if you pay attention, you will notice every pin they choose is the alternative to hers
      her key requires that only her door opens with that key
      so by finding the other bitings that open that door, she's effectively finding a master key for that kind of lock

    • @JenovaFPV
      @JenovaFPV Před 5 lety +3

      @@A_Wet_Duck Thank you for your reply... Honestly it's still not 100% clear for me, as a normal curious person that knows nothing in lockpicking / forging keys... Imagine that Alice starts with the master key... Without even knowing it... I mean, I would not. By your logic she would create a key that only opens her door at the end of the process...

    • @haselni
      @haselni Před 5 lety +5

      Alice starts with the key that she has legitimately been given to use on only her door. She knows that her key is not the master key.

    • @christianbarnay2499
      @christianbarnay2499 Před 5 lety +6

      Alice's change key is 36235.
      First position: she finds there's a 3 and a 6.
      If the 3 is the master biting, that means Alice's change key is in fact a partial master that can open all doors with biting *6235. So she would have access to more places than she's supposed to.
      This could happen if someone messed up but it is very unlikely.

    • @HighestRank
      @HighestRank Před 5 lety +1

      Christian Barnay the truth is that Al knows nothing and for $50K she ought to make one of every permeation of working possibility there is and make sure they work well in her own door before trying the alien.

  • @TurkVladimir
    @TurkVladimir Před 3 lety

    Thanks.

  • @davefranz8766
    @davefranz8766 Před 3 lety

    I have hudson motor car company yale padlock and have the GGM im going to use this trick in your video i call it FISHING to get the change key for my lock. Hopefully there will be only two pins per barrel a bottom a master. Once i have the codes i can go to my locksmith and have him code cut me the change key.
    Had an old best lawrance warehouse company lock that had bakelite plugs in the core some one gave me the control & top master key codes ,used my blue punch to go fishing and was able to get the change key .Had to waste 6 cheap keys for this. Cut my change ,ctrl,tm on best factory blanks. Sometimes they cross key which is annoying you end up with two change keys because one barrel has two master pins in it[hate this]

  • @matthewsibley8942
    @matthewsibley8942 Před 4 lety +2

    Well I wish I had this as a job.

  • @powner250
    @powner250 Před 5 lety

    If you have a large set of keys in a mastered system, can you use them to find out the bitting of the master key? if so how do you do this?

    • @Notius
      @Notius Před 5 lety +3

      I assume you would mostly use it to cut down the options. So if you had key A with 42643 that only opens door A and key X with 22463 that opens doors A, B, and C you could figure the different bittings (2_46_) are possible masters and make blank keys with those bittings and file down the last two to cut down on time.

  • @nathanbarry9534
    @nathanbarry9534 Před 5 lety +14

    Wouldn't honoring MACS reduce your keyspace to reduce how much time this takes? By ignoring invalid values?

    • @hwguy13
      @hwguy13 Před 5 lety +3

      it would... and would save a ton of time.. but also its wise to be aware its possible for a bitting to violate it, especially if whoever set up the mastering system was either very smart or very dumb... having a bitting on an important room thats functional but violates macs is a pretty great and VERY simple way to add some difficulty to copying a key.. not a lot but its a cheap way to add some complication to an attack

    • @LamentedGore
      @LamentedGore Před 5 lety

      What is MACS? I'm a kid who learned how to rake but sucks at everything else...

    • @Randy14512
      @Randy14512 Před 4 lety +1

      To add to Mhairi, the TMK may be within MACS but the change key's bittings for the adjacent bittings plus the TMK won't. Matt Blaze's paper addresses this portion of the attack by saying that it is not a major problem because of the 1 time use of the test key therefore the chances of the key getting stuck is low.

    • @jamesfair9751
      @jamesfair9751 Před 4 lety +2

      peyton mcdevitt maximum adjacent cut system

  • @jimhopkins2530
    @jimhopkins2530 Před 5 lety +1

    00:02 "I think were having a very successful day" I'm watching this high and am tripped up by that sentence.

  • @gammelhund
    @gammelhund Před 4 lety +1

    Is there a con in sweden? It's hard to translate terms to search for.

  • @r4dios1lence92
    @r4dios1lence92 Před 4 lety +1

    About that contest, I wonder if people just went and bought a lot of keys and then traded repeats over.

  • @dylanpicquet8149
    @dylanpicquet8149 Před 4 lety

    I'm thinking of be coming a locksmith

  • @IIVQ
    @IIVQ Před 5 lety +6

    I loved this presentation!
    I have a few one-door keys for the company I work at, including one for a door that doesn't exist anymore, but I lack a few for doors that I actually use. The local branch office head is willing to give me a master key, but couldn't duplicate one because the master certificate "had been lost" (yeah, I know).
    I managed to get temporary access to the master key and by holding it next to my keys, I noticed that the master had higher bitting values (deeper cuts) for all pins where they deviated from each of the keys I had.
    This makes it easy to create a master from a low-level key (which has shallower cuts) by filing it down (one can't file up, unless you braze the key and re-cut your keyway profile, but then procuring a blank would probably be easier).
    Is there any reason why this was done? Wouldn't you be more secure from filing back normal keys to a master by having the master have less deep cuts? Or is filing low-level keys not a thing locksmiths care about when designing a system?
    I actually had a micrometer in my backpack to measure this master key's bitting and file it at home, when someone who left this branch and transferred his master key to me, so the need to cut myself a key has vanished, but I might still try it for fun.

    • @DeviantOllam
      @DeviantOllam  Před 5 lety +8

      nice Discovery! :-)
      And you are right, this is not a conventional way of building a master system. Typically, the top master key bitting values will include a mix of high and low it in cats so that some are above and some are below the bitting values of most if not all of the change keys in the entire system.

    • @hwguy13
      @hwguy13 Před 5 lety +5

      Ive seen this on 2 master keyed systems ive had keys for... i think its just lazy setup, probably building company employed locksmith being paid near dirt for his work so the company get what they pay for back in quality
      ...

  • @arthurdent8091
    @arthurdent8091 Před 5 lety

    H, I loved the demo. A couple of questions if you don't mind: 1-What was the name of that keyway cutting machine, I couldn't find any listing so I assume that I miss-heard your pronunciation. 2- And can you name the source for the clamshell impressioning supplies, please? Thank you.

    • @DeviantOllam
      @DeviantOllam  Před 5 lety

      I think perhaps I referenced our Ilco Ultracode.
      But Silca makes a great series of machines, too. Many brands do.
      The HPC Blitz is still the gold standard.

    • @arthurdent8091
      @arthurdent8091 Před 5 lety

      @@DeviantOllam Thanks a lot for the good quality info and the speedy response.

    • @arthurdent8091
      @arthurdent8091 Před 5 lety

      Thanks for the info. I knew that there had to be a "work-around" for proprietary keyways. Thanks.

  • @Stewnat7299
    @Stewnat7299 Před 4 lety

    Do the pins fall down due to Gravity? If they had springs in them, would it be impossible to pick the lock because you have to pick them one at a time and the springs would just push the pin down each time you want to move on?

    • @shura0107
      @shura0107 Před 3 lety +2

      4 month old comment, but answering here in case anyone is wondering. Yes, the pins are pushed back down by springs. However, what lockpicking does is exploit the imperfections in a lock, in this case, the imperfection of the alignment of the pin chambers. In a perfect manufacturing process, the chambers of the plug would be perfectly aligned with the axis of the plug, and those are also perfectly aligned in the bible (the straight portion of the lock where the springs and driver pins reside).
      What happens in a lock in the real world, is those chambers are not perfectly aligned, so they bind when you force the plug to turn without a key, and they don't bind all at once, but in some sequence unique to the manufacturing tolerances that went into that lock. Which means one pin will bind before the others, and it can be lifted above the shear line, and the plug will turn just a little bit to keep the driver pin up while it binds on the next pin.
      Lockpicking exploits the manufacturing imperfections and tolerances of the lock. The better the manufacturing tolerances, the better the lock, but there's no way to have a perfect lock and maintain a large commercial production run. Drilling a series of holes that are aligned into a cylinder is hard, and the more precision means more cost. Some locks can have security pins that introduce the need for counter rotation when picking, which forces a picker to turn the plug back the opposite way in hope that they'll turn too much and cause pins that have been set before to become unset and need to be picked again.

  • @steepfrugut
    @steepfrugut Před 5 lety

    I don't follow, how would one know which working depth of the pin was the master? For example, slot one is keyed so the pn and the wafer are below the sheer line, but slot 2 is set so the wafer is above the sheer line. How would one know which one the maser key would utilize?

    • @DeviantOllam
      @DeviantOllam  Před 5 lety +2

      If you know shear line depths that *aren't* the master key (because they are visible on a change key) then you can eliminate those.

    • @steepfrugut
      @steepfrugut Před 5 lety

      @@DeviantOllam Ahh ok, so to clarify, a master key will not have the same shear line depth on any of the cuts? Also thank you for the quick reply!

    • @hwguy13
      @hwguy13 Před 5 lety

      @@steepfrugut a change key should NOT share any master bittings with the master in a properly set up system... however its possible that it might in a badly setup system... i cant think of a reason a locksmith would do it on purpose other than to maybe make a copy harder since you might share some values but might not... but the number of possible keys is so low its not really a barrier to even a casual attacker

  • @Treblaine
    @Treblaine Před 5 lety +1

    Could you also make a master key just by LOOKING AT a few keys? If the bitting depth is printed on each key (as so many are) and you know that the bitting of a regular key is never going to be within 1 of a master-pin's bitting level then you can fill in the gaps. Wouldn't you then see a region where you'd have a row of three in bitting that no key used. Or at least, the more keys where you are able to read the bitting levels, the more time you will be able to save in exploratory cuts.
    How many keys would you need to get a look at to be 100% sure of what the master key's bitting is?
    Even if you couldn't read the bitting number printed on the key, you could just use a key gauge

    • @christianbarnay2499
      @christianbarnay2499 Před 5 lety +5

      Be careful that some key markings are not direct bitting codes but blind codes that need a codebook to translate into the corresponding bitting ( see en.wikipedia.org/wiki/Key_code ).
      That said, if you can get the bitting codes of several keys and accurately identify which are change keys (regular employee) and which are partial master keys (security agent, janitor) then you can first identify which positions are common to all keys and not mastered (like position 4 in the example of the video), then for the positions with varying values, you can cross out all values that appear on change keys and their neighbors. If there's only one value remaining, that's the master. If there's several remaining, you can look a partial masters for good candidates.

  • @NochSoEinKaddiFan
    @NochSoEinKaddiFan Před 5 lety +1

    Uuuuh, knowledge...*joink*

  • @2ttsi
    @2ttsi Před 4 lety +1

    Wouldnt that magnetic key be vulnerable with some magnetic viewing film?

    • @DeviantOllam
      @DeviantOllam  Před 4 lety +3

      well... magnetic viewing film shows magnetic fields, but not polarity. so you'd need to determine the north/south of things. and that's also possible, yes, but it does up the level of effort required somewhat.

  • @wdy43di
    @wdy43di Před 4 lety +1

    How did you determine what is the mastering depths?

    • @DeviantOllam
      @DeviantOllam  Před 4 lety +4

      This attack is much more feasible if you are in possession of a change key or, at the very least, know it's bitting values.
      Because that low-authority key in a mastered system will *not* have master cuts on it. So the master depths are the ones you discover which are the opposite of the ones on a change key

  • @technosasquatchfilms
    @technosasquatchfilms Před 8 lety +2

    I wish one of these cons would come to KC

    • @DeviantOllam
      @DeviantOllam  Před 8 lety +1

      +technosasquatchfilms there used to be a BSides KC, not sure when it takes place or if it does any more

    • @technosasquatchfilms
      @technosasquatchfilms Před 8 lety

      +DeviantOllam Cool, I will have to look in to it. Thanks!

    • @joetherev9257
      @joetherev9257 Před 6 lety

      technosasquatchfilms uh

  • @ak_mayhemp8946
    @ak_mayhemp8946 Před 3 lety +1

    I must of missed it, what rule is he referring to when he says "max/macs is violated?"

    • @danielwendell542
      @danielwendell542 Před 3 lety +2

      This refers to the maximum/minimum change you can have between adjacent bitting cuts; if you have too big a change, it make the key/lock not work well and causes some issues with use!

  • @monad_tcp
    @monad_tcp Před 3 lety +1

    31:43 I like the chinese method, just have one key for each lock and carry a big keychain.

  • @jort93z
    @jort93z Před 5 lety +1

    I didn't actually know they have club mate in the US.

  • @BigDish101
    @BigDish101 Před 7 lety +16

    This is why I will not live in master keyed apartment complexes.

    • @EdTube444
      @EdTube444 Před 6 lety +8

      BigDish101 I was taught to master locks at a complex i worked at. Took me a day to figure out how to use my lock if I lived there to make a master or approaches like this if I didnt

  • @thecaneater
    @thecaneater Před 4 lety +4

    2:46 And those two rules...
    Stay safe. Stay legal.

  • @icesoft1
    @icesoft1 Před 5 lety +2

    If the business you're penetrating uses an LFIC system (BEST lock, etc...), why not take a known key and raise the bitting to the 'Core change' depth. Pull the plug, and turn the operator

    • @chrisdwalter
      @chrisdwalter Před 5 lety

      Best is an SFIC (Small Format Interchangeable Core) as someone who has built them and uses them the "control key" could be higher or lower than the change or master key and you would need to know all 6 or 7 cuts before it would work. But if you have access to a single core you can open it and get the "Control Key" bitting and then yes pull the core and turn the actuator

  • @jermainerace4156
    @jermainerace4156 Před 5 lety

    My current key has two "zero" cuts, which is probably because it's a large apartment complex and maybe they ran out of other combinations?

    • @DeviantOllam
      @DeviantOllam  Před 5 lety

      It could be, indeed. Very interesting. I've seen that before, so it's not insanely rare... but I wouldn't call it the most common thing to have.

  • @Asdayasman
    @Asdayasman Před 5 lety

    Assuming you have surreptitious access to your own lock, can't you pick it to discover which pins have mastering, if not the mastering itself?

    • @DeviantOllam
      @DeviantOllam  Před 5 lety +4

      1. Picking isn't surreptitious
      2. picking doesn't tell you which is the master shearline and which is the user's change key shearline

  • @kyleb209
    @kyleb209 Před 5 lety +1

    What is the max that he’s referring to that could not be violated?

    • @DeviantOllam
      @DeviantOllam  Před 5 lety +16

      MACS - Maximum Adjacent Cut Specification
      Basically, you can't have a super super shallow bitting cut on the key one position away from a super super deep cut. :-)

    • @GigsVT
      @GigsVT Před 5 lety +11

      @@DeviantOllam It's really cool that you still answer questions on 4 year old videos. I'm pretty sure that you have an identical twin brother and you guys both play deviant, because there is no way one guy can do all the multitudes of crazy shit you accomplish.

    • @jamesfair9751
      @jamesfair9751 Před 4 lety

      DeviantOllam I was curious about alices key. A master key has to be a lower value than the non master key correct and as you said a one space master is way to thin and isn’t normally used so knowing these two things couldn’t you start out a lot closer to the master. Now I know a key will never be cut this way but for ease of reference let’s say alice key is cut 2-2-2-2-2. Now master has to be lower and more than one space could you not start out trying your master at 4-4-4-4-4

    • @xn85d2
      @xn85d2 Před 2 lety

      @@jamesfair9751 No, the master can be lower or higher, and in a good system at least some will be higher.

  • @jamcdonald120
    @jamcdonald120 Před 5 lety

    with a disk detainer lock couldn't you make a quick adjust "skeleton key" that just has turnable section on it that can moved to a specific angle and then tightened with a tension screw? no filing needed and you should still be able to use this method to find the master key

    • @jamcdonald120
      @jamcdonald120 Před 5 lety

      or with the "blank disk" option couldnt you do that in a low level pin tumbler lock too? just leave an empty hole?

    • @JasperJanssen
      @JasperJanssen Před 5 lety

      The keyway on good disc detainers isn’t big enough to build something like that.

  • @LeClaw
    @LeClaw Před 5 lety

    hahaha at @ 27:39 "but they'll be dead soon....fucking kangaroos"

  • @joshbuilds
    @joshbuilds Před 4 lety

    I love my school most the doors you can pop open with a wire

  • @jamcdonald120
    @jamcdonald120 Před 5 lety

    wouldnt you not need to check pins cuts that violate MACS? the lock shouldnt be keyed to violate MACS right?

    • @hwguy13
      @hwguy13 Před 5 lety

      SHOULDNT is the important word there, its possible to occasionally find a lock that does, it usually wont be something too wild but could be a locksmith setting up a system had to get an extra door in on a system, the few ive seen tend to be on something lesser used like a utility space

  • @skyjumper077
    @skyjumper077 Před 3 lety

    Good locksmiths always make the master position the highest cuts so common users can't file down to a master cut.

    • @kurogane2x
      @kurogane2x Před rokem

      So like for schlage you use more #9?

  • @rabidnative0000
    @rabidnative0000 Před 4 lety

    How does one even get into the pen testing industry?

  • @dylanpicquet8149
    @dylanpicquet8149 Před 4 lety

    How get ahold off tool

  • @InsideOfMyOwnMind
    @InsideOfMyOwnMind Před 4 lety +1

    Geez, all she had to do was go down on the janitor.

  • @davidwarren719
    @davidwarren719 Před 4 lety +5

    Or Alice could just bite her lip at Bob, and distract him long enough to get a look at his master key 😜

  • @TheLukemcdaniel
    @TheLukemcdaniel Před 5 lety

    I know this is a few years old now, but for anyone else coming along, the links no longer work.

    • @jfbeam
      @jfbeam Před 5 lety

      www.mattblaze.org

  • @beastboy0078
    @beastboy0078 Před 4 lety

    I want to get into the "Hecker" community. Is there a official website/Fourm out there?

  • @Mriya6
    @Mriya6 Před 3 lety

    I don't know how this whole hypothetical situation is supposed to work given that she's going to encounter like five of those MACS violations you mentioned at 16:30 which you say will result in keys getting stuck or locks refusing to open even with valid keys. I mean, how many of those is Alice going to get away with before she raises suspicion? Once, twice tops. And any contractor who removes a stuck key is probably going to then look at the key, and if they know their job they'll notice it's been hand filed, and there goes Alice. I don't understand how she's supposed to get away with MACS violations on basically every bit as she tries every range.

    • @KB-mo3sx
      @KB-mo3sx Před rokem

      She isn't - he's just explaining the theory of what you do to decode the master. In practice you're just skipping the combinations that would violate MACS. As he said - if you're not certain just skip and if you don't get it right then come back increasing MACS.

    • @Mriya6
      @Mriya6 Před rokem

      @@KB-mo3sx How are you supposed to know which bitting depths violate MACS? Is it just a fixed number of depths on either side of Alice's known bitting?

    • @KB-mo3sx
      @KB-mo3sx Před rokem

      ​@@Mriya6
      It's set for a type of lock (tolerances in manufacturing etc). As long as you cut a key that doesn't violate macs it wont get stuck no mater the pinning of the lock.
      In short - the slopes on the key cannot be too high for it to push the pins up instead of sideways (force distribution).
      so you know you have:
      key 3 6 2 3 5
      1st pin:
      0 - no 0 cuts - NG
      1 - as he said violates macs because there is 5 difference between 1 and adjacent 6 - NG
      2 - only 1 difference from 3, so - NG
      3 - known
      4 - only 1 difference form 3, so - NG
      5, 6, 7, 8, 9 - can be valid - in this instance it's a 6
      At least that is how I understand it, I don't really have a lot of knowledge about locks - just approaching from logical process of elimination and engineering knowledge.

  • @JayLang7
    @JayLang7 Před 3 lety

    His name is really Deviant? Or it’s just a nickname??

  • @patchbunny
    @patchbunny Před 5 lety +1

    The links you show at 11:39 for crypto.com no longer work. They go to an electronic payment page for something called crypto.

    • @Bushman4
      @Bushman4 Před 4 lety +1

      www.mattblaze.org/papers/mk.pdf
      www.mattblaze.org/masterkey.html

  • @tylorbray
    @tylorbray Před 7 lety +2

    If you have the key blank, and no leet haksaur skillz at lock picking, bumb key... it works.

  • @namvet6970bd
    @namvet6970bd Před 5 lety

    I am a combat disabled veteran getting intron lock smithing..and lock picking master keying..is there software for master keying...any help would be greatly appreciated

  • @harperevans6856
    @harperevans6856 Před 4 lety +2

    This is the lockpicking lawyer. Today we have a lock from... click on one... 😂

  • @stampydragon2739
    @stampydragon2739 Před 3 lety

    I use master wafers and t pins to create a lock picking trap

  • @uncleben8895
    @uncleben8895 Před 7 lety +4

    Well how would I get someone to copy my key but leave one of the values at 0. I don't know a locksmith who would do that. :D

    • @JohnSmith-qf6gu
      @JohnSmith-qf6gu Před 6 lety +7

      buy your own blanks

    • @MarkH10
      @MarkH10 Před 6 lety +8

      you file each cut on all keys. You only buy blanks.

    • @bored588
      @bored588 Před 5 lety +5

      you dont need 0s, for most locks you will not see a 0. just get a key with 1's and start there, if they ask, say you made a lock with all 1's because its your hobby

  • @JanR1995
    @JanR1995 Před 4 lety +1

    Basically just brute force.

    • @DeviantOllam
      @DeviantOllam  Před 4 lety +4

      Heh, well... Brute force in a logical sense, not a physical one. ;-)

    • @JanR1995
      @JanR1995 Před 4 lety +1

      @@DeviantOllam Ahh, jea! Of cause! Never thought about it in the physical meaning :-D

  • @TOASTEngineer
    @TOASTEngineer Před 5 lety +2

    I know this talk is old but, about 'restricted blanks'... couldn't ya just 3D print the damn thing?

    • @DeviantOllam
      @DeviantOllam  Před 5 lety +8

      That is an incredibly plausible option, as well, yes.

    • @dinoscheidt
      @dinoscheidt Před 5 lety

      Since you’re here, how did you do the lock animations? Just ppt or some more fancy after effects composition? Since its 4 years old - back than vs now

    • @kin2naruto
      @kin2naruto Před 5 lety +1

      And... you would get a very fragile piece of plastic that would break off in the lock.

    • @RaketenKuhGewehr
      @RaketenKuhGewehr Před 5 lety +1

      Depends on the kind of plastic you are using and your printers settings. You can absolutely print a key without having to worry about it snapping straight away. It wouldn't be a lasting solution, but for getting through a door once or twice, it works.

    • @sword7166
      @sword7166 Před 5 lety +3

      Don't forget that you could use a 3d print to cast a key out of metal

  • @warzieros
    @warzieros Před 4 lety

    Deviant, I want to be like you! You're too 1337! Would you ever take on an apprentice, or student, or intern? Where do I apply? What prerequisites or credentials do I need to achieve this???

  • @glenaw
    @glenaw Před 4 lety +1

    Not fully accurate with the way that manufacturers do their key cutting and how they list the number system. Best list their key bits from "Tip to Bow" while kwikset list theirs from "shoulder to tip."
    There are a few manufacturers that list the bittings from 1-0, 0 being the deepest and 1 being the shallowest while others like Schlage list the shallowest as being 0 and the deepest is 9. It all very depending on the manufacturer.

    • @glenaw
      @glenaw Před 4 lety

      Intermediate Master Key? It is more commonly called sub masters. A typical master key system will have over 3,000 individual keys with over 1,500 sub masters. Which is the locksmiths job to not issue these keys unless required by the customer. You can have a cylinder that has a master wafer in each pin chamber. With a 6 pin system with a master wafer in each chamber will allow 32 different keys that will operate that one lock.

    • @glenaw
      @glenaw Před 4 lety

      In a attempt to minimize the using of a existing key by taking a file to it is to use the shallowest cut in one of the positions on the Grand Master Key. This makes it a little more difficult to cut a customers key from being cut down to operate other doors since the position that's needed to be shallow is already cut deeper and therefore can not be made shallower.

  • @Sam_420
    @Sam_420 Před 3 lety

    8:45 idk he’s reaction was funny

  • @narayannayak7364
    @narayannayak7364 Před 4 lety

    Master key name

  • @jsd05
    @jsd05 Před 4 lety

    Nothing on one, nothing on two, nothing on three, small click out of four, nothing on five

  • @666Tomato666
    @666Tomato666 Před 7 lety +10

    He's such a toool!

  • @karenwest6350
    @karenwest6350 Před rokem

    Watching this talk, realizing that the links at 11:40 don't go anywhere because of the stupid nft people makes me very sad.

  • @LogicBob
    @LogicBob Před 10 lety

    Oh, LOL! Ignore my question on your other video =)

  • @noobpro9759
    @noobpro9759 Před 3 lety +1

    He looks kind of like Jonah hill without the annoying voice.

  • @GottSegneDich
    @GottSegneDich Před 4 lety

    😂😂😂😂

  • @sergiosalazar6806
    @sergiosalazar6806 Před 3 lety

    Para que sirve esta llave este agueonado no le entiendo nada no cacho que chucha habla esta agueonado de la cabeza debería dar una conferencia de prensa

  • @archangel20031
    @archangel20031 Před 5 lety

    Both
    www.crypto.com/papers/mk.pdf
    www.crypto.com/masterkey.html
    No longer work.