Archive for the ‘Commentary’ Category

Who says burglars don’t pick or bump locks?

Saturday, November 14th, 2009

Here’s a report I found online, reporting on a 2-man crimewave using bumpkeys. Lasting over several years, the police had a very good idea who was behind it, and despite traiing them for 2 years theey never got them red-handed. However, when police eventually went to one of their houses, they found it packed with stolen goods! Bumping criminals caught in USA

Closer to home, I went last week to a church who had been targeted. The big old and impressive lock on the vestry door had been opened, and my investigation revealed it was picked with wires. A few hundred pounds in cash was taken. Hardly worth it – robbing a church? If there is a god, and a hell, then those criminals will really regret that choice!

We hope to prevent the need for divine retribution, though. The new security system, carefully designed and chosen to be in keeping with the very old and beautiful wood and stone, should keep anyone unauthorised out for a very long time.

LockCon #2, at HAR

Tuesday, August 18th, 2009

Got back yesterday from a sort of Busman’s Holiday. We took 6 days off and visited a really brilliant technology and security festival, held every 4 years in The Netherlands. The event is called Hacking At Random, and, as the name suggests, involved a lot of people sat behind computers in a field! However, it wasn’t just hacking servers and sniffing traffic in the virtual worlds, it also included a large section on the physical world, including the latest developments with rapid prototyping, UAVs and, of course, locks. Not forgetting a free toasti with a free domain name and socially-engineered T-shirt!

For me, highlights included the talk about breaking the key control on the EVVA MCS, possibly the world’s most secure magnetic lock, for less than the cost of one of the locks, and the use of a rapid prototyping machine to create a physical plastic copy of the Dutch & German police handcuffs. (If you know what this means, you can get the STL file from http://ke.y.nu and then 3D print your own!)

I gave my talk on British lever locks, which was well received, and a Dutch locksmith did a short hands-on picking session to demonstrate just how insecure the local 4 lever locks are. Ray gave his lecture and hands-on about handcuffs, which is always very popular, whilst many others learned that the basic first level of home security, the 5 pin cylinder lock, was, for the cheaper locks, not very secure at all.

Most mind-blowing, however, was the impressioning championship won by Jos. Impressioning is the art of making a key to an unknown lock. This is tricky but once you know how, do-able. It took me 63 minutes, and only half the competitors finished within the hour time limit. The winner, however, came in with a time of just 87 seconds! Put into context, that’s about 12.5 seconds per cut depth! To put it another way, once set up, I take about half that time to copy a key on my key machine, whilst Jos was using a hand file and did not know the key cuts, only the lock. You can see the video at BlackBag.

So, a great time was had by all. There were also some private learning sessions, covering various things, which I will not be mentioning here. But if you gave them, thanks! We all learned a lot.

So you want to be a locksmith?

Friday, June 12th, 2009

If it was as easy as pay a few hundred pounds, take a short training course and earn more money than a doctor, then doctors would be doing [locksmithing]! 1

Martin Pink, Rapid Locksmiths, Nottingham

The state of the locksmith industry is a poor one. Training houses are churning out hundreds, perhaps thousands, of new “locksmiths” every week. There are now estimated to be over 100 locksmith trainers in the UK 2, so you have to wonder where all those locksmiths are setting up, and where the mythical £1000+ a week is meant to be coming from.

If you are redundant, or leaving the forces, don’t bother becoming a locksmith. Even the best are struggling, and the phone books are full of those advertising for the small section of the market that is lock-out work.

Even if you are the best, will you afford the pages of advertising bought by the national franchises, who churn through half-trained locksmiths, paying them the few pounds they desperately need, before they go bust, whilst feathering their nests?

Or to compete against these same desperate folks when they offer to do a job cutting out the national for £5 over cost? Perhaps most tricky, is will you have the balls of steel required to stand there and tell a customer that the job you quoted at £40 will now be £250 because it was hard, or because you broke their lock, or because you have them over a barrel, because it is dark and cold and wet,  or because you have to make the mortgage payment – and this was your only job this week?? – because you only did 15 hours of training before setting up?

Do some research before you start up, and you will find that (if you are in the UK) there are already many well-established outfits struggling, and time-served locksmiths leaving the profession to make more money as plumbers and joiners.

There are also plenty who did a two day course, failed to get even one job from it, and then… set themselves up as trainers! You can imagine the quality of the course, cadged from an already short course, then regurgitated to those who know no better. It’s one way of making the course pay for itself. Often, it’s the only way.

Be careful out there.

(And the same goes for those needing a locksmith as wanting to be a locksmith!)


1http://www.keyzine.co.uk/OnlineNews/May09-1/8PagesTraining.pdf
2 – A look at Google’s adverts reveals 12 companies paying for you just to click their advert as at 12th June 2009. The actual search results contain dozens more.

Who are you telling you are going away?

Tuesday, March 31st, 2009

My advice to you last time about going away is to be circumspect in public and specific with those you know and trust. Especially be aware of systems like Twitter and Facebook, where your updates will often make it clear that you are not at home, and for how long.

Just in the last few days, the papers reported that a rather unpopular figure in the UK was targeted for a visit late at night, the “Fat Cat” banker Sir Fred. He was, and still is, out of the country – he left immediately after the scandle about his £13 million pension arose – and this was widely reported in the news. Once someone tracked down his address, which is a mater of public record and findable for a few pounds online, they could enter it into Google Maps, and, perhaps, StreetView. This gives them a very high resolution map of where they are targetting, along with, in StreetView, good enough photography that they can determine alarm box positions, paths, letterboxes, etc. without ever needing to go near the target address.

How close can we get? Well, the ever-useful Daily Mail published a nice aerial shot of his house, plus a map, and some high-res pictures of it, as well as the fact that his street is “something road, Edinburgh” in a peice decrying StreetView. This isn’t going to happen for most people, though. Generally, you’ll have to either find your own details to hide them, or someone else will find your details to victimise you (perhaps).

Here’s 240 Poplar High Street. I picked it at random. I know it would take me half a day to get to it from Bromyard, and that when I got there, I could park for up to 4 hours between 8:30 and 5:30, but not if I’m in a lorry, because I can clearly read the road traffic sign.
View Larger Map This level of detail means that very little that can be seen from the street is now safe from (remote) prying eyes.

Of course, for a very long time people have done “reccies” of targets. It’s what you do – you go and look around and work out what you want to steal, how to get in, where to run away to, where to park a car. The difference is that now, the CCTV at the site cannot find you, because you were never there. Google logs everything, of course, so you could in theory be tracked down, even if you use a proxy or two, but the odds are far lower than someone recalling a guy peering in the window two days before.

What to do? Well, re-assess, or have an expert re-assess, your security. I’d recommend an ICL member, as we are all reputable and know what we are doing. Some things will be trivial, others will be more expensive, and you will have to determine how much you feel you can justify to yourself for your security. However, for under £100 most places can have their general level of security massively improved. Give us a call!

Who do you tell you are going away?

Monday, March 30th, 2009

I’m back, refreshed from a week away, my first proper holiday for some years. Yet I left no online message on the blog to tell our customers. The reasoning is obvious, though some would argue there is no harm, it only takes a few moments to work out where we are based – click the “Contact us” page! – and, indeed, pull up my house on Google Earth (though not yet on StreetView)

From a security point of view, my answering machine simply said that everyone was busy, and to leave a message if we could be of further assistance. This didn’t prevent the phone from ringing at odd hours – three calls around 3am alongside the many others – but when it wasn’t always answered at least people knew most of the story.

Of course, all our large clients were informed, and most of our large clients remembered. :-)

Anyway, my advice to you about going away is to be circumspect in public and specific with those you know and trust. Especially be aware of systems like Twitter and Facebook, where your updates will often make it clear that you are not at home, and for how long.

*Not* snowed in

Tuesday, February 3rd, 2009

We aren’t snowed in, in case you were wondering. We were on Monday, but we are fine now. So if your door isn’t working, whether on your car or home, give us a ring.

Pickbuster authorised agent for Birmingham and the West Midlands

Friday, January 30th, 2009

Discreet Security has just signed up as the linked provider of the Pickbuster anti-bumping solution.

You can view our new microsite on the Pickbuster website to verify this: http://www.pickbuster.co.uk/Discreet Security

Pickbuster is a relatively simple and low cost solution to the problems presented by lock bumping. Lock bumping has been known for nearly 100 years in the close-knit locksmithing community, but with the growth of sites allowing user content to be easily added, this cat has truely gotten out the bag.  Google returns plenty of results, and a few videos, including mainstream news reports such as this one from the USA.

So, which locks are at risk? In the UK, every single white plastic uPVC door you see is a target, and over 99% of them are vulnerable. A few aren’t, because they are either broken, have unusually high security locks (as even most high security locks are easily beaten with this technique) or they have been treated with Pickbuster already. Perhaps more worryingly still, one “universal” bumpkey freely available online for a few pounds will open about 95% of all of these doors!

Wooden doors aren’t quite so vulnerable, as long as you are locking the mortice lock when going out, and dropping the snib when inside. Lever locks can be bumped, sort of, but it is a technique that has been de-fanged for any modern lever lock with a security rating. They are also far stronger than the latch alone, so do remember to turn that key on your way out!

If you are worried, and would like some free advice, have a read around this site, have a look online (that Google link above is a good start, as is the Pickbuster website) and feel free to leave a question in the comments or send us an email. Remember, we can treat your locks fairly quickly, and stop this threat, and also take a look at your properties security to see what other, often small, changes would enhance your security.

Oh, the drama – local earthquake!

Sunday, October 26th, 2008

Press release from the British Geological Survey

We noticed it. It was about as dramatic as someone slamming the front door. So yes, we are fine. ;-)

Good news for customers of some other locksmiths

Sunday, April 20th, 2008

New regulations to clamp down on unfair trading

This is great news, and will help put a lot of the rogue traders out of business. And there are few places with more cowboys than the “Driller Killer” locksmiths, whose work I am so frequently seeing. Even some of the large locksmithing organisations support drilling as the first resort, as they see the profits of their members as being more important than offering value for money. The ICL are different – we replace your lock for free if we destroy it (as long as it was working beforehand) so that quote won’t suddenly be “and another £40 for the new lock”.

Details:

On 26 May, new regulations affecting all UK businesses that trade with consumers are set to come into force, if they are approved by Parliament.
The Consumer Protection from Unfair Trading Regulations will protect honest businesses by targeting the underhand practices of ‘rogue traders’.
The new regulations will ban 31 types of unfair commercial practices outright. They will also establish a general principle not to trade unfairly, use aggressive selling techniques or mislead consumers, helping to close loopholes that have previously been exploited.
For more information on the new Consumer Protection Regulations, please visit the following website:
http://www.businesslink.gov.uk/unfairtrading

Investments

Wednesday, August 29th, 2007

It’s that time of year again, where we survey the market and decide what area would be most profitable and useful to expand.

Hence we have just ordered a new selection of high-end car tools to try out, all the way from Australia. Assuming they are as good as they claim to be, we will soon be able to ensure a clean and relatively quick opening of 90% of the newer ‘laser’ type locks on cars made after about 2000, with absolutely no damage and no mess, and without the ever present risks of bent linkages and shattered glass present with some of the rougher methods that some other locksmiths might be forced to try!