Archive for the ‘Crime’ Category

Who says burglars don’t pick or bump locks?

Saturday, November 14th, 2009

Here’s a report I found online, reporting on a 2-man crimewave using bumpkeys. Lasting over several years, the police had a very good idea who was behind it, and despite traiing them for 2 years theey never got them red-handed. However, when police eventually went to one of their houses, they found it packed with stolen goods! Bumping criminals caught in USA

Closer to home, I went last week to a church who had been targeted. The big old and impressive lock on the vestry door had been opened, and my investigation revealed it was picked with wires. A few hundred pounds in cash was taken. Hardly worth it – robbing a church? If there is a god, and a hell, then those criminals will really regret that choice!

We hope to prevent the need for divine retribution, though. The new security system, carefully designed and chosen to be in keeping with the very old and beautiful wood and stone, should keep anyone unauthorised out for a very long time.

Neat eBay scam I discovered

Sunday, October 18th, 2009

Here’s a good scam!

Very nicely done, they only messed up in a few places.

Normally when you get a phishing attempt, from “ebay” or whoever, the fastest way to tell is to hover on the URL and see that it really links to “www.scammerhome.net”. This one avoids that, by using a cleverly crafted ebay “About me” page.

You can see it live at:

http://members.ebay.com/ws/eBayISAPI.dll?ViewUserPage&userid=Inssommia&JBR_W0QQitemZ26036QQssPage36QQssPageNameZWDVWQQrdZ1QQcmdViewItem&item=28011654654

DO NOT TYPE YOUR real DETAILS IN! Make something up. ;-) Take a look at the top bar of the browser page, and then do a ‘hard refresh’ (Ctrl-F5 in Firefox) and watch the slightly freaky way the page reloads.

It’s been very neatly done using a set of images and looking at the source, there is no javascript used at all!

The log-in (enter fake details) takes you to an ebay themed page, where they forgot to re-write the URL to ebay – it goes to http://plymouth.rtcubed.net/.download/secure/ which tries to get you to download some file with the name referenced in the email.

If anyone wants to take a look and report back what the payload is, I’d be interested.

(Bonus points for anyone who knows what the Google search you can still see was about!)

A new threat rises, in the (near) East

Thursday, June 25th, 2009

According to this week’s New Scientist, there is a new threat to our credit cards from Russia, which the banks and everyone else totally overlooked. Yet it is obvious, even without hindsight.

The why is obvious – millions of dollars there for the taking.

The how is very neat – a card is used to extract a printout of the other cards used, and their PINs, and it even encrypts the info so that the boss doesn’t have to get his hands dirty, and the foot soldier can’t steal the info for himself. Perhaps the funniest element is the fact there was also a way to have the cash machine eject the cash cassette! Surely anyone with a brain would see that as an obvious issue?

Windows is known to have many hundreds of thousands of viri, malware and trojan bits of software installed on the millions of machines in use, so how come did no-one at the banks think about how it might be an issue to use an ATM based on Windows?

These scams show that not only were most banks useless at their expert field of not going bankrupt, but they also messed up badly when working outside their chosen specialist subjects.

You can read the article in full here (though in a few weeks it will be subscribers only for the full article.)

B&Q vouchers accepted here!

Tuesday, April 14th, 2009

As part of the latest Home Office “I’ve been caught fiddling my expenses” initative, the Home Secretary has annouced that, in a clearly anti-competitive move, they will be giving away B&Q vouchers for 15% off the cost of locks and other home security equipment.

For the duration of this initative, for as long as they are valid, Discreet Security will be accepting these vouchers for money off any security item we have in stock. Lock cylinders, night latches, BS locks, lever locks, padlocks, chains, window locks and additional door security, even security head screws, all now have 15% off. Please note that this does not include labour charges, as these are already very reasonable, especially if pre-booked, and nor does it include emergency call-outs and key cutting. It does include uPVC door repairs though, despite them being unobtainable from B&Q.

Don’t waste your money on something unsuitable and DIY – call an expert! It’s not a wobbly shelf, it’s your family’s safety.

Who are you telling you are going away?

Tuesday, March 31st, 2009

My advice to you last time about going away is to be circumspect in public and specific with those you know and trust. Especially be aware of systems like Twitter and Facebook, where your updates will often make it clear that you are not at home, and for how long.

Just in the last few days, the papers reported that a rather unpopular figure in the UK was targeted for a visit late at night, the “Fat Cat” banker Sir Fred. He was, and still is, out of the country – he left immediately after the scandle about his £13 million pension arose – and this was widely reported in the news. Once someone tracked down his address, which is a mater of public record and findable for a few pounds online, they could enter it into Google Maps, and, perhaps, StreetView. This gives them a very high resolution map of where they are targetting, along with, in StreetView, good enough photography that they can determine alarm box positions, paths, letterboxes, etc. without ever needing to go near the target address.

How close can we get? Well, the ever-useful Daily Mail published a nice aerial shot of his house, plus a map, and some high-res pictures of it, as well as the fact that his street is “something road, Edinburgh” in a peice decrying StreetView. This isn’t going to happen for most people, though. Generally, you’ll have to either find your own details to hide them, or someone else will find your details to victimise you (perhaps).

Here’s 240 Poplar High Street. I picked it at random. I know it would take me half a day to get to it from Bromyard, and that when I got there, I could park for up to 4 hours between 8:30 and 5:30, but not if I’m in a lorry, because I can clearly read the road traffic sign.
View Larger Map This level of detail means that very little that can be seen from the street is now safe from (remote) prying eyes.

Of course, for a very long time people have done “reccies” of targets. It’s what you do – you go and look around and work out what you want to steal, how to get in, where to run away to, where to park a car. The difference is that now, the CCTV at the site cannot find you, because you were never there. Google logs everything, of course, so you could in theory be tracked down, even if you use a proxy or two, but the odds are far lower than someone recalling a guy peering in the window two days before.

What to do? Well, re-assess, or have an expert re-assess, your security. I’d recommend an ICL member, as we are all reputable and know what we are doing. Some things will be trivial, others will be more expensive, and you will have to determine how much you feel you can justify to yourself for your security. However, for under £100 most places can have their general level of security massively improved. Give us a call!

Who do you tell you are going away?

Monday, March 30th, 2009

I’m back, refreshed from a week away, my first proper holiday for some years. Yet I left no online message on the blog to tell our customers. The reasoning is obvious, though some would argue there is no harm, it only takes a few moments to work out where we are based – click the “Contact us” page! – and, indeed, pull up my house on Google Earth (though not yet on StreetView)

From a security point of view, my answering machine simply said that everyone was busy, and to leave a message if we could be of further assistance. This didn’t prevent the phone from ringing at odd hours – three calls around 3am alongside the many others – but when it wasn’t always answered at least people knew most of the story.

Of course, all our large clients were informed, and most of our large clients remembered. :-)

Anyway, my advice to you about going away is to be circumspect in public and specific with those you know and trust. Especially be aware of systems like Twitter and Facebook, where your updates will often make it clear that you are not at home, and for how long.

Pickbuster authorised agent for Birmingham and the West Midlands

Friday, January 30th, 2009

Discreet Security has just signed up as the linked provider of the Pickbuster anti-bumping solution.

You can view our new microsite on the Pickbuster website to verify this: http://www.pickbuster.co.uk/Discreet Security

Pickbuster is a relatively simple and low cost solution to the problems presented by lock bumping. Lock bumping has been known for nearly 100 years in the close-knit locksmithing community, but with the growth of sites allowing user content to be easily added, this cat has truely gotten out the bag.  Google returns plenty of results, and a few videos, including mainstream news reports such as this one from the USA.

So, which locks are at risk? In the UK, every single white plastic uPVC door you see is a target, and over 99% of them are vulnerable. A few aren’t, because they are either broken, have unusually high security locks (as even most high security locks are easily beaten with this technique) or they have been treated with Pickbuster already. Perhaps more worryingly still, one “universal” bumpkey freely available online for a few pounds will open about 95% of all of these doors!

Wooden doors aren’t quite so vulnerable, as long as you are locking the mortice lock when going out, and dropping the snib when inside. Lever locks can be bumped, sort of, but it is a technique that has been de-fanged for any modern lever lock with a security rating. They are also far stronger than the latch alone, so do remember to turn that key on your way out!

If you are worried, and would like some free advice, have a read around this site, have a look online (that Google link above is a good start, as is the Pickbuster website) and feel free to leave a question in the comments or send us an email. Remember, we can treat your locks fairly quickly, and stop this threat, and also take a look at your properties security to see what other, often small, changes would enhance your security.

“Ban the BumpKey” campaign

Tuesday, September 23rd, 2008

A new campaign, backed by the ICL and several other organisations, aims to get the law changed, so that burglary tools such as bumpkeys, that have no legitimate uses to hobbiests or anyone other than professional locksmiths and the security forces, are restricted to those with a real need.

Bumpkeys are designed to open a specific brand of lock. Sadly, in the UK the standard rim cylinder and euro locks found on an estimated 65% of homes are all the same profile, meaning that, unless you have an upgraded, treated lock (and you won’t unless you have specifically obtained one from a locksmith) you are vulnerable. Even higher security locks, if made more than a few years ago, are generally vulnerable. Call or email us for more information.

http://www.banthebumpkey.co.uk/ – you can also sign the on-line petition here.

Is your insurance company going to cover you?

Friday, August 1st, 2008

The new British Standards require you to have higher security on your doors of your home for your insurance to be valid, as the bolt throw increased from 14mm to 20mm a few years ago, and with the recent economic downturn and subsequently increased burglary rate, especially of commercial property, many locksmiths are reporting a surge in work.

Things like good locks and having the keys for your window locks add to your peace of mind. On commercial property, things such as steel grilles over windows and steel plates over doors are frequently a requirement, as are anti-ram bollards.

Please call us to arrange a security survey, with no obligation. A professional eye will help ensure that you are as safe as you feel you should be.

Change your alarm codes every year

Wednesday, July 2nd, 2008

I helped in the execution of a warrant yesterday, one where the previous attempt to get in had left the lock butchered and inoperable after about 2 hours without access being gained, and two pretty big holes through it. I spent some time working on this one to open it and sort it out, before replacing the lock and fixing the handle. (Click the images for the larger versions.)

From the outside.The butchered front door lock

Once inside the alarm tripped. And that brings me to the real subject of this post.

I silenced the alarm within 20 seconds. I used most of the time the trigger gave the normal user to punch in the code to insert my ear plugs, and still had it quiet within 10 seconds of the sounders going off. It wasn’t some amazing magic trick, nor anything destructive. Take a look at the alarm panel, and see if you, too, can work out the code digits. (Again, you can click on the image for a larger version, but you might not need to!)

Alarm code determination

I figured that 4, 6 and 0 figured in the code, and since most codes are 4 digits, the fourth try turned it off. Not really rocket science on this one!

If you get into the habit of changing your alarm code every time you notice the digits you are using are starting to wear or get dirty, then you will effectively stop this trick cold. And, if you have an alarm or safe that are insurance rated, you should get your codes changed every 6 months regardless, to comply with the insurance requirements.

Discreet Security Solutions offers this service, along with many other locksmithing and security related services. We will probably find security issues you weren’t even aware of, but that could be exploited to leave you and your business or home in a far worse state than when you locked the door and went on your way. And, normally, there are low-tech, low-cost solutions to your security problem. Give us a call on 0845 355 0945 or drop us a line today.