B&Q vouchers accepted here!

April 14th, 2009

As part of the latest Home Office “I’ve been caught fiddling my expenses” initative, the Home Secretary has annouced that, in a clearly anti-competitive move, they will be giving away B&Q vouchers for 15% off the cost of locks and other home security equipment.

For the duration of this initative, for as long as they are valid, Discreet Security will be accepting these vouchers for money off any security item we have in stock. Lock cylinders, night latches, BS locks, lever locks, padlocks, chains, window locks and additional door security, even security head screws, all now have 15% off. Please note that this does not include labour charges, as these are already very reasonable, especially if pre-booked, and nor does it include emergency call-outs and key cutting. It does include uPVC door repairs though, despite them being unobtainable from B&Q.

Don’t waste your money on something unsuitable and DIY – call an expert! It’s not a wobbly shelf, it’s your family’s safety.

EVVA training day

April 11th, 2009

Last week I went on a training day hosted in London at Alridges, a specialist lock and hardware suppliers, to learn the in’s and out’s of the Austrian company EVVAs range of locks.

The range of products available are second-to-none, and we (6 ICL members) all got to play with the very highest security locks currently available for the average door. We were treated to a tour of the premises, as well as some freebies, but the high point was getting to play with, and re-pin, the newer high security systems such as the DPI, DPX, EPS, EPX, Dual, 3KS+ and MCS EVVA locks.

Believe me when I say that these are locks that few would enjoy having to get past, and at the moment, a lock such as the Dual, with 12 sliders and two sidebars, anti-bump, anti-snap, drill resistant, pick-proof and so on, gives you complete assurance that your door has not been compromised. The 3KS system, which stands for “3 Curves System” is an amazingly beautiful yet simple and robust system, which seemingly owes much to the artisan – even the keys are works of art!

Even large suites of mastered cylinders can be had, across a wide range of profiles, such as Scandanavian, Euro, Oval, rim cylinder and mortice, even padlocks, allowing the widest range of flexibility and ease of use immaginable in a high security mechanical key system. If you are interested in any of these high end locks, which are available with clever features such as master keying, suited operation, over-rides, classroom locks (which can only be locked with the key, and unlocked with the inside handle) and many other bright ideas, please drop us a line.

Who are you telling you are going away?

March 31st, 2009

My advice to you last time about going away is to be circumspect in public and specific with those you know and trust. Especially be aware of systems like Twitter and Facebook, where your updates will often make it clear that you are not at home, and for how long.

Just in the last few days, the papers reported that a rather unpopular figure in the UK was targeted for a visit late at night, the “Fat Cat” banker Sir Fred. He was, and still is, out of the country – he left immediately after the scandle about his £13 million pension arose – and this was widely reported in the news. Once someone tracked down his address, which is a mater of public record and findable for a few pounds online, they could enter it into Google Maps, and, perhaps, StreetView. This gives them a very high resolution map of where they are targetting, along with, in StreetView, good enough photography that they can determine alarm box positions, paths, letterboxes, etc. without ever needing to go near the target address.

How close can we get? Well, the ever-useful Daily Mail published a nice aerial shot of his house, plus a map, and some high-res pictures of it, as well as the fact that his street is “something road, Edinburgh” in a peice decrying StreetView. This isn’t going to happen for most people, though. Generally, you’ll have to either find your own details to hide them, or someone else will find your details to victimise you (perhaps).

Here’s 240 Poplar High Street. I picked it at random. I know it would take me half a day to get to it from Bromyard, and that when I got there, I could park for up to 4 hours between 8:30 and 5:30, but not if I’m in a lorry, because I can clearly read the road traffic sign.
View Larger Map This level of detail means that very little that can be seen from the street is now safe from (remote) prying eyes.

Of course, for a very long time people have done “reccies” of targets. It’s what you do – you go and look around and work out what you want to steal, how to get in, where to run away to, where to park a car. The difference is that now, the CCTV at the site cannot find you, because you were never there. Google logs everything, of course, so you could in theory be tracked down, even if you use a proxy or two, but the odds are far lower than someone recalling a guy peering in the window two days before.

What to do? Well, re-assess, or have an expert re-assess, your security. I’d recommend an ICL member, as we are all reputable and know what we are doing. Some things will be trivial, others will be more expensive, and you will have to determine how much you feel you can justify to yourself for your security. However, for under £100 most places can have their general level of security massively improved. Give us a call!

Who do you tell you are going away?

March 30th, 2009

I’m back, refreshed from a week away, my first proper holiday for some years. Yet I left no online message on the blog to tell our customers. The reasoning is obvious, though some would argue there is no harm, it only takes a few moments to work out where we are based – click the “Contact us” page! – and, indeed, pull up my house on Google Earth (though not yet on StreetView)

From a security point of view, my answering machine simply said that everyone was busy, and to leave a message if we could be of further assistance. This didn’t prevent the phone from ringing at odd hours – three calls around 3am alongside the many others – but when it wasn’t always answered at least people knew most of the story.

Of course, all our large clients were informed, and most of our large clients remembered. :-)

Anyway, my advice to you about going away is to be circumspect in public and specific with those you know and trust. Especially be aware of systems like Twitter and Facebook, where your updates will often make it clear that you are not at home, and for how long.

White paper: A guide to the manipulation of various combination locks

March 16th, 2009

There have been many people who have reviewed and tested safe combination locks, including large organisations such as Underwriters Labatory and the British Standards Institute. It is the same with door locks, and insurance grade keyed padlocks. However, when I was recently asked to provide a secure combination lock for a set of factory gates, there was nowhere to turn to.

After buying and testing several combination padlocks, I decided to publish my notes, and at that point, I decided that it would be worth testing some of the lower end locks too.

If you use any of the locks given a poor score, you should probably think about upgrading them if your security is important to you. The advice for opening them is limited to very basic manipulation, the kind of thing that most people could work out in a few minutes if they were so inclined. No fancy tools are needed.

I am releasing the paper as “linkware” – you may have a personal or business copy, in exchange for a link back to here. If you are a locksmith, and would be interested in a full copy of this paper, please leave a comment with your website details, and, please link to this site. I will verify it and send you a full copy of the paper to your registered email address, which contains the manipulation process for each of the locks featured. Feedback, as ever, is welcome.

combo-padlock-white-paper-public

*Not* snowed in

February 3rd, 2009

We aren’t snowed in, in case you were wondering. We were on Monday, but we are fine now. So if your door isn’t working, whether on your car or home, give us a ring.

Pickbuster authorised agent for Birmingham and the West Midlands

January 30th, 2009

Discreet Security has just signed up as the linked provider of the Pickbuster anti-bumping solution.

You can view our new microsite on the Pickbuster website to verify this: http://www.pickbuster.co.uk/Discreet Security

Pickbuster is a relatively simple and low cost solution to the problems presented by lock bumping. Lock bumping has been known for nearly 100 years in the close-knit locksmithing community, but with the growth of sites allowing user content to be easily added, this cat has truely gotten out the bag.  Google returns plenty of results, and a few videos, including mainstream news reports such as this one from the USA.

So, which locks are at risk? In the UK, every single white plastic uPVC door you see is a target, and over 99% of them are vulnerable. A few aren’t, because they are either broken, have unusually high security locks (as even most high security locks are easily beaten with this technique) or they have been treated with Pickbuster already. Perhaps more worryingly still, one “universal” bumpkey freely available online for a few pounds will open about 95% of all of these doors!

Wooden doors aren’t quite so vulnerable, as long as you are locking the mortice lock when going out, and dropping the snib when inside. Lever locks can be bumped, sort of, but it is a technique that has been de-fanged for any modern lever lock with a security rating. They are also far stronger than the latch alone, so do remember to turn that key on your way out!

If you are worried, and would like some free advice, have a read around this site, have a look online (that Google link above is a good start, as is the Pickbuster website) and feel free to leave a question in the comments or send us an email. Remember, we can treat your locks fairly quickly, and stop this threat, and also take a look at your properties security to see what other, often small, changes would enhance your security.

Happy New Year

January 5th, 2009

Happy New Year, to both my readers! /me waves to googlebot.

Trying to go to a job this morning, it took me 15 minutes to get up the drive. I was on the verge of giving up, and it was only a quarter inch of snow. However, good driving prevailed, and I even managed to not crash into the courier who was coming the other way on the lane. I did worry a bit as his van stopped alongside mine and started to slide sideways, though. Fortunately, he stopped a nice safe distance away, there was at least another 20mm before he’d have hit the wingmirror!

Take care out there.

Rogue Traders on “locksmiths” ‘down sarf’

December 6th, 2008

Seems there are a few rogue locksmiths running around down near Essex and London, and by charging over £200 a time to open simple – no, trivial – locks to gain entry for lock-outs, they got picked up and set up by Rogue Traders. You can watch the action at http://www.bbc.co.uk/iplayer/episode/b00fztby/b00fzl3c/Rogue_Traders_Series_7_Emergency_Call_Out/ and trust me, it is worth it!

There are at least 4 ways to open that door without damage to the door or the lock, 5 if you include smashing the window. Don’t get me wrong, there are some locks that look like the two featured locks that are quite hard to open, and sometimes you will get one that for whatever reason will not play, but in the last 100 doors I’ve opened of that style, I haven’t had to drill a single one.

I can honestly say I’ve never charged more than half what either of the featured Rogue Traders for opening a door. And, don’t forget, if I did drill your lock, I’d be replacing it free, under the ICL guarantee.

(Locksmiths who cannot pick a simple lock are, however, not as scary as the fake CORGI gasmen, though. At least with the locks it was just money, and not money and your life at risk when it turns out they are cowboys.)

Wired Keyboard keystroke sniffing

November 11th, 2008

It is quite old news that you can pick up the keystrokes from a target PC with a USB dongle, a PS/2 connector, or a bit of keystroke logging software, and it is also a few years since the majority of wireless keyboards were decrypted, meaning that it became trivial to eavesdrop on what a person was writing onscreen by looking at the radio transmissions from the keyboard. There is also a technique called “TEMPEST analysis” which records and displays what you see on your screen onto another PC.

Tempest is a sly reference to the storm of different electromagnetic (EM) radiation that comes out of a typical computer system. You see, every time an electron moves, there is an electric and magnetic feild that results. For a room temperature metal object, there is radio emmission in the millimetre range. (This is now being used for “see through your clothes” imaging cameras. I’ll post about that another day.) Warm things give off infra-red radiation. Very warm things glow.

Beyond that, to move the electrons around your PC and send signals, the electrons move back and forth, and give off some EM radio waves. These are longer wavelength, and travel through walls and air just fine, though they are very weak. The wires on your keyboard act just great as an aerial, so some people have been working on methods for reading these signals.

The videos below show this being done.

    Compromising Electromagnetic Emanations of Keyboards Experiment 1/2 from Martin Vuagnoux on Vimeo.

    Compromising Electromagnetic Emanations of Keyboards Experiment 2/2 from Martin Vuagnoux on Vimeo.

This isn’t something the “average person” should worry about, is what you normally hear when something like this is revealed, but who among us is average? As to the answer, well, currently there doesn’t seem to be one. Fortunately the range is short, so keep an eye out for people pointing satellite dishes at your house, and you should be fine. The other option is to make it a little harder for anyone trying. Buy a good keyboard, with a shielded cable, and make sure your PC case is done up properly. This will reduce the EM that is able to escape, and so make reading it even harder.