Saturday, August 11, 2007
High security locks can be picked. Time to worry?
A researcher named Marc Webber Tobias has shown a way to pick Medeco high security locks.
I was skeptical because Medeco locks have a design feature to prevent the kind of attack he used.
It turns out that if you make a small collection of what are called "bump keys" you can work around the security feature and open any Medeco lock. Making them would require skill, computation and maybe some special equipment. Using them would take some practice but would not be rocket science.
Time to worry? Maybe not. The average residential burglar is going to kick the door in or come in through a window anyway. The issue is that if someone does pick a lock, you can't show your insurance company evidence of forced entry.
Medeco has already made a design change to prevent the attack and is about to start manufacturing locks with the new design. I'm going to wait and see. The world is full of quick security fixes that turned out not to fix the problem permanently.
|
I was skeptical because Medeco locks have a design feature to prevent the kind of attack he used.
It turns out that if you make a small collection of what are called "bump keys" you can work around the security feature and open any Medeco lock. Making them would require skill, computation and maybe some special equipment. Using them would take some practice but would not be rocket science.
Time to worry? Maybe not. The average residential burglar is going to kick the door in or come in through a window anyway. The issue is that if someone does pick a lock, you can't show your insurance company evidence of forced entry.
Medeco has already made a design change to prevent the attack and is about to start manufacturing locks with the new design. I'm going to wait and see. The world is full of quick security fixes that turned out not to fix the problem permanently.