"Through the Eyes of a Thief" at DakotaCon 2023

I've given a version of this talk in the past, but each time I present it, it's always different... because the audience gets to select different stories and because my tales from the field that I tell are always changing.
This talk is also an interesting exploration of how technical difficulties can pop up wrong during a presentation. Around 43:43 the A/V system experiences a pretty crazy freeze/hang glitch and after some failed troubleshooting from the conference staff (during which time I am proud to have interacted with the audience and kept on presenting) I ultimately decided to shift my laptop to screen mirroring mode and not use Presenter View and then I concluded my entire presentation without any speaker notes.
How do you think I did? 😉👍
- -- ----- ----------
Sign up for give-away drawings here...
deviating.net/...
I'm on the Fediverse. When Twitter dies completely that's the best place to find me...
defcon.social/...
I still have my Twitter account. I mostly use it for making fun of Twitter...
/ deviantollam
I'm also on Instagram. I mostly use it for liking my friends' photos...
/ deviantollam
This is my GitHub. I post my design files there...
github.com/dev...
This is my personal web site. Most things i create wind up online...
deviating.net
This is my company. We're good at stuff...
enterthecore.net
This is where i train. Come and learn badass skills...
redteamallianc...
- -- ----- ----------

[@jayschafer1760]

I love the "You Don't Work Here" story and the point about community. The prototypical "nosey little old lady" who rarely leaves her house is one of the best and cheapest surveillance systems you can get, if you live near a person like that and treat them right.

[@Gantradies]

an occasional chat, share a little gossip, and invite her when you have a barbecue, and you'll have advanced warning whenever someone's been poking around.... also a neighbor who you probably wont have fights with, and a new friend!

[@jayschafer1760]

@@Gantradies Exactly!

[@phobos258]

​@@jayschafer1760lol exactly! a few weeks we moved the nice old lady across from us yelled at my wife for putting a bag of dog poop in our driveway as she passed back by on a longer walk. she apologized after she recognized her but I thought it was amazing. free security!

[@PikeyScott]

Can confirm.

[@SunRabbit]

True. I was once looking at a house to buy and I asked the realtor "so, have there been any home robberies here?" and a little old lady walking by heard that and instantly started talking. "Yes, that house across the street got robbed, that house over there they used pickaxes to get through the door, that house there..." The realtor wasn't having any of it, and at one point tried to physically push her away. I just got in my car and left, but not before explicitly thanking that old lady. But man, that realtor was PISSED! This was in Vrbicany, Czech Republic.

[@Ghost_Os]

Speaking as a locksmith, one of the issues with proper door fitment, latches and strikes in particular, is duration. If you live in an area where there's a lot of seasonal shifting, old buildings, etc., people, both residential and commercial, get tired of their doors not latching properly. If they call you out to do a job, and a month or three later, they're fighting with their latches, they're usually not calling you back; for anything. And if they do, they're not going to be happy, they'll want the problem fixed for free, and they don't want to hear that it's because the foundation is shifting, or that portion of the house or building needs to be jacked up and re-enforced, or the door casement is worn out and really needs replacing. Or that it's the wild temperature and humidity swings, even when they know it. Or some combination of factors; they just want it to work. To open and close without a fight, and to stay closed until it's physically turned by a hand. So they ask for a big hole that the latch will just fall into. Point out all the security problems with that, most of them don't care. "I've never been broken into" (yet). "I have guns" (are you always home? Have a gun in your hand at all times, even when you're asleep? Do criminals sometimes have guns too? Would you rather chance a gunfight in your home, putting your and your family's lives and well-being at risk, rather than having your strikes properly adjusted a few times a year?)... So it's frustrating from our end as well.

[@derekbroestler7687]

That tends to be more a residential issue. Typically commercial and industrial doors don't tend to shift as much, but as far as residential goes... I hope this helps. As a locksmith myself, who lives in the coastal southeastern US, so large seasonal shifts in temp and humidity, and a lot of old buildings, loads of thick weatherstripping. SOME of that can be mitigated with door hardening packages, as replacing the half or 3/4 screws especially on the hinge side (and even better with jamb pins installed) can make a BIG fairly long term difference once you get into the 4in stainless deck screw range so it penetrates the frame, and also both studs. The other thing I do personally is push deadbolts.. It still amazes me that people trust knob locks on exterior doors for residences. Also (and I don't mean this as a slight, but not everyone in the business knows) learning how to shim a hinge, and investing in a hinge doctor, can make a BIG difference... As well as making sure you know WHY the door isn't latching, is it sagging and catching the plate at the bottom of the hole, or is the door unable to properly close all the way... Two separate remedies. Next is just customer education... I get big surges of "door sag/swell" calls in both spring and fall, especially from folks who recently moved here. I start educating them over the phone before I even go out, as soon as I suspect that's the case. Sometimes you just have to politely explain to folks, "you live in a 60 year old house, in an area that can get 30 degree, and 40% humidity shifts over the course of a day, and you have wood doors (and/or frames), this is just part of home maintenance from time to time."... If you can get the knack for explaining it to them the way WE understand it, without talking over, or down at them, they're usually pretty understanding. I get very few "make good" calls... Maybe one a year, at which point I just eat the cost, because maybe I missed something and making it right is free advertising. Lastly is modifying the deadlatch strike, after making sure it's the right one to begin with... If the door is starting to sag and won't latch and can't be adjusted up at the bottom to get it back in line, grinding out a 1/16th at the bottom of the strike isn't going to effect security on the door... If it's a swell issue where the door isn't dead latching because the door isn't closing far enough, or closing too far and the deadlatch pin is going inside the strike, WORST CASE, I mean we have almost a quarter inch to play with if the strike was installed even BARELY right, and both Schlage and Kwikest both have that backing tab that faces the opening side.. If I need to, I'll either cut it down, or bend it flat and Dremel it down and then just replace the screws with more substantial ones to compensate for whatever BARELY measurable loss of kick resistance the tab provided. It won't impact kickin resistance on a customer grade residential lock and frame either way, but it WILL prevent the latch from being slipped while providing smooth operation.

[@Ghost_Os]

@@derekbroestler7687 Good points, all. I also make use of 4 inch screws on the hinge side, shimming and/or adjusting the knuckles as necessary, and will also make use of the self-drilling wall anchors (the semi-conical shaped metal ones with the aggressive thread). I find one of these installed behind the top hinge, along with the 4 inch screws will resolve a lot of sagging issues if not caused by the frame itself shifting badly for one reason or another. For industrial applications, you're dead on, the build quality is simply much better, as are the larger, more well funded commercial buildings. In my area, there exist a lot of businesses housed within all wood buildings, some of which date back to over a hundred years old. Many are converted houses, or old sawmills, etc.. Unfortunately, many of the conversions begin and end with the construction or removal of a few non-load bearing internal walls, and a paint job. Small, rural town in the north-east, surrounded by more of the same. I personally prefer it over cities, and honestly think it's pretty cool that we have this many old buildings still around and kicking. I appreciate your detailed reply, and you're spot on with your observations. Maybe I try to provide too much detail when I explain the issues. I want them to have a thorough understanding of what affects the hardware, but maybe it comes off the wrong way. I like your tactic of explaining that it's simply part of the maintenance from time to time. Appreciate the response, thank you again 🍷

[@Chirael]

@@Ghost_Os I appreciate all your detail 🙏

[@derekbroestler7687]

​@@Ghost_Os I appreciate the response and also that you understood my "tone"... Sometimes it's hard making suggestions to another locksmith because neither of us knows what knowledge the other has. As for the type of buildings and doors you're working on, I know EXACTLY the type. I didn't mention it earlier, but I'm based out of Savannah, GA, so a LOT of old buildings... and locks, to the point that one of my specializations is antique lock keymaking, opening, repair and restoration, and I love it too, but working on older doors and locks just comes with it's own set of problems that a lot of locksmiths in newer areas almost never encounter. I sounds like your setup and knowledge is on point and it's just it's just a customer education issue. I've found that's always a fine line, simply because most people see and use doors all the time, consider them to be really simple, and never realize all of the factors, tolerances, and considerations, that go into good door fitment, even BEFORE the issue of locks comes up. . When I get a call about a door not shutting, latching, hard to lock, etc, I automattically think alignment, so if it's "hard to lock" I'll ask them to open the door and lock the deadbolt with the door open. Nine times out of ten, surprised customer tells me it's now working just fine. That's when I typically start with the basics "Sounds like a door-swell issues, see, doors and frames expand and contract with temperature and humidity, and houses settle, this can throw off the alignment and that can cause a lot of problems as the seasons change... ". Right off the bat they're more inclined to consider my suggestions because I've diagnosed the problem over the phone. Then if they're interested or it seems like they don't believe it's that complicated, I might give an example, like "Most latches and bolts needs to be within 1/8 of an inch of center to work properly, but if each of the three sides of the door frame are 1/32 off, it won't work without adjustment" That might lead them to ask what's involved (which I've found usually means, 'how much'), so I might say "It's hard to say without looking at it, but my service charge is $X, and if it's going to be any more than that, after I look at the door, I'll give you a quote before I begin working on it and you can decide if you want to continue." Also, if they call me for a door that's REALLY bad off, and I do an adjustment, I ALWAYS ask if they have any other doors that "are starting to stick" Since those are typically MUCH easier adjustments (tightening top hinge screws, etc), I'll price them accordingly at a much cheaper rate (or even free if it's THAT simple), and make it a point to say something like, "I'm glad you pointed that out to me so it could be fixed before it got too bad, so in the future if you notice another door starting to stick, give me a call as soon as you notice it." IME, that helps them understand the idea that it's not a "one and done, never worry about it again" issue and that it may just be part of yearly or every few years maintenance in some, especially older homes. Hope that helps a bit.

[@Ghost_Os]

@@derekbroestler7687 Many thanks for all the additional detail, my friend. I know what you mean about "tone", and making suggestions; I always happy to hear them though, you never know when someone might have an idea you never thought of. I had one customer about 4 years ago who had constant push/pull issues; when it was warm, it would either work fine, or he would have to give it a little extra push while turning the deadbolt. When it would get cold, he would have to pull on the door while turning the deadbolt. Because the weather here is a bit crazy, it was a constant battle for him. For example, a few days ago we were having mid-eighties for highs and lows around forty. Today, our high was 38, and our low will be around 12. When I got the call, it was during a cold period, but knowing he sometimes had to give the door that extra shove when it was warm, I moved the strike about 1/16 inwards, and then made a small cross-shaped slit in the weather seal in between the knobset and deadbolt (I had tiny holes drilled at all four "points" of the cross slit to prevent continued splitting). Sunk a screw into the center of that, and it acted as an adjustable stop. So all he had to do is drive the screw a little further in when it got warm, and if it got to the point where he was having to pull on the door, back the screw out a little bit. Since he never had up and down issues, it was about as perfect a solution as could be had; he could easily adjust it himself as needed, but the screw head was hidden inside the weather seal. Which meant not only was it not an 'eyesore', but the weather seal would protect the door from being marred by the screw head. Ran into him a week or two ago, still working out just fine. If I did it again, I would probably epoxy a rubber washer onto the screw head as an added hedge against damage to the door or seal, but he said it hasn't been an issue. I'm definitely going to be embracing your style of explaining the issues with future calls. It seems like have a really nice balance in providing sufficient detail, without over-explaining. Thanks again, I really do appreciate the time and thought you put into your replies 😊🍷

[@badgermetal]

Solid advice on the security cameras. Having your video files sent to the police without you knowing shouldn't even be a possibility. When you sign up for the subscription you signed for things that give the service provider unlimited access. I don't think most people realize that.

[@ICountFrom0]

You've taught me to think differently about security. This leads to me asking questions like, "How hard WOULD it be to bypass a padlock on a pool room door at a golf club".

[@RowenStipe]

I dont know about pool room golf course, but as an irrigation tech that needed to do work in apartment complex pool areas. 7 feet of 1/4 inch PVC can get you into a lot of pool areas.

[@An_Attempt]

Probably not very.

[@MichaelBerthelsen]

Pretty easy, if you're thinking of a particular Southern golf club, I suspect...😏😉

[@qwerty277]

You aren't kidding I was at a local brewery for a get together went out to smoke and noticed the back door, the one deliveries to the brew room go through, and thought huh I wonder if they changed that code when they set the lock up. 2, and 4, 3. Handle turns. Guess not. Let the brew master know he should probably have it changed...

[@J.C...]

Quite easy with a rake pick or a comb pick 🤣

[@MorningDusk7734]

I would love to see a set of each of those ending stories, either as clips from telling them at different events, or if you were to just record them directly for the channel!

[@Atlessa]

I second this request.

[@GaidinBDJ]

For those induction loop sensors in the floor/pavement, you can trip those with a decent-size neodymium magnet if you have a way to toss it through on top of the sensor. I learned that trick driving a scooter, which typically have too little metal to trip a lot of street sensors. I just epoxied a couple Gerber-tool-sized magnets to the bottom and it works a charm. They're not always the friendliest things to throw into a bag with other electronics, but it's an option and still easier to carry than an extension ladder.

[@qwerty277]

I have had luck with a 1/3 sized metal pan. Used to mess with my coworkers in the drive through when it was slow.

[@tristan7216]

"All the stuff I'm telling you is probably on KZbin in one way or another" Puts the talk on KZbin 😸

[@kndkid08]

I am an EMT, and can not tell you how many times I had to wait to get into buildings to help someone. I did have to force entry before and he was tough. Plan to utilize some of this knowledge going forward. Love watching your videos and talks! Great stuff!

[@scorinth]

I know it's waaaay later, but did you see the training talk he gave about non-destructive entry techniques to first responders for just that kind of situation? An attendee recorded and uploaded it. Good stuff.

[@kndkid08]

@@scorinth I dont believe I have, but I will for sure take a look!

[@myname-mz3lo]

he made slideshows for all the 8 stories at the end even though he knew people would vote and he would only tell two of them . that is amazing effort! respect

[@jk9554]

He reused them a few times by now (and every time I'm like: "I want to hear all the other ones, too!")

[@LakeVermilionDreams]

Feeding the KZbin machine with a full viewing of the talk and a comment! Ibwas showing off Deviant's work to my family yesterday after Easter dinner. They were very interested and a little surprised at how some of the door techniques were so easy and effective!

[@williamroark4760]

Scary thought; as a crane operator, running a 55 ton crane, my cab access/ignition key is a CH751. Every other crane, identical to mine (and likely other weight ratings), uses the same said key.

[@leechowning2712]

Go look for an older video of his... I normally just search "Deviant Ollam 'this is your key""... it is an hour long video on fleet keys and master keys... you will be more than a little concerned to discover how deep that rabbit hole goes. Working construction, it has several things that are important to your jobsites.

[@jbradhicks]

I've worked in both defense contracting and financial services, and nearly every filing cabinet in their offices was CH751. The only reason anything works is that if the cabinet (or door or whatever) is locked and you're inside it, you can't use the excuse "it wasn't locked."

[@BillyONeal]

CH751s protecting CH751s is freaking perfect

[@matthewellisor5835]

I absolutely love the "You don't work here" story and I have a few people who are about to get a link to that clip. Here's hoping they are interested enough to watch the rest.

[@gonzostwin1]

I drive by my work every night after dinner, if the lights are on I go right in and start asking questions

[@Mueller3D]

Note that you don't need a "loop of wire" if you've got two random keys. Just push the keys' bows together and use the tips to touch the contacts.

[@si1entdave]

There's so much of this stuff that doesn't work in Europe, largely because of the Americans with Disabilities Act being the source of a lot of the emergency egress/accessibility/fire access codes. I'd love to see Deviant do a version of this talk that was more UK/Euro-centric.

[@Alan_Hans__]

I love watching these videos and the stories are absolutely the best things about them. The "you don't belong here" guy was an absolute credit to their company.

[@Trev488]

Human security is the ultimate security. Make sure you treat your people right, they'll make sure the company stays alive.

[@AttilaAsztalos]

The problem with that is that 0.00% of companies see any value in expending any cost whatsoever on treating people right in order to get better human security when 99.99% of them will never actually be attacked by anyone. And the 0.01% that actually do will just install a new alarm system. As a confidence artist being familiar with human nature, Ollam should be the first to know that his message is 100.000000000000000% wasted.

[@LeonoraTindall]

Thank you for sharing this talk, Deviant. Amazing info, entertaining presentation. And thank you for being such a staunch supporter of civil rights ❤️

[@Flourish38]

Thank you, thank you for the slide at 1:30:40 and the associated words. It means a lot. 💗

[@bandoleerwaltzer4912]

This! ❤

[@itsasecret2298]

The more stories I see from this guy the more I realize that every security measure can be defeated with ease by someone with the right knowledge. The only real security is vigilant employees that all know each other.

[@derekbroestler7687]

Great vid as usual. BTW, props to you for posting that map and explaining your reasons for not wanting to come to some areas... NO ONE should feel unsafe just because of who they are.

[@ICountFrom0]

That map alone has me wanting to buy him a drink or coffee or whatever if he's coming through my town.

[@mlybolt]

1:30:50 Hell yes! My whole family are ‘fleeing’ FL for MA this summer for this reason!

[@purplegill10]

As someone in a state where those rights are slowly becoming at-risk, I was beyond happy that he mentioned that.

[@davidabest7195]

How are they unsafe?

[@MrLbsrdi]

@@davidabest7195I don’t expect that you will receive an actual answer to your question.

[@matthewcathcart803]

I have been wondering when you would do another talk, always fun to watch these

[@TheMyname707]

Looking forward to this talk. Watched the last one multiple times but sadly the audience always picked the same story's. 😅

[@DeviantOllam]

yeah, we got a few new stories this time!

[@TheMyname707]

👍 Thank you very much!

[@SkylerLinux]

A good watch, and your talks always gets me thinking on having something hacker-y on hand.

[@DeviantOllam]

yeah... having the right tools on you at all times is a help =)

[@canoepick1140]

Love this talk I remember the older version of this too.

[@EzraColdsGarage]

That "I'm not going to places that aren't safe for my loved ones" part at the end, means a lot to me. I had to leave Georgia because it just outright wasn't safe anymore.

[@tlhIngan]

Lever door handles are part of building code even for residential buildings these days for the same reason - it's for people who cannot get a grip on a knob. (It's also handy for people to just use an elbow to get in and out). The only difference is residential has deadbolts - the door latch is just a door latch - no need to use an under-door attack when you can use the door lever. The door security comes from the deadbolt.

[@ok9nja741]

Aside from the talk about keys you did with Howard, I think this is pretty much your best security-related talk ever. 👍

[@ketsuekikumori9145]

Ian of Forgotten Weapons recently covered the Biofire gun, a "smart" gun. I'd be curious about your takes on the security of the gun, and ways to break or bypass it's security.

[@johnnydjiurkopff]

Probably amounts to something akin to the doorking exploit or physically modifying the safety mechanism.

[@flamingcacti]

I remember my previous apartment had a doorking keypad and rfid reader. On ours, you could brute force by pressing random keys until you happened to press someone’s combo. Everyone had different numbers so it was quick, lots of combos.

[@Skusty]

The second story was interesting, isn't it amazing that community is a big safety shield for most purposes. Sometimes when I'm out driving on the weekend, say I have been to the store, I'll take a swing through the local industrial area where my workplace parks it's trucks and take a peek, I also take a peek at my friends trucks and properties and if something feels off, I'll send them a message. We can all keep an eye out for each other.

[@bolivianPsyOp]

11:43 I was waiting for the "replace these with fuck all" but didn't get it lol

[@matthewellisor5835]

Same

[@Mycatisinapiano]

I relistened to that talk yesterday and was a little disappointed he was calmer in his execution this time

[@acidhelm]

+

[@sanjaraejour9632]

Thanks for posting this! A refresher on stuff you've posted before is always nice, and I did catch some new things too. Also, thank you for posting that map at the end.

[@Simon-ho6ly]

We have those vehicle sensors at work on our yard gate, tied to a really awful sim enabled telephony thing to inside the store... when the sim decides it doesnt want to dial, we walk out and wave a crowbar at the ground, enough metal to register as a vehicle trying to exit and let the inbound driver in...

[@skylark.kraken]

I was sharing a hotel room with my brother a couple months ago and the door not only doesn't close fully when it closes itself but it resists being pushed and the only way to close it was to push it and there was a lot of friction. I would go to the room first and go to sleep, my brother would come up and go to sleep. I would wake up in the morning to find that the door not only wasn't locked but it wasn't even closed. I told my brother to close the door and turn the deadlock but he didn't and I ended up having to wake up at 3am after I know he would have gone to bed to close and lock the door and the door required a push and when it finally closes it slams shut which is the excuse my brother gave as to not doing it. I don't want to sleep in a room that is open even if the hotel we are in is family focussed, there shouldn't be random people, but it's all open and someone can walk in and check doors, bother is a guy and doesn't feel the same kind of threat he doesn't care about himself or his things there's no way he cares about me and my things. (As a bonus the keys for the door are dimple keys and fully aware of just how trivial it is to bypass, so much so "picking" feels like it requires even just a touch of effort) I had made a request to the reception day 1 when I noticed the door was difficult to close that I want it fixed. They said they would, they didn't, I requested a new room but they said they didn't have any free rooms. I left some feedback in the form of a review, because hotels respond to reviews in the hopes you'll delete the review (by all means when told it is definitely fixed in public you can update the rating but don't delete the review just add an edit at the top saying that they have claimed to have fixed it), I knew the room I was in I figured I may as well try and search for the room number in the off-chance someone had also had this as an issue, there was and the review was a year old.

[@littlesnowflakepunk855]

Honestly wasn't sure about subbing to this channel until you popped the anti-trans law map up and said "I won't be going to these states." World needs more people like you. Although, maybe not with as much infiltration skill, lol

[@lillian4976]

I really enjoyed this, and really appreciated you mentioning Erin’s map of the US. 💜🏳️‍⚧️

[@-r-495]

I wonder how you’d do in Europe 😊 Thank you for taking a stand for the values you live by.

[@sonnyjimbod]

53:58 Those cabinet locks are trivial to pop with a small flat headed screwdriver. I figure since it's the drugs cabinet it has to be forcible just in case they lose the keys or something

[@heatshield]

1:21:40 Nicely said, brother. 👏

[@DjResR]

13:01 - That's why I always pull the door shut and confirm it's locked before going out of my hotel room whenever I'm in one._

[@davidp2of3]

I love these, I've seen a bunch of them you've posted to KZbin through the years. And you do start to view the world differently. Just bc I can doesn't mean I ever will. But it's cool to have the ability.

[@davidp2of3]

And yes in NorCal an Feok1 key and a door king keys are on my keychain. In case life goes sideways

[@Segphalt]

I think I have seen every rendition of this talk in the past 10 years, every time I re-learn something I forgot since last time.

[@anoobhey5798]

55:13 An RFID talk would be awesome!

[@bolivianPsyOp]

Used to live in Nevada and one of my favorite things to do after drinks in casino/hotel/resort bars/restaurants was to just try door handles for public/non public areas. I figure if the door opens and nobody asks me to leave then I’m in the clear. Worst case scenario I play up my inebriation and say I was looking for a bathroom ¯\_(ツ)_/¯

[@ClickClack_Bam]

&? What adventures have you wandered into?

[@RXbee2]

A jail cell?

[@BruteClaw]

I just found another CH751 lock that scared me a little yesterday. 800 ton York Water Chiller VSD cabinet and the control panel. The VSD cabinet has 480 VAC three phase at 13 kilowatts available on large copper bus bars. And large banks of capacitors. I know on that equipment it is more for keeping the curious person away from the hazardous environment inside there. But the fact that they used the most common key in the world to secure it 🤦‍♂

[@NeilAmbroseUK]

Assuming German Prisons are similar to UK ones there are usually only a few different keys for the whole establishment. In the UK you have singles, locks with just a single keyhole each side, and doubles, locks with two keyholes each side. At night or during an incident (perhaps if a set of keys is stolen or misplaced) the officer in charge will lock the the doubles (using a special key in the second keyhole) which renders the usual key inoperable. The other types of key is are for actual cells and vehicle gates. If a person photo of one of those four keys is taken then all the locks of that type are compromised. That said I suspect they would just relock the establishment and put the compromised locks on a shelf to reuse later at a different location. Costly in time.

[@CONEHEADDK]

Expect that they will fook up.. Humans are lazy, and very often not impressively bright.

[@HenryLoenwind]

Guessing based on current German standards, I'd guess the compromised key was the master for the prisoners' locks. Those are just standard locks the prisoners can use for privacy, so there's no real need to not have all cell doors on the same master. The guard lock on the cell is the important one, and those are probably one per tract without a master.

[@jon_j__]

I've heard most of this before, but it's always fun to get a refresher. However, @1:30:45, that map is truly worrying. Stay safe out there!

[@ExploitSage]

The state of Anti-Trans and Anti-LGBTQ+ Legislation right now is truly terrifying...

[@rooster6271]

Another talk thank you Deviant! :) Might sound weird to you but I can listen to you talk all day, not much else catches my interest like your presentations.

[@sfdntk]

Same here, he's such a font of information, and he presents so clearly and entertainingly. I'm not particularly invested in any of the topics he covers, I don't pick locks for a hobby, don't shoot or own guns, don't have cause to fiddle around in elevator pits, but I'll gladly watch Deviant talk about any topic that catches his fancy, any time, anywhere.

[@spacecat85]

here's a thing from overseas (large city in Germany): I have never seen key boxes here (the little personal ones that is, doesn't mean they're not a thing, obvs, but people don't leave keys anywhere visible, and the good old key under the flower pot or in the garden shed is still a thing in rural areas). what I have seen is the garbage collectors with huge key rings to all the buildings on their route. technicians usually have to ring at somebody's apartment or get building management. in many older buildings I've lived here, the door fitting is pathetic at best, outside doors / gates sometimes don't lock at all, so you can just walk into the property. this is residental only, not sure what they do on commercial buildings tbh, tho I've walked into quite a few of those unquestioned before (people seem to just assume you got an appointment or something, tho obvs ymmv).

[@jmr]

Someone I know was robbed because they didn't have secure hinge pins.

[@fellzer]

I've been watching Deviant's talks for over a decade and recently revisited to catch up. It's so disappointing that he always teased the COOLEST shit for the after parties we never see 😅 I have no excuse to ever attend one of these talks but it's be a dream to be there.

[@Coderjo.]

Thank you for including the segment about places that some of us cannot safely travel. Hopefully things improve there, but I am not holding my breath.

[@DeviantOllam]

absolutely. living it up on vacations and non-essential travel to places like Texas or Florida right now is roughly akin to posting selfies from the dining room of a private club that doesn't allow black members (a few of which still exist, it's shocking to note)

[@1slave25]

@@DeviantOllam I'm starting to give serious thought into leaving my home state of Florida. While I have a network in Colorado, if my girlfriend were to move with me there and we end up separating, she's SOL. My parents are entering their mid 60s, and they're going to be losing mobility and will need medical help. I feel almost trapped, and I don't know what to do. Do you have any resources or advice that I might be able to look into?

[@ICountFrom0]

Hay Ollam, if your in Vermont, going up my way, I'll buy you a drink or whatever, cause that map needs showing.

[@grandwazoo18]

Holy libtards

[@damnperrys1]

Thank you so much for sharing! Always a good time to listen and get a peek into what you do!

[@markf8819]

Really appreciate anouther talk

[@kaweewattt]

I once walked up to a guard, asked him for his key card, cloned it with my phone in front of him, said thank you and left. Then I had the unrestricted access to the facility.

[@FreshApplePie]

such a cool job. like planning heists, but you're also paid for it.

[@keiths.7634]

Dev, I have to thank you for these videos. I have used the '35mm film' technique in the field by using a piece of Tyvek with a paperclip for weight.

[@seven_sixtwo]

39:22 man, I swear I did not read that as "otis" on the side of that box, i really thought that someone wrote on the side of the lockbox that the code to it was "5170" lol always love these talks, dev!

[@superdrummergaming]

Buddy of mine got trapped in one of our flammable vaults at work(about 20x40 feet, half full of drums of solvent). The handle just no longer did anything from either side. The room has forced air and forced ventilation, so he wasn't in danger. I called maintenance and he was trying to slip the latch or use a knife to pull the strike back. That didn't work because it had a dead latch. I realized this after one of your talks and looked around. It's just a 4x8 hollow steel door and it's technically "mine". We could rip the door open with a forklift, but wait, I see hinges. Let's pop the pins! Two minutes later, he was free. He got 15 minutes of overtime out of the deal and we got a new handle set. However, the dipshit safety guy got the replacement at home depot(with a dead latch) and put a piece of tape over the keyway. I'm the department supervisor and I have no idea who has the key. It's not in my office and it's not with my guys. That's a problem. I'm gonna grind the dead latch plunger off on Monday. Then, I can bark at safety man until he uses appropriate hardware. Also, I've let contractors into the building with my badge. However, they had a local, known company vehicle with a $2,000 brand wrap, full of specific gear, showed me personal and company ID, and I called maintenance to know if they were expected. Then I led them directly to the maintenance department, where 6 guys knew them by name. Mark and Tom are on my whitelist now because they keep the A/C running. The snack machine guy is also on the whitelist, but he has his own (limited) badge.

[@kos-4869]

love this updated version of the talk, tho id love to some day hear those less voted on stories :p and as a trans person myself, seeing you publicly support our rights? it means a lot, really. you are truly one of the coolest people on the planet, wishing you all the best!

[@casey6556]

Same, same, and same Very nice to see

[@dynagaming2693]

I love how stupid DKS is, literally publishing the new keys they're using.

[@Marineio]

Security of keys? Just a CH751 right there in the middle.

[@Kas_Styles]

As always great talk. 48:50 Linear key code 49:50 Door King key code Also 51:40 for Door King

[@bvhnightmare]

Old folk in small town do some of the best police work ever

[@gonzostwin1]

@48:27 codes like 0000 and 9999 are always left active

[@eyelessjack3406]

Man i sure miss you on twitter dude. But understandable why not! you truly are a treasure trove of knowledge and i really respect that shit. Said it before, say it again, you live a very fascinating life.

[@eyelessjack3406]

two things i want to note.. that fucking map is heartbreaking.. but that those letters.. shows the power of knowledge.

[@Ghosthuntert1]

As an access control tech here in Australia, Everyone of the reader units we use includes a Anti-Tamper switch . Most clients prefer that we connect the tamper system to the controllers security lock as this will disable that reader until reset at the controller. We can then check the entry camera. Some, ask that the tamper circuit be connected to the Security Alarm and initiate a full alarm condition which locks out EVERY reader until reset at both the alarm box and access controller. Again, entry camera footage is checked. But I didnt see any form of anti tamper switch ( microswitch type or reed switch type ) on the readers you tamper with. Why not, especially seen as the manufacturer knows about this type of attack.... What do you think ?

[@F3ST3Rfilms]

Typically people love the idea... Until they find out it costs extra..

[@dchil15]

Money/time. Client didn't want to pay. Installer didn't want to spend the time.

[@FulcanelliRosetta]

And now my lockpick collection grows. Thanks Dev!

[@matthewmiller6068]

I had a rental with a shed that they lost the keys...I discovered it was CH751...you know its actually hard to buy less than about 5 copies at a time online? No, I didn't depend on it or more than keeping the doors from blowing open.

[@1slave25]

Hope the whiskey was something cheap!

[@DeviantOllam]

Jim Beam on ice. worth it. =)

[@Grim-bx3ox]

My personal favorite break in was using weed whacker string to bypass a metal plate protecting the door latch to break into a large telecom facility.

[@jadenknott]

The story at 1:00:02 is the definition of just chaotic evil i just love it lmfao

[@mikek6298]

Lol I hear "just a second about door latches, because you aren't hardware installers." As I run to the hardware store to replace a door latch for work

[@CoyoteMossy]

Neat to know what the number means on my "open almost any door" key as a school janitor. I figured it had something to do with being the "code" for that key. I had no idea it was so direct instead of some sort of internal secret code from the company that makes the locks

[@matthewmiller6068]

Hotel doors seems 50/50 if they will close properly...always check the door entering/leaving the room that it really locks

[@Laura-hl3hg]

I'm trans and seeing you just casually support trans people really warmed my heart. It's sad how often transphobia is the standard, and it's nice to see not everyone is like that.

[@grandwazoo18]

🤪

[@CauseOfBSOD]

25:09 In the UK it is typically a big green button a few metres back from the door (not always) and sometimes shrouded. Press it, and whatever electronic lock it is unlocks.

[@glennj6465]

Excellent as usual from 🏴󠁧󠁢󠁥󠁮󠁧󠁿🇬🇧

[@matthewmiller6068]

Would be interested in how you are cloning the hotel keys to an implant - most I've stayed at seem to be MiFaire Ultralight and guides are only for MiFaire Classic. Not into implants but when at an event in costume it would be cool to have a ring/wristband to not lose without pockets

[@lyfandeth]

In hurricane areas, building codes now often require doors to open outward, so the wind or water rising can't blow your door in.

[@CriticalMassCongregation]

Now we need to see the belt and hear the other six stories!!

[@KateGrayCode]

In college, I applied for a loss prevention position in the Campus bookstore. They asked at the interview what I noticed, and I went through cameras, locks, etc. that I had noticed along the way. It didn’t make them feel better that someone noticed the poor wafer locks on their registers, the way they left money in them, or the bad camera coverage. I did not get the job.

[@ICountFrom0]

Did they stage a shoplifting while you were there and wanted you to notice it?

[@c420_nights]

"You're wrong about everything on the internet."

[@Kuddley_Peach]

YOO one of my favorite talks? new for 2023? Christmas in April!

[@freedomofchoice3606]

Why are so many states deemed as a no go zone for you and your family?

[@mlybolt]

Those (red) states are seriously hostile to transgender people. And especially cruel to trans kids.

[@thewhitefalcon8539]

They are unsafe because of socialist politicians

[@happypants19851]

After skimming tons of comments. I saw one person say they were trans and had to move to Massachusetts to avoid the new legislation. I don’t think it’s illegal to be trans. But I don’t really know

[@CauseOfBSOD]

13:24 that looks like an onity lock Even if the door was installed correctly, you can pop those open with cheap, readily available electronics.

[@sfdntk]

I always love the way Deviant annunciates the Ts in "bitting" whenever he says it, haha. It's like he's heavily invested in making sure nobody thinks he's saying "bidding". I also love absolutely everything else about Deviant, who is quite possibly the most interesting person in the world. And by the way, has there ever in the history of humanity been a presentation given at a tech-related conference that hasn't experienced endless troubles with the presentation software and / or hardware? It's amazing, even Defcon and Black Hat talks are absolutely plagued with technical difficulties.

[@Shuroii]

Hard to prep for so many different possible kinds of hardware/software unfortunately

[@sfdntk]

@@Shuroii It really shouldn't be that difficult, plenty of conferences handle multiple speakers with disparate hardware configurations and don't have anywhere near the volume of problems that Defcon and Black Hat et al seem to have. For example, you can mandate the presentation format to one or two specific platforms (PowerPoint for PC, Keynote for macOS for example) and require that presenters inform you ahead of time whether their presentation includes audio or video and if so allocate them a five minute slot to test their presentation on the equipment they'll be using on the day. You can either provide a specific machine that all presentations will be run on and require that presenters send a copy of their presentation a day or a week in advance so the organisers can do a test run with every presentation to make sure they all work, or if each presenter is allowed to use their own hardware, require that audio be output via headphone jack exclusively. There should be no reason whatsoever for audio and video not to work under those circumstances, the video component is simply screen mirroring and audio over headphone jack is completely agnostic to whatever hardware is amplifying the sound on the other end.

[@TheGoldenTNT]

God I could watch dev give this talk 100 times over.

[@m4rt_]

29:10 my work has spring loaded light switches that you press and the door unlocks.

[@JanWeigangMusic]

hey Deviant, I have never seen those dead latch-type doors in the EU (Germany), do you have comparitive experiences with other country's customs and security devices? Or maybe even a talk about the differences internationally?

[@2brazy4ubitch]

this would be an interesting topic....

[@Hans-gb4mv]

It's because in Europe we don't lock our doors that way. In the US, a lot of doors simply lock the latch that the door handle operates, in Europe, we add additional latches that are locked by the key. It makes the issue non existent on most European doors.

[@johanneswerner1140]

Except in many hotels...

[@tristan7216]

Bro has a flipper implanted in his hand 👋. Respect 🤙

[@eslachance]

25:00 ok but... no, why *can't* a push bar cut power? It's not like it's impossible to throw a pressure circuit in there and drop the maglock current when the pushbar is pushed. So why are REX sensors, more complicated and more expensive, preferred over a wired pushbar?

[@bobbing4snapples]

Every time i see a door with the magnet release in the crash-bar, the (usually armored) cable is damaged or very well worn. It's also vulnerable. Those would be my principle concerns.

[@matthewmiller6068]

I think most (all?) commercial off the shelf keys I have seen have the biting stamped on them? At least most/all the ones I have purchased at hardware stores seem to.

[@skellious]

Thanks for continuing to stand up for trans people ❤

[@RoamingAdhocrat]

dichloroethane…? that's a CFC isn't it? I thought they were all banned

[@MenloMarseilles]

depends on the use case. amount in a can of compressed air is minuscule compared to the amount in an air conditioner (which is where they've been axed in favor of other refrigerants)

[@pvandewyngaerde]

I have a feeling Europe has completely different flaws.

[@canoepick1140]

A lot of the flaws are physics and legal based. There are differences but they are mainly in the exact design of the tool used usually. Their windows tend to be multi sill, thicker more secure walls etc. but a lot of what he talks about such as keyed alike systems and fire code limitations also applies in Europe because they’re either safety, convenience or laziness based. Most hacks are just exploiting the human brain and the shortcuts it takes.

[@awmperry]

Yes - apart from anything else, everything’s made by different manufacturers, so the hacks in all the US-based videos are inapplicable. Sometimes - most of the time, probably - they’re replaced with other equivalent flaws. But sometimes they’re not; here in Sweden, for instance, security hinge pins are the norm (my flat door, installed in 1954, has them). Lock knobs are often covered by fold-up steel domes. And those lock plungers? They’re often separate from the bolt, so they can’t fall into the bolt hole. And then we don’t bother repairing cut fences because “nobody would want to sneak in”.

[@HenryLoenwind]

@@canoepick1140 Not necessarily. For example, fire exits using bump bars are next to unknown in Europe. Instead, there are special locks that also retract the deadbolt when the inside handle is used (to prevent latch slipping) and alarm boxes mounted below the handles that physically prevent them from being pushed unless the alarm box has been activated by rotating it out of the way. Another difference is in house door construction. Modern ones have sliding internal deadbolts, usually at least 4 of them in addition to the lock deadbolt. You won't bypass such a door when it's locked unless you turn the lock. On the other hand, there are still way too many improperly mounted lock cylinders you can easily snap off from the outside (although that's a destructive attack)---American "in handle" cylinders never had that vulnerability.

[@canoepick1140]

@@HenryLoenwind like you said different flaws. Your windows require different shims, and latch attacks are much rarer but snap offs are feasible much like latch slipping here. It’s just different. As a whole I’d rate it more secure though.

[@NoGasta]

Red team work sounds like so much fun but I sweat way too much when I'm nervous

[@ssprinklep9107]

Man I'm glad you do what you do. I like the things you do

[@yeetyeet7070]

great talk