You Attack These Just with Wires (Capacitive Touch Bars)

[@fieryweasel]

This is a great example of why I take my body's electric field with me whenever I go out. You never know when it's going to come in handy.

[@JessicaFEREM]

ugh I hate when I leave my nervous system at home!

[@ErdTirdMans]

After watching this video, it'll stayed packed in my site bag going forward!

[@fieryweasel]

@@JessicaFEREM I always bring my teeth to the dentist for the same reason.

[@petergerdes1094]

I always forget mine.

[@russianbear0027]

IRRC there are disabilities that make using things like capacitive touchscreens (and presumably doors like this) difficult to use because of how it messes with your skins conductivity etc. I don't recall the mechanism for it though.

[@CraftComputing]

I saw the video title for cap exit bars, and immediately thought of this Johnny Long talk. SO HAPPY to see it included!

[@DeviantOllam]

we all stand on the shoulders of giants who came before us, indeed

[@seeigecannon]

Years ago, after watching the No Tech Hacking talk, I actually designed a manufacturing fixture featuring this 'attack'. We had a big industrial wire crimping machine where the operator has to insert the wire into the correct position and hit a foot pedal to cycle the machine. It was easy to not have the wire in the correct position giving a bad crimp. I designed a box using the same type of capacitive touch sensor so the operator could hit a switch on the control box, then just hold down the foot pedal and when the wire is in the correct position it would touch the sensor and automatically fire the machine.

[@DeviantOllam]

That's really cool!

[@TwoScoopsofDestroyer]

"A mag lock can only be opened electronically" 😂 That's a good one. Senior and Junior wrestlers at my hoghschool used to open the door to the wrestling room by pulling so hard that the door would twist, giving them leverage against the mag, and after they opened enough separation they could pull the door fully open.

[@captainwonders7708]

"Just pull harder"

[@stevebabiak6997]

They were “hog” types so therefore they were more powerful. ;)

[@frollard]

That sounds like a failure of the installer: The iron plate part on the mount should be 'floppy' on a central bolt so that any leverage on the door doesn't torque the magnetic interface. if it's solidly mounted, the leverage weakens the joint significantly.

[@davidmacon1138]

Same with barracks mag locked doors. Cadre staff sergeant saw me rip it open and looked at me for like 2 minutes trying to figure out just how the hell I did that.

[@TwoScoopsofDestroyer]

@@frollard Eh, the doors were fairly tall doors, and for some reason all the door hardware (with a good handle to grab) was like a foot lower than normal in that building, plus relatively flimsy metal interior doors.

[@chadvanderlinden9548]

Lol, this reminds me of when I was working the evening shift with one coworker. I had gone outside the office to get something from my vehicle, but realized I'd forgotten my key card. To get my coworker's attention, I hiked around the building, climbed a transformer to get onto the roof of the strip-mall side of our campus, and walked along that to get to the window in our server room. Then, I pounded on the glass until he eventually came to investigate. He gestured that he would meet me at the door to let me in. When I got to the door, he was taking a smoking break. Then he realized HE'D forgotten his key card too! Fortunately he had his car keys and got a bit of metal out of his trunk which he slipped between the locked doors to touch the capacitive bar. Good times!

[@buitenaards]

Security mishaps like these always make me go like "Hmph, would ya look at that!" Funny and kind of embarrassing. Good stuff, Deviant!

[@johncage5368]

4:20 "We haven't done a give-away in a while." Me thinking: Wet Toool merch washcloths? 😉😂

[@DeviantOllam]

hahah... bringin' back the sham-wow

[@wobblysauce]

I Wash Myself With A Rag On A Stick

[@EyeKnowRaff]

#WetBandits

[@DeviantOllam]

@@EyeKnowRaff hah

[@MikrySoft]

In a similar vein, I saw a tip on how to quickly test ceramic or sand filled fuses - stand one upright on your phone screen and see if the touch registers through it

[@JackieBright]

This is genius, I have to check ceramic fuses occasionally at work and it sucks having to go grab a multimete

[@HaileySchmailey]

We’ve talked before. I have a job that allows me to enter buildings (regardless of how the owner feels about it) and I use a lot of your techniques. I’ve never run across these (yet) but now I’m ready if I do. As always, thanks for the great content!

[@elektro3000]

Now I want to know what your job is.

[@crd716]

@@elektro3000three or four letters if i had to guess

[@Jeremy_Bones]

​@@elektro3000he's unemployed, but vagrancy knows no bounds

[@itskdog]

​@@elektro3000 first one that comes to mind is installing pay-as-you-go meters for an electric or gas company - there was a bigger hoohah in the news when it was found British Gas were getting much higher %age of warrants to be able to send an engineer and locksmith to enter the house and change the meter compared to other companies. Though these days with smart meters they can do it all remotely without a warrant.

[@Frommerman]

Firefighter?

[@imark7777777]

With the price of copper wire these days that’s a good giveaway🎉

[@DeviantOllam]

Hah, yeah 😁👍🪙

[@EyeKnowRaff]

At the ambulance company I had to get into supply after hours bc we needed... supplies. They had installed a gate with a panic bar across the entrance to supply bc it was also the entrance to the shop with millions in tools (not the best neighborhood). Well, instead of wait for a supervisor to come with the key, I used a tire iron from the ambulance. Hooked it through the fence & hit the panic bar hard enough to let me in. I was surprised with so many firefighters at the company that they'd overlook this. Suffice to say, they fixed that oversight quickly. This kind of 'breaking the system' stuff always interests me. Either testing my own programs back in high school Visual Basic class or forcible entry. It's all fun to me.

[@nobody8717]

I love the fact that the audio at the beginning, while you open the door, is a bunch of police sirens.

[@mathew2214]

your door is secure when every method of entry is more difficult than destroying the door. then you think about making the door difficult to destroy.

[@M4rku5NL]

Since Ive found your videos yeaaaars back, my vision on security completely changed, since then I always get in without key or having to fumble with lockpicks leaving everyone in disbelief.

[@recklessroges]

Wisdom and nostalgia. Thank you Deviant.

[@DeviantOllam]

you're most welcome! =)

[@personinousapraham3082]

Was really hoping to get a wet wash cloth and a bent up coat hanger in the giveaway, but I'll take what I can get

[@geirmyrvagnes8718]

Who is the European version of Deviant here on KZbin? We have different hardware here, but there is no reason to think it is significantly more difficult to defeat.

[@Veilure]

Be the change you want to see in the world! 😅

[@randomviewer3494]

It depends on where in europe, afaik europe is ahead on a lot of things required by insurance, like certain locks and mounting hardware. Having said that, there must still be silly simple ways to get in, and I'm certainly curious about europe specific stuff. So if you know someone, lemme know please.

[@geirmyrvagnes8718]

@@Veilure I prefer to think inside the box. 😇

[@mcgherkinstudios]

Yeah we really need an EU/UK version of Dev. That said a lot of stuff is transferrable.

[@physh]

A lot of the vulnerabilities in North American buildings would have a hard time even existing in Europe I think.

[@TRD_Mike]

Plot twist: Dev was actually running from the police (as heard in the background), and conveniently hid in this building with his handy dandy wire snake. 😂

[@HVAC_Tips_Tricks_Calcs]

Reminded me of the first gen Chexit s. If you banged the bar swiftly, it would open the door without tripping the delay alarm. Or just pushing and flexing the jamb would allow the door latch to slip pass the strike plate without triggering the alarm. I first saw this when I was in construction and we were remodeling a day center for the mentally impaired. It was the residents that figured this out and used to do this (and we had to fix/correct).

[@6yjjk]

When the mentally impaired can defeat your security product, you done fucked up.

[@tenmilez]

Johnny Long's No Tech Hacking was my introduction to this whole side of life.

[@DeviantOllam]

It's such a great talk!

[@mikes3523]

I noticed we have this at our job. It's on a door I never use which is the front entrance. I showed some people a few months ago how easy it was to bypass with a landscape flag our front that was thin like a wire hanger. We surprisingly haven't updated it but I guess they aren't as concerned as I was.

[@Scully1800]

I love learning new things

[@DeviantOllam]

i love teaching people new things, so this whole arrangement makes me quite happy!

[@forest9987]

No way. "DeViaNt OllAm HaS JoInEd ThE WokE TrAiN." Nice shirt :)

[@paaao]

In fact, pretty much any exterior door with a card reader has some form of electronic unlock. Most of the time all you need at the most is an 18-24V battery. Drill batteries work well most times. You'll also need a drill and some wire strippers, hook, needle nose pliers. You'll damage the building, but you'll get inside in about a minute or less. You can also just throw a brick through the glass. Either way, a decent building will have an alarm system calling 911, and if you're in a large city, you'll have about 2 to 5 mins to get in, and get out. So it's not really worth it unless there's a pot of gold sitting in an unlocked room. This example also. Good building would have a separate intrusion system that would have gone off immediately upon opening that door after hours. By the way, I install access control systems and burglar systems for a living. This "exploit" is actually well known, and again, you never unlock exterior doors with a REX (request to exit) sensor, because a cold piece of paper, or many other items can cause enough temp change to trigger it. You also discourage the client from using capacitive touch in exterior doors. Lastly, push to exit, capacitive touch, or anything else that depends on electrical power, or battery backup to exit the building is %100 banned in my state. It's not code compliant. Free egress via mechanical means is always required. Can't trap people inside during an emergency.

[@jack_of_all_trades_master_none]

Never leave home without a towel and a coat hanger. I made coat hangers out of solid copper wire that I was going to scrap. I decided it'd be cool to make a set of hangers with some of it. One of them is definitely going to be put in my vehicle now😂. Already have some shop rags in there as well as odd homemade bypass tools.

[@five-toedslothbear4051]

The sirens in the background really make it

[@AuthenticUnicorn]

Yep! I agree! But they were completely random and neither of us fully realized they were in the video till after 😂

[@jtczrt]

The sirens in the background 🤣

[@AuthenticUnicorn]

That was a really random (but perfect) coincidence! 😂😅

[@SkylerLinux]

I find it kinda funny how we have Touch Screen gloves which are using this to use a touch screen

[@quinkelley1134]

I keep a piece of rebar tie wire in my tool bag. Good for conducting electricity, good for pulling crash bars on gates, good for getting at the latch on a pull open door with a security plate blocking a credit card type attack

[@monkeySkulls]

I used to do a show at a theater. I don't remember why I don't get/have a key, but I was supposed to have access to the theater anytime I needed for rehearsals and such. me and my crew would get into the theater through the front door like this, using a bent coat hanger. I think we used to hide the coar hanger by the front door so it was always there.

[@lashlarue7924]

you are my hero and my captain and my inspiration and a gentleman and a scholar.

[@hateeternalmaver]

Thanks again for uploading the biohack talk, I very much enjoyed the info.

[@jeffreyyoung4104]

I remember someone creating the most serious door and frame, and it was imperious to everything, but the criminal broke through the wall, just bypassing the door altogether.

[@derbemobile]

I remember that Johnny Long talk 😂

[@creativejamieplays7185]

I had a uni flat with a maglock door to the flat, people would often yank it so hard it would just open, aided by the fact the maglock would flex it had been pulled at so many times.

[@_Steven_S]

The capacitive "buttons" I've seen here in the UK barely work with a digit fully engaged on the panel (unless the spec was a seriously looooong delay), but a lot of buildings with door entry systems have been installing proximity sensor "buttons" since 2020, I'll need to see if waving something in front of those from the outside works next I'm in one. In normal operation it picks up a hand swiping over it from 10cm away.

[@jmr]

I didn't know capacitive touch bars exist. I've never seen one. I wonder if they are less popular in cold places like where I live? gloves == no open

[@ncc74656m]

Ya know Dev, you keep talking about the need for a giveaway and not doing one for a while, but I certainly haven't won yet, so therefore I'm thinking it's not real. 🤣 It's funny that I had the thought for this attack as well, but never had the opportunity to try it out.

[@thedustmancometh]

Thank you, Deviant One.

[@tensiondriven]

That stance though

[@jacobstaten2366]

Could you do some videos on things like Warehouse doors, chain link fences, stuff like that I know padlocks can be gotten through pretty easily or you could just use bolt cutters, but since I started driving a semi, I'm kind of curious just how secure some of these locations are. Some of them just seemed really vulnerable if not for the perception of security, or just how remote some of them are. Some places almost look like a person who knew it was there could just walk over there after hours and take stuff.

[@buddhaweatherby368]

I was in USAF Security Forces and also ran civilian teams for years. It is wild to me, but there will always be vulnerabilities somewhere. As this demonstrated, they are often very simple if you know what to look for. Incidentally, this is why genuinely high security facilities and operations consist of multiple layers and redundancies.

[@EricPoulsen]

I've done this with doors that have motion sensors by grabbing a paper bag out of the trash, flattening it, pushing it between the gap between the double doors and waving it around enough to trip the sensor.

[@Darwinpasta]

My college dorm had one of these. I came up with the same attack. Went down in the middle of the night with a piece of baling wire because I had to know if it would work, and, yep, sure did. Good old security theater.

[@randomblogger2835]

I hink you intriduced this as "The key to silicon valley" in a CON talk.

[@randykitchleburger2780]

The classic wiretap

[@saltyroe3179]

Wow, another use for my left over electric wire

[@edmclaughlin4923]

Thanks Deviant! That one was very useful. (most of your videos are)

[@DeviantOllam]

you're welcome, happy to teach others!

[@Ben_Lehnert]

copper-and-washcloth-tool...Awesomesauce!

[@KillerSpud]

You mean a sloppily built door latch is some kind of security risk? say it ain't so!

[@DeviantOllam]

This door doesn't have a latch, it's held shut by an electromagnetic lock

[@Alacritous]

Anything capacitive. A plastic shopping bag will work, like stuff the bag in the top of the door so it falls and brushes the handle would do it.

[@JimsEquipmentShed]

My office at GE was an old server room, and because it was still set up for that, I had to get into my office using my ID card. (Swipe back in those days.) I got sick of pulling my card every five minutes, so I loosened up the capacitive bar, slid a wire under it, drilled a hole through the door (It was wood back in those days) and threaded a machine screw in from the outside to the wire. I could then walk up to the door, and touch the head of the screw, listen for the click, and I was in. I used to go back and visit periodically, it was still like that at least ten years later.

[@carlam6669]

I once went in to work after hours but when I arrived realized I had forgotten my RFID badge to get it. Then I saw the cleaning lady through the glass door and waved to her. She shook her head no to indicate she wasn’t going to let me in. I waved again and she came closer at which point I heard a loud click and knew the motion sensor had just unlocked the door. Out of respect I left without entering.

[@woodlandwanderer8163]

Really cool & simple attack. I am always surprised how low the barrier to entry is to defeat a high end security system by less than $5 from Home Depot.

[@nekodjin]

I just don't understand why you'd introduce an electrical failure mode in your front door. Now unlike normal crash bar it has to fail-safe AKA completely unlocked... just why??

[@12HarmonicChaos]

If the potentiometer on these aren’t dialed down, you can actually rub your hand against the glass and it will pick it up from the outside

[@blusau8561]

My apartment building has those. It's always fun in the winter to watch people wearing gloves try to open the door.

[@stevebabiak6997]

Now you know you just need to slip a wire into one of your glove’s fingers and you can keep your gloves on.

[@PhysicsDude55]

I'm an access control installer and I hate these things. Not secure, not reliable, PITA to install on narrow mullion doors which is where they always end up going. Architects love them for some reason. I have had to talk an architect out of using them on more than one occasion. Reason #419 why maglocks SUCK and should not be used if at all possible!

[@stevem815]

Man, architects love everything that doesn't work properly. They all want to be cool and original, which means that anything that actually works and is cost effective gets dismissed because everyone else is using it already so it's not cool anymore. They're the teenage girls of the construction industry. Architecture has become the science of finding problems that were solved hundreds of years ago and making them problems again.

[@somepunk2541]

I'm pretty sure this is the reason why NYC government and insurance companies told everyone to remove these bars from their buildings years ago.

[@htomerif]

You know, if you knew what these systems were looking for, which is probably a change in impedance at a particular frequency, you could probably make something in a few minutes with a breadboard where you wouldn't have to touch it at all. I had no idea these were seriously used as part of a security system. It would be nice to see someone bust out a portable oscope and see what signal is being sent to the bar.

[@dragade101]

I feel this capacity touch doors are rare to see in the wild. On jobs, do you see them as newly installed (ever or only rarely)? A normal conventional crash bar works the same way from the user having an accessible door. Yet limit the kinds of attacks.

[@occultstainedglass1752]

Looking good! Nice weight loss!

[@Felinius]

Digging that shirt, where can it get bought?

[@SyBernot]

The giveaway should be a wire hangar and a wet wash cloth.

[@Splyfof]

whats the shirt ya wearing, looks cool

[@deefdragon]

a few years ago we had a pair of these at my work, and after a bit of figuring out what it was that allowed it to work, I realized this attack would work. unfortunately I never got permission to try it out.

[@Adamtherealboss]

How do you actually get clients/paid in this industry? Do you just open every bank door until you're hired?

[@colinstu]

the bowel disorder joke xD

[@borstenpinsel]

You mean you can attack doors with finger-wide gaps? Shocking. I have never seen a door without a stepped profile anywhere. And of course these can be attacked too but not by sticking a wire, or a an umbrella through the gaps😅 On the technical side that reminds me of when I has one of these touch activated lamps and put up aluminium foil strips allaroind by bed so I could turn on and off the light without rolling over😅

[@CoincidenceTheorist]

Fun fact. … my work loft got robbed this way when i was away for Christmas. Robbed and ransacked. Food all out of the fridge and food that wasn’t even mine was inside my place. Seemed they were just hanging out. Like single shoes were missing even. … as of someone hated me. ? Perhaps. Perhaps they hated themselves most of all. Oh and they got all my lock sport pen test sorta stuff too 🤦‍♂️ and so much more

[@wobblysauce]

Tank circuits would be handy for normal use also.

[@clubcyberia8572]

woo! no tech hacking! love his talk.

[@matthewmiller6068]

I've never seen one of those...that's a odd lock. Does this mean you couldn't exit if you had your winter gloves on? And I love that talk on "no tech hacking".

[@oldmanSturzl]

Did you have to edit in the wee woos in the background or was that serendipitous?

[@DeviantOllam]

that was just fate, hah

[@AuthenticUnicorn]

I love the touch of them in the background, but it was absolutely just a really fun random happenstance. 😂😅😍

[@Chaos_God_of_Fate]

I clicked on this video so, now I'm on 'the list' :P

[@michaels6981]

Is there an egress sensor too? Is there a camera on the door? Perhaps obscuring the address would be a good idea.

[@questeusher]

Not seen this kind of exit system but that's so cool

[@LoreTunderin]

Would this work with one of those ultra fine wires you see inside electric motors or guitar pickup coils? That stuff is thinner than a hair and you can make it invisible with the tip of a marker that matches the door color. If you have day access, it would only take a second to stick the wire to the back of the touch bar and feed it through the hinge gap to stick to the front of the door.

[@stratagem_5113]

Still carry the old coat hanger in my truck.

[@Bl4kH4t]

great entry!

[@FallLineJP]

This is me, squirreling away this little nugget in the back of my brain🧐🧐

[@Lew114]

What’s the fix for the vulnerability?

[@IsamuSushi]

I can’t wait until I get the chance for an implant chip! I go out of my way to do it on my own my wife will freak, if I just do it at a convention or some where that I come across when I’m there. It’ll be much easier to explain away to her😂

[@mattstroker]

Might not be very immediate in terms of return on investment for you but skill-wise i'd like to see you going up against more European type locks and styles of security where it comes to physical stuff.

[@asdert458]

I suspect the choice of that particular door wasn't a coincidence. 😉

[@billwaterson9492]

You look good man. Been eating your veg or something. Appreciate ya.

[@DeviantOllam]

doing what i can =)

[@Alan_Hans__]

Yet another example where a poor door fit essentially makes the security very porous. Never seen them here in Aus but I've rarely been in office buildings that might have this.

[@Bramon83]

ive never even seen one but im never in anything nicer than a grainger

[@WackoMcGoose]

In addition to the massive security issue... I would think this would be massively _inconvenient_ even for intended users. What if someone has their hands full of boxes and has to push the door with their back? What if it's Canadian levels of cold outside and you're wearing gloves, but haven't been wearing them long _enough_ to warm the gloves up to conduct your bioelectric field? Sure, push bars have their own easy defeat method (just need the wire to be _stiffer_ and all), but they seem much more accessible than this "bare skin or eat glass door" exit bar.

[@DeviantOllam]

yes, this is one reason that they are not super popular

[@elitecpudoc329]

And i thought rubbing a balloon on my hair to make it stick to the wall was a cool party trick.

[@MartinDeHill]

I've just learned that Deve is a fellow baldie! Welcome to the club buddy!

[@DeviantOllam]

yeap... almost no hair at all left for me!

[@keksimus__maximus]

He's got a wife already, no reason to have hair anymore

[@frollard]

4:26 commenting before the end of the video....I really hope the giveaway is a length of solid core copper wire! That shit is expensive!

[@PsRohrbaugh]

I was gonna suggest throwing in some copper wire and then you say it 😂

[@ddegn]

That's mean to leave us with a cliff hanger! How is Vince's bowl disorder? I hope he's OK.

[@thinkIndependent2024]

Don't worry we have a method to detect that type of entry

[@enzochoi923]

so what you're telling me is that stripping the outside of a building of copper wire has potentially exponential return on effort...

[@peter_smyth]

Capacitive crash bars would annoy me whenever I'm carrying anything and want to lush the doormopen with my body or the box I'm carrying. Also, how do they work if you've already got your thick winter gloves on ready to go outside?

[@spamburner9303]

Lick it.

[@stevebabiak6997]

Now you know you just need to slip a wire into one of your glove’s fingers and you can keep your gloves on.

[@LokiScarletWasHere]

Why are these a thing? What purpose do they serve besides being a huge attack surface (both theoretical and physical)?

[@tigerchills2079]

4:32 can anyone enlighten me what a tank circuit is?

[@AverilDoyle]

Lol I have a client that has like 8 laundromats, and they use these. I ended up needing to get in one night to service the timer for them at one location, and I used this trick.. 🤣