@@tommybahama4418 No, he'll have disabled your alarm, picked your front door lock, tamed your dog, and unloaded your gun from underneath your pillow without you even stirring :D
*Me:* _- Oh, a 4.5 minutes long video from LPL about an electronic lock! Must be a good one if it lasted this long._ *(Five minutes later)* *Me:* _- Oh... False alert - it's an exploit compilation video._
@Paul Martin I think a properly made electronic lock will not trust the outside unit. It might as well have wing nuts and security would be okay. Well made lock will continue to work flawlessly even if you cut the outside unit off and connect wires e.g. to mains voltage or to a welding transformer.
@@MikkoRantalainen idk I'll have to look at ours. The ones we have at work we maintain are a good bit more have end I'd say but most likely still gave trash security
At this point it would be easier to just convince him that there is nothing behind the lock worth getting into. But then he would simply take the lock as a challenge.
It would be actually fairly simple to stop him: You build a keypad that only sends they keystrokes to a controller unit on the inside of the door. That way, the only wires you can reach is sigal wires that don't do shit without the code. Bonus points if you put the controller unit in a metal box to prevent tampering by EMP or magnetism and make the opening-closing signal a little more complicated than just on-off on a certain wire. At that point, you'd either have destructive methods or defeating the controller left as methods of entry
How have they not sent someone to silence him?!? Although, considering he seems fairly pro-2A, if they did try, he’d have a good chance of protecting himself.
Let's just hope that anyone that cares about security buys an actual access control system, one where all the processing is done in a secure area. Even the company that makes the door strike has a system better than this.
@@thimiraamaratunga7794 Multiple interesting ways to exploit, once it's a common flaw reviewed many times, he will skip it. For a very long video, it must be very interesting to try and bypass it in all the different possible ways.
@@bapanada9446 Or if he can find something interesting to use for the pick (Swiss army knife, Lego astronaut, gum wrapper, etc.). For Thanksgiving I was hoping he'd pick something with the wishbone from a turkey.
I was once working on an event packing up the stage into a basement and there was an RFID operated lock that gave access to an industrial elevator that rose from the ground to the outside and one of my work partners accidentally closed the little control door and the person authorized to access it went home for the day so I called security to open it but they didn't come for several hours so I unscrewed the rfid scanner, bridged the contacts and opened it. This being a federal institution, it actually set off a silent alarm and security STILL took an hour to arrive =____=
Federal institution, and it's that easy. Technology has outrun humans by do far, anybody with s little motivation can have their run of the world it seems. Personally I never trust tumbler key locks, they are medieval artifacts that haven't changed in a thousand years, ridiculous
The reality is, locks are meant to be opened. It might seem ironic to most, but if that weren't the case you may as well just weld whatever the lock goes to, shut. So long as that's the case, it can be opened without a key or code by just understanding the mechanism. That's why the old adage exists that locks only keep honest people honest.
At this point, I'm almost completely convinced LPL is a retired cold war era operator. Dude reminds me of my dad and his buddies... growing up, I learned so much awesome shit from them. Hotwire cats? No problem. Breaking and entering? Literal childs play. Doing a target at 1000 yards in a high cross wind with high humidity from an elevated position? Piece of cake. Building or disabling an unstable IED? We do that shit before breakfast. It was an interesting childhood, and watching LPL's videos reminds me of weekends during the summer at my uncle house on the beach... we spent hours on the front patio picking locks, building improves listening devices, learning how to sweep for bugs... awesome shit to an 8 year old obsessed with Rambo, GI Joe, and James Bond.
This is why it is important to use an access control system that communicates to an internal controller that makes the decisions. Don't let equipment on the locked side make any decisions.
"This is the LockPickingLawyer and what i have for you today is the vault door in Fort Knox, i only have about 20 minutes before the armed guards come storming in but i can get in to the vault in about 30 seconds.'"
@@CB-xr1eg Goldfinger has the solution: ua-cam.com/video/efOL7hF-YDU/v-deo.html You need one of these: en.wikipedia.org/wiki/Special_Atomic_Demolition_Munition
Hello this is the lock picking lawyer. I just finished relocating borrowed assets from the vault and into my car. As you can see, the Fort Knox company did not take kindly to my pervious video, so they sent me some armed guards challenge. I was surprised that they actually respond to my video so it would be a shame to turn them down. Thankfully I have this crowbar that bosnianbill and I made. We will see how how will I pick myself out of this fight. ... ... ... And there we have it. No less than 25 seconds and we defeated their armor. What you just saw was the newest exploit of lock to lock ranged attack. A crowbar and lock combination as you can see is very effective against even the heftiest opponents, but it was a pretty good challenge nonetheless. In any case, have a nice day. Thank you.
I had a mini Victorinox keychain one some years back that I lost away from home, but I remember the one I had being called the Mini Champ. It was less than 3 inches in length.
Never mind Swiss Army Knife, the greatest ‘tool’ ever invented was the paper clip, I use them all the time for a variety of jobs, hardly any involving holding paper! Great series of videos by the way.
"Good morning, your honor. Yes, I know it's 2AM. Don't trouble yourself about how I got in. What's important is how you're going to rule in my case today."
The door to my storage room got locked accidentally today. I went through a bowl full of keys that came with the house and found the one that should open the door. It didn’t. The whole mechanism was gummed up. I thought about getting my picks out of the truck, but grabbed a 12” piece of wire laying beside the door and slipped the latch on the 2nd try. Moral of the story, bypassing is often easier than picking.
MacGyvering intensifies. As someone that grew up avidly watching the series (the original one mind you) this video is pornographic for me. Swiss Army knife AND paper clip? Ohhhhh yes
Erotic is right, this man's thumbs tell us he's packin' heat. And, yes - don't these companies ever test their 'safety' products with people who aren't paid to say they're perfect?
You're a legend, watching your videos got me to order my first beginners lock picking kit and start practicing myself.. the way you do it makes it look so easy, effortless, like watching a piece of art being done... thanks for the inspiration to start this hobby and for the great content you put out!
When I was in the Navy I worked at a comm station in Keflavik. The building was somewhat secure. They wired the egress button separately from the outside control panel. That seems like such a simple thing but it really makes a lot of sense. Also there were no accessible screws from the outside of the door. Again, simple, but makes sense.
The guy who asks "What is anti-tamper switch?" Is the guy tied to the chair in the interrogation room. It's also likely that guy's car is getting towed from "visitor parking."
@@AttilaAsztalos I mean they did have an episode where a guy builds a (one-time use) Stargate out of Ebay-ordered raw materials and a toaster and/or microwave. Granted, that guy was of the species that originally created the things, but still.
My school has a system similar to this to get into the boarding houses and you can legit just shake the door handle back and forth and it opens in less than three seconds
CarterPlays Official not sure where you are from but in the UK secondary schools are almost always boarding schools, this means that pupils stay the night and effectively live in a boarding house until each holiday then they go home. It’s useful if people live far away for example there are lots of Russian students who fly directly from Russia into my school stay there and go back etc
As a industrial electrician with a heavy background in control wiring I’ve had to use this method quite a few times to get into electrical rooms when nobody is there to open the door in the early hours of the morning. It’s a simple method but most people have no idea how to do this so it’s not a real issue for the most part. I’ve never came across one with the security spring wired in with the exception of the federal reserve’s in a few cities
The anti tamper switch doesn't neccessarly need to be wired to an alarm, but one way to increase security is to have a relay (with keyswitch or button for reset) on the inside, where the lock wiring is also connected. The tamper switch is simply connected in series with the NO contact on the relay, then the reset/keyswitch over the NO and C contact, to the coil, so the pulled relay effectively powers itself. When tamper switch releases, the relay will lose power and only way to reset it is to reset via keyswitch or reset button. Then wire lock wiring in series with the second C and NO contact, only providing power to the lock if relay is pulled. This will create pretty much security for pretty low cost, as any tampering will disable the lock wiring, so regardless what attacker does, nothing will unlock the door, only way in is with physical key then press reset button or usevreset keyswitch on inside. An reed switch (nc) can be added in series with tamper circuit to prevent using external magnet to trip the inside relay. However, as we seen tamper switch can be easily be bypassed, but this creates a trap - like trap pins in a cylinder, once you trip the trap, your day is over.
Mr LockPickingLawyer Excellent presentation , as always. I am the small-scale technician , working in Greece , and use this keyboard too , Hoever.... I made some personal modification on it , replacing tamper switch with electro-optical coupling and connecting the chassis to 15 KV , low amps transformation. After removing the screws , any suspicious intruders get very dangerous electroshock -but only once . Afterwards the circuit is out , to avoid any possible LEGAL problems , for the owner. Do this for 10 plus years with success. No lawsuit yet...
Well, that's up to the buyer to put a sound alarm to the terminals, perhaps the seller of this electrical lock has a version that includes it, but it's cheaper to sell it without it and whoever acquires it can put any sound alarm they want in it. Anyways, this is just a big failure because the central components are exposed to the outside of the lock, make it pretty insecure as LPL showed.
You don't want to know how many people kept the electrical fire monitor system on "manual override", just because “those false alarms are soooooooo annoying”.
I would like to suggest you do a macgyver type episode where you must escape from captivity. So remove handcuffs decode a door lock, open a gun safe. Hot wire a car and open a pad locked gate. It could be a fun episode.
I would love to see a TV contest show where there's like 10 doors in a clear-walled hallway, one hallway per contestant, and the first contestant to get out the final door wins the prize. Absolutely all tactics are valid, including under-door attacks, hinge attacks, latch attacks, kinetic attacks, and of course picking. Every episode they change up the doors and how they're secured, and bring in various locksports and pen tester people to compete.
To unlock this keypad lock, you'll need: - A table - A wireless anti-static wristband - Some tweasers And a Swiss Army knife, which hopefully has a screwdriver in it.
I mean that’s kinda the point of this channel to inform people of security flaws to allow them to make more informed decisions about what security products to buy and what not to buy.
When I worked on building control systems, I used this exact knife for most of my physical work from bathrooms to casinos to military research sites. I still have one on my key-chain and regularly use it for all sorts of little jobs. Old related joke, "The chainsaw starts with a roar and the rube asks, 'What's that noise'."
This was set up specifically for ease of bypassing. I've installed scores of seco-larm keypads over the years. They ship with tamper-proof screws that can't be unscrewed once tightened without the aid of a dremel or grinder to cut a groove into the screwhead. Also, in most cases the door is free egress just by turning the handle. You wouldn't combine a REX device with an electric strike. This allows you to disable the REX input altogether. My point is that with a little forethought and planning you can eliminate the risk of these bypass methods.
@@arletottens6349 No it wouldn't. If you had malicious intents you could easily just cut the side or the front and again disable the system. imo infrared movement sensor inside the box could cut it, but those are unnecessarily expensive and still have their weaknesses. the basic design is flawed like hanelyn1 described, that system does't make any sense. You can basically disregard everything and just send a current through the wires to the actual lock and its open.
Only thing that should pass from the key pad is a rolling code to the controller on the inside. Then the only way to hack it is to figure out how the code is rolling. Goes from any dude with a paperclip can pick it to a class one hacker.
@@wolfpack4128 "figure out how the code is rolling" i hope you mean "what code" not how. Any of the data shouldn't be handled in an unsecured area. They just send signal to the handler inside and the inside part checks if it's the right code not the outside part. There shouldn't be any wires connecting the actual lock to the unsecured area either. otherwise 9V battery will open it.
Makes me happy that my door systems have their controllers on the inside of the building and where their are external components, either the card reader itself or a security relay between the video doorbell and the controller are designed to send a specific tone or series of sequence of voltage change and can't be jumped as easily as this.
These are awesome educational videos on how to bypass security and felony trespass into a secured area. I love it! Its like the Anarchist Cookbook but even better!
Seems like, knowing where there would be a wire for an internal alarm is located, you could have felt for the wire first with the paperclip before hooking the spring.
It would be very cheap to make it a lot harder. Make an injection-molded piece of plastic that is around the circuit board that extends to the back of the plastic box. Minimal changes to the screw connectors would also be needed so the wire reaches them from over the board. The minimal thing to add is a plastic cylinder around the spring with a companion on the box. so you can just hold it back.
@@target844 It is wrong design from begining, no matter how tamper proof you make it. Keypads should be used only for sending wired/wireless data signal to the unlock system located inside. If signal gets authorised, doors gets unlocked. Simple as that. No silly unlock switches, control circuits or anything else that can be tampered with should be located in numpads outside security doors/ building!
You dear sir, among many other things you do, illuminate the many opportunities for improvement security companies could take advantage of. My sole hope is for your hard work not fall into the abyss of "ToDo: Low Priority" bin. Please keep on shining that bright light of yours!
As someone that has installed, maintained, repaired and replaced these types of access control devices I can assure you that this isn't a typical installation. It is especially different when there are additional tampers and triggers.
"By pulling that spring to the side i ensured that the anti-tamper switch stays depressed" I have something in common with this anti-tampering switch. :(
Used a professional unit for my garage door, took the extra step of removing the logic board and placing it in a secure container inside the garage. Now the only thing anyone had to work with was the wires to the keypad matrix and LEDs, they were all white and unmarked. A friend of mine had a similar unit with the same modification except he ran two extra colored wires to a couple of unused pads on the board. These were trigger wires going to a CS gas canister dispenser that had a tube running to the back of the weatherproof box terminating right above the wire harness. It did its job one day, never had an issue since.
I've got a similar cheap keypad / RFID on my house. However you can prevent all of these exploits by making the tamper trigger if the screws are even slightly loosened. Aside from this, also determine (or set) the exact time the keypad relay triggers the latch for, but instead of running that signal straight to the latch, run it to a small microprocessor (like an esp32, picaxe or arduino). The external electronics look for the exact trigger time, then outputs to the latch if correct. Also use N/C contacts with EOL resistors to determine if anything is being tampered with and have the electronics fail to a lock out state if triggered. Sounds a bit complicated , but mine's been working reliably off a Picaxe μP for over 10 years. The only annoying bit is the short delay before the door opens.
Well my dad as a saying that feels fitting, mind you I’m translating, ”you only lock your door for honest folk”. If someone really wants in they usually do as this channel proves.
My dad (he's a locksmith^^) said: A lock is not a means to keep people out that really want in. It's a friendly reminder to other that it would be illegal to enter and you should not try.
I watched only about 10-15 of your videos. But anyway, they are that much informative, that I instantly thought: "Screws on the FRONTSIDE of the keypad? That HAVE to be a bad idea!" Because now I know, that my skills in electronic are more than enough to bypass or pick such electronic locks, simply by manipulating the power circle. Thank you for that. I'm seriously think about, opening my own lock-picking service. But over here in Germany it isn't easy to open up SUCH a business. Does anyone knows, if it's legal to order AND receive the tools LPL is selling, when I'm in Germany?
Reminds me of the story about Houdini in a jail cell trying to bypass the cell door lock, supposedly gave up and then discovered it was UNLOCKED the whole time!
Not so much hire. They just send him "free samples" of the locks and wait for them to appear on his channel. I've seen that mentioned in previous videos. He's friends with the people at PacLock. Look for the skateboard video (#957).
Florida man, that lockpicked more than a 100 locks on trial said : "I watched a few videos from the LockPickingLawyer, and I was a master at picking locks".
I have installed many of those electronic strike locks. If the lock was on a perimeter door or higher security I would install touch pads with the logic bord remotely mounted to prevent tampering.
OTHER WAY TO PICK Cheap pin pads common in North America is to just stroke across the keys back and forth and up and down. Controller default setting only looks for string of numbers in correct Order. It doesn't care how many other numbers in between so stroking the keys in different directions sets the 4 - 8 programmed digit version of ungaurded pins
In so many movies an electronic lock is disabled by shooting it. I always thought no way would that work, but looking at some of the flaws you've pointed out in some of these maybe shooting the lock does work for some companies at least.
Those locks have been like that since at least the first one i saw back in the '80s. I always move the circuit board into the building and run wire to the keypad. What I would do these days is to make sure the circuits inputs from the keypad can handle 50V, and place 25V spark gaps on each input to prevent denial of entry attacks. And shield the latch from magnetic entry attacks.
Hmmm. The ones I installed didn't have a long spring to push against the box. They had a thin metal frame that sandwiched between the pad and box using the same screws. If you loosened the screws, the plate would loosen in its "sandwich" long before you loosened it enough to get a tool in and opened the tamper switch. Also, there was no wiring header, just wires that you then used quick connectors or soldered into the cabling. If you didn't install these on a box and just mounted them straight on the wall (allowed in residential), you simply cut a smaller hole to accommodate the PCBA and used drywall screws, no plate necessary. Not that they were unbeatable. If you knew where the switch was, you could pretty easily shim it before loosening at all and carefully unmount it. And back in those days, the code was set with jumpers or dips, so you could just read the code and put it back.
I do this all the time at work. I work in many different buildings and they use this keypad to prevent dementia residents from using the elevator, but half the time they don't tell me or I forget the code. Super simple to use a tweaker screwdriver to loosen the bottom screw, short the eg contact, then screw it back in. Almost as fast as using the code
I really enjoyed the video, the only issue I see is that you aren’t required by fire code to install an egress button for electric strikes. As long as the handle on the other side is unlocked allowing for free egress. Maglocks are a different story, and having the handle allow for free egress does lend vulnerability for an under the door attack. That being said, still loved the video, just wanted to make that statement.
Wait a minute: if the anti tampering switch is not connected, the paper clip to hold the switch spring demonstration is not convincing! BTW, big fan. Love your videos. Glad you reveal these security flaws to help improve design and debunk false sense of security.
There were no wires to the anti tamper switch, that's why he removed the paperclip. He explained how the spring is kept activated by it being pressed on the backplate. Ex: if someone removed the screws and started taking the plate off, the spring would lose it's tension being separated from the backplate thus triggering the alarm.
![[1299] Unpickable Locks From Stuff Made Here](http://i.ytimg.com/vi/Ecy1FBdCRbQ/mqdefault.jpg)
![[1299] Unpickable Locks From Stuff Made Here](/img/tr.png)
![[527] Pickproof your Kwikset For Less Than $1](http://i.ytimg.com/vi/7JlgKCUqzA0/mqdefault.jpg)
![[631] Master Lock 875/975 Decoded WITHOUT ANY TOOLS !](/img/n.gif)
Oh man, now he's going after electrical locks too! No incompetent keypad manufacturer is safe!
No locks left unpicked.
Nope!
Good, get all the shit locks off the market!
God all this channel shows me is that im never safe, no matter what I do to protect myself. Thank god i've got a gun.
@@tommybahama4418 No, he'll have disabled your alarm, picked your front door lock, tamed your dog, and unloaded your gun from underneath your pillow without you even stirring :D
*Me:* _- Oh, a 4.5 minutes long video from LPL about an electronic lock! Must be a good one if it lasted this long._
*(Five minutes later)*
*Me:* _- Oh... False alert - it's an exploit compilation video._
Fatal design flaw: lock internals behind keypad should not be located in unsecured area.
@Paul Martin I think a properly made electronic lock will not trust the outside unit. It might as well have wing nuts and security would be okay.
Well made lock will continue to work flawlessly even if you cut the outside unit off and connect wires e.g. to mains voltage or to a welding transformer.
@@MikkoRantalainen idk I'll have to look at ours. The ones we have at work we maintain are a good bit more have end I'd say but most likely still gave trash security
Right. I was like oh similar locking setups to what we have at work must be complex. 73 ways to disable, hmmmm well shit.
You literally went to town on the format of your text. 🙄🤣🤷🏼♂️
"This is the Lock Picking Lawyer, here to prove once again that there is nothing you can do to stop me."
Yeah. Genius lawyer goes to prison for someone else's crime...
Imao
At this point it would be easier to just convince him that there is nothing behind the lock worth getting into.
But then he would simply take the lock as a challenge.
It would be actually fairly simple to stop him: You build a keypad that only sends they keystrokes to a controller unit on the inside of the door. That way, the only wires you can reach is sigal wires that don't do shit without the code. Bonus points if you put the controller unit in a metal box to prevent tampering by EMP or magnetism and make the opening-closing signal a little more complicated than just on-off on a certain wire.
At that point, you'd either have destructive methods or defeating the controller left as methods of entry
@@An0niem4 that's usually what is done in access control
As an engineer I've always laughed when actors bypass locks like that in movies. I *never* imagined anybody could design something that wrong.
As an infosec guy I can always imagine it.
This door lock was originally intended as a prop for movies.
@@LordSStorm Red Teams love this one simple trick!
Blue Teams hate it when you do this.
as a software engineer I'm also shocked at how stupid this is
@@weltmeister that's what you get for a low security budget
"in any case, that's all i have for you today" the #1 lock company killer line
Right behind his iconic 'they made a rookie mistake'.
How have they not sent someone to silence him?!? Although, considering he seems fairly pro-2A, if they did try, he’d have a good chance of protecting himself.
So disappointed he didn't unlock it just by looking at it! You need to up your game LPL.👍😉
I’ve been a locksmith for 10 plus years. I still learn from your channel. Thanks for the great content.
Let's just hope that anyone that cares about security buys an actual access control system, one where all the processing is done in a secure area. Even the company that makes the door strike has a system better than this.
@@HammondOfTexas0 I see them too often at airports. And they DO have the tamper switch. I was curious if they actually installed it lol
The only way lock companies can make the videos longer is by making lpl explain more parts
Or, having multiple ways to exploit
@@thimiraamaratunga7794 Multiple interesting ways to exploit, once it's a common flaw reviewed many times, he will skip it. For a very long video, it must be very interesting to try and bypass it in all the different possible ways.
Excellent !! 😁😁
@@bapanada9446 Or if he can find something interesting to use for the pick (Swiss army knife, Lego astronaut, gum wrapper, etc.). For Thanksgiving I was hoping he'd pick something with the wishbone from a turkey.
@@HariSeldon913 Yeah you are right!
I was once working on an event packing up the stage into a basement and there was an RFID operated lock that gave access to an industrial elevator that rose from the ground to the outside and one of my work partners accidentally closed the little control door and the person authorized to access it went home for the day so I called security to open it but they didn't come for several hours so I unscrewed the rfid scanner, bridged the contacts and opened it. This being a federal institution, it actually set off a silent alarm and security STILL took an hour to arrive =____=
Federal institution, and it's that easy. Technology has outrun humans by do far, anybody with s little motivation can have their run of the world it seems. Personally I never trust tumbler key locks, they are medieval artifacts that haven't changed in a thousand years, ridiculous
@@ddgryful Patently false.
Hahahaha that’s awesome!
The reality is, locks are meant to be opened. It might seem ironic to most, but if that weren't the case you may as well just weld whatever the lock goes to, shut. So long as that's the case, it can be opened without a key or code by just understanding the mechanism.
That's why the old adage exists that locks only keep honest people honest.
Gotta love "High security" it is possible someone related to security was high.
At this point, I'm almost completely convinced LPL is a retired cold war era operator. Dude reminds me of my dad and his buddies... growing up, I learned so much awesome shit from them. Hotwire cats? No problem. Breaking and entering? Literal childs play. Doing a target at 1000 yards in a high cross wind with high humidity from an elevated position? Piece of cake. Building or disabling an unstable IED? We do that shit before breakfast.
It was an interesting childhood, and watching LPL's videos reminds me of weekends during the summer at my uncle house on the beach... we spent hours on the front patio picking locks, building improves listening devices, learning how to sweep for bugs... awesome shit to an 8 year old obsessed with Rambo, GI Joe, and James Bond.
Would be awesome if you ported videos of you “childhood school”
This is why it is important to use an access control system that communicates to an internal controller that makes the decisions. Don't let equipment on the locked side make any decisions.
Like jails.
Like how you should never make a website client-side, you can just edit it with inspect element
@@hotfire7075 you mean you shouldn't authenticate client side. There's nothing wrong with putting other stuff on the client side
@@alexeecs True, a website that has nothing on the client side is hardly a website at all.
It's amazing how simply relocating that logic with some wires will probably raise the cost of the solution by about tenfold...
"This is the LockPickingLawyer and what i have for you today is the vault door in Fort Knox, i only have about 20 minutes before the armed guards come storming in but i can get in to the vault in about 30 seconds.'"
Getting in is one thing, how about getting out again, with the loot?
@@CB-xr1eg only 3 words: hot air balloon!
Why? Bc nobody expects it.
@@CB-xr1eg Goldfinger has the solution: ua-cam.com/video/efOL7hF-YDU/v-deo.html
You need one of these: en.wikipedia.org/wiki/Special_Atomic_Demolition_Munition
Hello this is the lock picking lawyer.
I just finished relocating borrowed assets from the vault and into my car.
As you can see, the Fort Knox company did not take kindly to my pervious video, so they sent me some armed guards challenge.
I was surprised that they actually respond to my video so it would be a shame to turn them down.
Thankfully I have this crowbar that bosnianbill and I made. We will see how how will I pick myself out of this fight.
...
...
...
And there we have it. No less than 25 seconds and we defeated their armor. What you just saw was the newest exploit of lock to lock ranged attack. A crowbar and lock combination as you can see is very effective against even the heftiest opponents, but it was a pretty good challenge nonetheless.
In any case, have a nice day.
Thank you.
@@qdaniele97 Not seen Golfdinger for a long time but I seem to recall he didn't get away with it.
For those wondering, the specific model of Swiss army knife is the Victorinox Classic. Ten bucks at Wal-Mart, REI, etc.
I had a mini Victorinox keychain one some years back that I lost away from home, but I remember the one I had being called the Mini Champ. It was less than 3 inches in length.
Now $20
@@fisher1997hb 😭
Just think being in the edc world people pay 100+ for the same thing with brass scales and stuff like that lol
I've owned mine for 20 years and have never had a problem or needed to sharpen the knife. They are incredibly robust and well built.
That wasn’t an alarm announcing its open. It was a cry for mercy.
LOL
when lpl removes his wife's/girlfriend's bra: "alright, this is a 4-clasp strap. we've got a click out of one, two is binding a little..."
It's called roleplaying. It's regularly done in the bedroom and nothing to be ashamed of. If she likes "getting her lock picked" then good for her!
@phục êwê LPL could open it with a fork. Guaranteed.
Watch his wife get into her Ben n Jerry...
@@chemputer wooosh
Congratulations sir for winning the internet today
Never mind Swiss Army Knife, the greatest ‘tool’ ever invented was the paper clip, I use them all the time for a variety of jobs, hardly any involving holding paper! Great series of videos by the way.
Always have a paper clip on your keychain.
one of these days he is gonna pick a lock with a cookie
He did it with a condom so I'd say he could
If he does, I'm betting it will be a Master Lock.
What type of cookie?
@@PjD-pk1fg Pickerdoodles
@@OriginalGriff Vanilla Wafers
Let me take out the paperclip that Bosnian bill and I made...
Bent?
That will soon be available from Sparrows
haha!
that you can purchase from your local home depot :-)
Says the commenter in every video, on every tool
i like to think the reason why this lawyer is so good at lockpicking is because he learned how to do it to defend someone in a court case
"Good morning, your honor. Yes, I know it's 2AM. Don't trouble yourself about how I got in. What's important is how you're going to rule in my case today."
@@kd5nrh 😂😂
I don't remember in which, but in a past video he stated someone gave me a lock as a kid and he has been into it ever since.
@Cristian Diaz which video number is it?
@@lenn_man it was a mcdonalds lock. Idr the video id but should be able to find it easily
The door to my storage room got locked accidentally today. I went through a bowl full of keys that came with the house and found the one that should open the door. It didn’t. The whole mechanism was gummed up. I thought about getting my picks out of the truck, but grabbed a 12” piece of wire laying beside the door and slipped the latch on the 2nd try. Moral of the story, bypassing is often easier than picking.
This channel is slowly but surely helping me setup for my own real life Ocean’s Eleven one lock at a time.
So....how did it go?
I was thinking Leverage, but... 😁
This channel has evolved from picking simple padlocks to legit breaking into businesses. Love it.
Look at that pretty wiring
Much better.
MacGyvering intensifies. As someone that grew up avidly watching the series (the original one mind you) this video is pornographic for me. Swiss Army knife AND paper clip? Ohhhhh yes
Now to find a use for the chewing gum and the duct tape.
I had a similar thought. My new fan theory is that LPL never shows his head in order to hide his mullet O.o
Pity he couldn't work in some duct tape.
Erotic is right, this man's thumbs tell us he's packin' heat.
And, yes - don't these companies ever test their 'safety' products with people who aren't paid to say they're perfect?
@@ethelryan257 how did you figure this by his thumb?
You're a legend, watching your videos got me to order my first beginners lock picking kit and start practicing myself.. the way you do it makes it look so easy, effortless, like watching a piece of art being done... thanks for the inspiration to start this hobby and for the great content you put out!
When I was in the Navy I worked at a comm station in Keflavik. The building was somewhat secure. They wired the egress button separately from the outside control panel. That seems like such a simple thing but it really makes a lot of sense. Also there were no accessible screws from the outside of the door. Again, simple, but makes sense.
this guy has levelled his Lockpicking skill to the point he does not need a pick any longer.
LOCKPICKING:1000
He just gives it a stern look.
every new update he spents his points into lockpicking. soon he just need to stare at the lock to open it
Idea: an LPL/Legal Eagle crossover discussing the legality and accuracy of lockpicking in the media.
And Leonard French can make sure they don't break the copyright
That would be awesome. Lawyers of UA-cam, unite!
Substitute Viva Frei for Legal Eagle and you have a winner.
Doesn't legal eagle have a history of being wrong
@@krpajda Wow! Can you link something about this please?
Coming to Netflix: Ocean's 2 Starring LPL and Bosnian Bill
I'd watch that
it would be a short film.
Coming on TV two men and the pick that they made together
@@DeathFrankCore Ocean's 3: LPL, BB and the pick that BB and LPL made.
It might be a little bit hard to film a feature film without showing either protagonist's faces.
3:23
that's because you always ask "Where is anti-tamper switch" or "How do I disable anti-tamper switch"
you never ask "How is anti-tamper switch"
I'll go you one better. Why is the anti-tamper switch?
The guy who asks "What is anti-tamper switch?" Is the guy tied to the chair in the interrogation room.
It's also likely that guy's car is getting towed from "visitor parking."
OMG man, you're a genius! @_@
But When is an anti-tamper switch?
“Now for this video i will be unlocking this lock by just asking it nicely”
The doctor did it with a wooden door in the episode "heaven sent".
Communication is key!!!!
"Now for this video I will be unlocking this lock by seducing the contact point by using my plastic spork."
Using a Swiss Army Knife AND a paperclip?
Richard Dean Anderson wants to know your location.
paperclip was for in case it was a fluke.
"So, um. I'm in a bit of a bind. You any good at... uh... star-gates?"
@@AttilaAsztalos I mean they did have an episode where a guy builds a (one-time use) Stargate out of Ebay-ordered raw materials and a toaster and/or microwave. Granted, that guy was of the species that originally created the things, but still.
@@AttilaAsztalos "Chevron four locked, five is binding"
Stargate was cool, but RDA was also MacGuyver...
Woah, I thought using a paperclip only worked in movies lol
Hail Just Some Guy without a Mustache
Well, this was a movie, right?
IgnoreMyChan nah it’s the lock picker who picks locks and gives lawyer services
It’s an honor sir
For some reason I assumed you only watched anime related stuff
My school has a system similar to this to get into the boarding houses and you can legit just shake the door handle back and forth and it opens in less than three seconds
3 second head start !
Jochem Code I’m not American, we have a shooting range and shotgun area luckily there ain’t many dodge ppl around
What? Boarding houses? What are those and WHY are they in a SCHOOL?
CarterPlays Official not sure where you are from but in the UK secondary schools are almost always boarding schools, this means that pupils stay the night and effectively live in a boarding house until each holiday then they go home. It’s useful if people live far away for example there are lots of Russian students who fly directly from Russia into my school stay there and go back etc
@@ottolehmann5286 "secondary schools are almost always boarding schools" what? I must have missed something...
As a industrial electrician with a heavy background in control wiring I’ve had to use this method quite a few times to get into electrical rooms when nobody is there to open the door in the early hours of the morning. It’s a simple method but most people have no idea how to do this so it’s not a real issue for the most part. I’ve never came across one with the security spring wired in with the exception of the federal reserve’s in a few cities
The anti tamper switch doesn't neccessarly need to be wired to an alarm, but one way to increase security is to have a relay (with keyswitch or button for reset) on the inside, where the lock wiring is also connected. The tamper switch is simply connected in series with the NO contact on the relay, then the reset/keyswitch over the NO and C contact, to the coil, so the pulled relay effectively powers itself.
When tamper switch releases, the relay will lose power and only way to reset it is to reset via keyswitch or reset button.
Then wire lock wiring in series with the second C and NO contact, only providing power to the lock if relay is pulled.
This will create pretty much security for pretty low cost, as any tampering will disable the lock wiring, so regardless what attacker does, nothing will unlock the door, only way in is with physical key then press reset button or usevreset keyswitch on inside.
An reed switch (nc) can be added in series with tamper circuit to prevent using external magnet to trip the inside relay.
However, as we seen tamper switch can be easily be bypassed, but this creates a trap - like trap pins in a cylinder, once you trip the trap, your day is over.
Thank you LPL, your to-the-point videos are a breath of fresh air.
It's getting too easy
New challenge
"Open a key with a lock"
I don't think he knows how anymore
Insanely bored you read it wrong
@@dylanisaac1017 well I made this at 3 in the morning so what is one to expect
@@dylanisaac1017 I re read the comment 3 fucking times bc of u and then realized what it was about
Insert LPL hammering a key held in a vice with a MasterLock.
And the MasterLock opens.
This dude can break into a Secret Villain's base
Guy with moustache, Christopher moon, and now you. I see you guys everywhere.
KONO DIO DA
The three horsemen of the Weebpocalypse
"today I'm in guantanamo Bay, surprisingly, I currently have three dust particles and a fond memory of my childhood. Let's see how this plays out."
Mr LockPickingLawyer
Excellent presentation , as always. I am the small-scale technician , working in Greece , and use this keyboard too , Hoever....
I made some personal modification on it , replacing tamper switch with electro-optical coupling
and connecting the chassis to 15 KV , low amps transformation. After removing the screws , any suspicious intruders get very dangerous electroshock -but only once . Afterwards the circuit is out , to avoid any possible LEGAL problems , for the owner. Do this for 10 plus years with success. No lawsuit yet...
LPL: Unscrews with swiss army knife
Me: "Unscrew with confidence!"
tweezers are needed for this reference
We are on 'The Verge' of greatness
Allie X Actually that prevents electrical shocks, get it right dumb dumb.
Any flat pointed object like a kitchen knife or a spoon can be used to unscrew
imagine claiming to have an anti-tampering switch and not actually connecting it to anything lmfaoooo
Well, that's up to the buyer to put a sound alarm to the terminals, perhaps the seller of this electrical lock has a version that includes it, but it's cheaper to sell it without it and whoever acquires it can put any sound alarm they want in it.
Anyways, this is just a big failure because the central components are exposed to the outside of the lock, make it pretty insecure as LPL showed.
You don't want to know how many people kept the electrical fire monitor system on "manual override", just because “those false alarms are soooooooo annoying”.
Maybe its so it can be hooked into a buildings existing security system. Still pretty easy to defeat but some buildings I know prefer silent alarms.
Like those black plastic "cameras" with a flashing red LED. Or the "ALARM MONITORED 24 HOURS" stickers - no alarm, just the stickers.
Thats the case more often than not. Consider it a cost saving measure.
I would like to suggest you do a macgyver type episode where you must escape from captivity. So remove handcuffs decode a door lock, open a gun safe. Hot wire a car and open a pad locked gate. It could be a fun episode.
And probably done in 5 minutes, LOL
Houdini was LPL’s boyhood hero
I would love to see a TV contest show where there's like 10 doors in a clear-walled hallway, one hallway per contestant, and the first contestant to get out the final door wins the prize. Absolutely all tactics are valid, including under-door attacks, hinge attacks, latch attacks, kinetic attacks, and of course picking. Every episode they change up the doors and how they're secured, and bring in various locksports and pen tester people to compete.
To unlock this keypad lock, you'll need:
- A table
- A wireless anti-static wristband
- Some tweasers
And a Swiss Army knife, which hopefully has a screwdriver in it.
I understood that reference XD
Throwback to the verge
I clicked on this vid only for this comment, and I found it 😂😂
WHAT ABOUT THE TWEEZERS?! We must never forget the tweezers.
"im the lock picking lawyer and im in jail, dont ask how i got the camera but im going to open the lock and escape using some fluff i got off my bed"
"What do you mean our stock dropped 30%?!"
I mean that’s kinda the point of this channel to inform people of security flaws to allow them to make more informed decisions about what security products to buy and what not to buy.
Next time with the Lock Picking Lawyer: how to disable this electronic lock by looking at it funny. 🤣
So, a retinal scanner?
“Alex, I’ll take Comment We’ve Seen Four Hundred Times, for 800 please”
@@zeitgeist2720 weird flex, but ok
@@jasonc5781 How is seeing the same comment on every video this guy makes a flex?
... but, ... but, ... he doesn't have a face ...
Finally a use for a Swiss Army knife.
You mean other than to hand over to TSA?
When I worked on building control systems, I used this exact knife for most of my physical work from bathrooms to casinos to military research sites.
I still have one on my key-chain and regularly use it for all sorts of little jobs.
Old related joke, "The chainsaw starts with a roar and the rube asks, 'What's that noise'."
Finally?Are you sure?:)
Multi tools are a thing of convenience and are great for small things like this. If I didn't have so many keys I would carry one in my pocket.
I find they aren't up to the job for the work i do. They work in a pinch, but even a crappy tool for job far exceeds a small multi tool.
This was set up specifically for ease of bypassing. I've installed scores of seco-larm keypads over the years. They ship with tamper-proof screws that can't be unscrewed once tightened without the aid of a dremel or grinder to cut a groove into the screwhead. Also, in most cases the door is free egress just by turning the handle. You wouldn't combine a REX device with an electric strike. This allows you to disable the REX input altogether.
My point is that with a little forethought and planning you can eliminate the risk of these bypass methods.
You doing this shows how to fix my locks to be tamper proof. Great work
Why did you have to shame that depressed anti-tamper switch? It was doing its best :(
The tamper switch got all bent out of shape, how was that "doing it's best"?
Its best ain't good enough
Now it's even more depressed…
Really. Now it's just going to sit there and sulk for the rest of the day.
No it was not bcause it was not connected
Fatal design flaw: lock internals behind keypad should not be located in unsecured area.
THIS. The keypad should be just a data entry device, the actual security processing being physically secured.
Just put the wiring etc in the egress switch INSIDE, not outside in the unsecured area. Seems pretty basic....
@@arletottens6349 No it wouldn't. If you had malicious intents you could easily just cut the side or the front and again disable the system. imo infrared movement sensor inside the box could cut it, but those are unnecessarily expensive and still have their weaknesses. the basic design is flawed like hanelyn1 described, that system does't make any sense. You can basically disregard everything and just send a current through the wires to the actual lock and its open.
Only thing that should pass from the key pad is a rolling code to the controller on the inside. Then the only way to hack it is to figure out how the code is rolling. Goes from any dude with a paperclip can pick it to a class one hacker.
@@wolfpack4128 "figure out how the code is rolling"
i hope you mean "what code" not how. Any of the data shouldn't be handled in an unsecured area. They just send signal to the handler inside and the inside part checks if it's the right code not the outside part. There shouldn't be any wires connecting the actual lock to the unsecured area either. otherwise 9V battery will open it.
Company CEO: “We’re going to take the Masterlock business model *ELECTRONIC* !!!!”
Makes me happy that my door systems have their controllers on the inside of the building and where their are external components, either the card reader itself or a security relay between the video doorbell and the controller are designed to send a specific tone or series of sequence of voltage change and can't be jumped as easily as this.
These are awesome educational videos on how to bypass security and felony trespass into a secured area. I love it! Its like the Anarchist Cookbook but even better!
Seems like, knowing where there would be a wire for an internal alarm is located, you could have felt for the wire first with the paperclip before hooking the spring.
I literally said "is he going to bridge the connection?" Right before he done it and I was like "oh my God, that is a terrible design"
*excellent design
For thieves, that is.
It would be very cheap to make it a lot harder. Make an injection-molded piece of plastic that is around the circuit board that extends to the back of the plastic box. Minimal changes to the screw connectors would also be needed so the wire reaches them from over the board.
The minimal thing to add is a plastic cylinder around the spring with a companion on the box. so you can just hold it back.
@@target844 It is wrong design from begining, no matter how tamper proof you make it. Keypads should be used only for sending wired/wireless data signal to the unlock system located inside. If signal gets authorised, doors gets unlocked. Simple as that. No silly unlock switches, control circuits or anything else that can be tampered with should be located in numpads outside security doors/ building!
Whoa you're so cool
“Have a nice day.” So long as you didn’t install one of these to protect anything you care about protecting.
You dear sir, among many other things you do, illuminate the many opportunities for improvement security companies could take advantage of. My sole hope is for your hard work not fall into the abyss of "ToDo: Low Priority" bin.
Please keep on shining that bright light of yours!
I wonder how many locksmiths learn from this channel, keep up the good work LPL!
Lol I wonder how many thieves learn from his channel too
This is the lock picking lawyer and today i opened a high security bank safe with a tooth brush
No no no, he would at the very least also need a magnet and a small metal wire
Am I the only one that wants to see LPL in a escape room ?
That's amazing! I've got the same combination on my luggage!
12345
This video really made your channel seem more like tutorials not highlighting insecurities in locks that people might buy
As someone that has installed, maintained, repaired and replaced these types of access control devices I can assure you that this isn't a typical installation. It is especially different when there are additional tampers and triggers.
"By pulling that spring to the side i ensured that the anti-tamper switch stays depressed"
I have something in common with this anti-tampering switch. :(
depressed and cant do anything. (well i have to go to work and im still around here
Legend says the switch is now on a course of anti depressants and doing well.
At least for humans being pulled up by a loop ends pepression instead of keeping it. Riiiiiight? :D
0:31
"That's amazing, I've got that same combination on my luggage!"
She's gone from suck to blow!
Wait until she goes to plaid...
Classic. Mel Brooks is the best.
Best part of your sign-off imo is the "(pause).....in any case...." love to hear it lol
Used a professional unit for my garage door, took the extra step of removing the logic board and placing it in a secure container inside the garage. Now the only thing anyone had to work with was the wires to the keypad matrix and LEDs, they were all white and unmarked.
A friend of mine had a similar unit with the same modification except he ran two extra colored wires to a couple of unused pads on the board. These were trigger wires going to a CS gas canister dispenser that had a tube running to the back of the weatherproof box terminating right above the wire harness. It did its job one day, never had an issue since.
I've got a similar cheap keypad / RFID on my house. However you can prevent all of these exploits by making the tamper trigger if the screws are even slightly loosened.
Aside from this, also determine (or set) the exact time the keypad relay triggers the latch for, but instead of running that signal straight to the latch, run it to a small microprocessor (like an esp32, picaxe or arduino). The external electronics look for the exact trigger time, then outputs to the latch if correct. Also use N/C contacts with EOL resistors to determine if anything is being tampered with and have the electronics fail to a lock out state if triggered. Sounds a bit complicated , but mine's been working reliably off a Picaxe μP for over 10 years. The only annoying bit is the short delay before the door opens.
"Lemme show you how that's done" this man be roasting inanimate objects all day
Well my dad as a saying that feels fitting, mind you I’m translating, ”you only lock your door for honest folk”.
If someone really wants in they usually do as this channel proves.
If I may rephrase: Goal #1 of physical security: increase the cost+risk+effort that the dishonest person needs to succeed.
My dad (he's a locksmith^^) said: A lock is not a means to keep people out that really want in. It's a friendly reminder to other that it would be illegal to enter and you should not try.
I’m the LockPickingLawyer, and today we are going to be opening the lock by looking at it.
I watched only about 10-15 of your videos. But anyway, they are that much informative, that I instantly thought: "Screws on the FRONTSIDE of the keypad? That HAVE to be a bad idea!"
Because now I know, that my skills in electronic are more than enough to bypass or pick such electronic locks, simply by manipulating the power circle.
Thank you for that. I'm seriously think about, opening my own lock-picking service. But over here in Germany it isn't easy to open up SUCH a business. Does anyone knows, if it's legal to order AND receive the tools LPL is selling, when I'm in Germany?
Somebody obviously had too much contact with Deviant Ollam :D
Reminds me of the story about Houdini in a jail cell trying to bypass the cell door lock, supposedly gave up and then discovered it was UNLOCKED the whole time!
Have you ever had lock companies offer to hire you as part of their QA teams?
They'd hire a lawyer for that.
@@Julortizw what's that sound? It sounds like a joke except it's going right over your head...
@@JaredConnell This. Thanks. 😂
IIRC he said something like "I am not allowed to answer that question" once.
Not so much hire. They just send him "free samples" of the locks and wait for them to appear on his channel. I've seen that mentioned in previous videos. He's friends with the people at PacLock. Look for the skateboard video (#957).
"With out giving you too much detail" shows us exactly with great detail
I loved that. It's so simple if you know what you're doing.
Thanks to your videos I could pick my mailbox with someone else’s key XD. Those wafer locks are almost as good as not having anything.
Florida man, that lockpicked more than a 100 locks on trial said : "I watched a few videos from the LockPickingLawyer, and I was a master at picking locks".
"But what's the code?"
"Oh we don't need that anymore." 😂
I have installed many of those electronic strike locks. If the lock was on a perimeter door or higher security I would install touch pads with the logic bord remotely mounted to prevent tampering.
Always so nice to watch these videos on how to properly break into something.
Thanks LPL :)
3:57 I ran to my microwave.
I got here with in a minute and he’s already beat the lock
Quit your bullshit he got past the lock at 1:56 a whole 1 extra minute after you claim to have seen it.
@@PlinkyVR Tis a joke my fair person
@@person8064 what part of that is a joke?
@@PlinkyVR Everything
@@person8064 I don't see where there is a joke at all.... He's saying what we expect from lpl a straight to the point video how's that a joke
"This is the Lock Picking Electrician ...."
OTHER WAY TO PICK
Cheap pin pads common in North America is to just stroke across the keys back and forth and up and down.
Controller default setting only looks for string of numbers in correct Order.
It doesn't care how many other numbers in between
so stroking the keys in different directions sets the 4 - 8 programmed digit version of ungaurded pins
In so many movies an electronic lock is disabled by shooting it. I always thought no way would that work, but looking at some of the flaws you've pointed out in some of these maybe shooting the lock does work for some companies at least.
Those locks have been like that since at least the first one i saw back in the '80s. I always move the circuit board into the building and run wire to the keypad. What I would do these days is to make sure the circuits inputs from the keypad can handle 50V, and place 25V spark gaps on each input to prevent denial of entry attacks. And shield the latch from magnetic entry attacks.
MacGuyver is back with his swiss army knife
I'm really amused by the fact electronic locks are even *worse* than their mechanical counterparts!
This would not be possible with a real access control system that you see in most buildings
Hmmm. The ones I installed didn't have a long spring to push against the box. They had a thin metal frame that sandwiched between the pad and box using the same screws. If you loosened the screws, the plate would loosen in its "sandwich" long before you loosened it enough to get a tool in and opened the tamper switch. Also, there was no wiring header, just wires that you then used quick connectors or soldered into the cabling. If you didn't install these on a box and just mounted them straight on the wall (allowed in residential), you simply cut a smaller hole to accommodate the PCBA and used drywall screws, no plate necessary.
Not that they were unbeatable. If you knew where the switch was, you could pretty easily shim it before loosening at all and carefully unmount it. And back in those days, the code was set with jumpers or dips, so you could just read the code and put it back.
I do this all the time at work. I work in many different buildings and they use this keypad to prevent dementia residents from using the elevator, but half the time they don't tell me or I forget the code. Super simple to use a tweaker screwdriver to loosen the bottom screw, short the eg contact, then screw it back in. Almost as fast as using the code
Now I can steal the test answers in my teacher's pin locked door.
Roblox
@@integrationofmanandmachine4714 what ok lmao
The Lock Picking Lawyer to security device manufacturers: "Go ahead... make my day"
_"Hold my tension wrench."_
"unpickable? Challenge Accepted!"
“That’s the same combination I have on my luggage”
Scott Tillman I was about to leave this exact comment.
I have 0 0 0 0 , that easy to remember
I really enjoyed the video, the only issue I see is that you aren’t required by fire code to install an egress button for electric strikes. As long as the handle on the other side is unlocked allowing for free egress. Maglocks are a different story, and having the handle allow for free egress does lend vulnerability for an under the door attack. That being said, still loved the video, just wanted to make that statement.
Lockpick expert, knowledgeable gun owner, and a lawyer. There should be movie about this guy
Wait a minute: if the anti tampering switch is not connected, the paper clip to hold the switch spring demonstration is not convincing! BTW, big fan. Love your videos. Glad you reveal these security flaws to help improve design and debunk false sense of security.
There were no wires to the anti tamper switch, that's why he removed the paperclip. He explained how the spring is kept activated by it being pressed on the backplate. Ex: if someone removed the screws and started taking the plate off, the spring would lose it's tension being separated from the backplate thus triggering the alarm.
No one:
L.P.L: "today I'll be showing you how easy it is to enter the Pentagon"