I don’t know how you manage to get so many people, myself included, to watch you pick locks almost every day. Not complaining, it’s truly fascinating to see your raw skill.
@@VectorxMan he did not even elaborate to make clear what is that he made to improve or whether he built the thing from scratch. If it was me I would have bragged about it for two hours
When he says people wanted to see the robot run for longer I thought "who would want to watch a robot run for 9 minutes?" I then proceeded to enjoy watching a robot run for 9 minutes.
I mean, a minute or two sure, just to get an idea of how it runs at normal speed, but it would be interesting to see how the mechanism is turning the dial in slow motion. I've always thought that it you mess up one number in a combo safe that you have to spin it and start over from the beginning, but apparently I need to do more research into that. It seems as if there's a shortcut to try multiple secondary and tertiary numbers without necessarily needing to start all the way over.
@@Yuki2204 saw one of these used at the bank I worked at when a teller screwed up a combination change. We still used it for years afterwards with no ill effects.
@@ottokiehl5413 1337 means "leet" as in "elite". It became a kind of language where letters would be replaced with similar looking numbers if applicable. for example, "Hello" would be like "H3110" big joke in gaming communities usually
Thieves don't usually use this type of machine - it's main use is situations where the legitimate owner of the safe would like it opened non destructively but forgot the combination and an expert safecracker isn't available.
@@zerog2000 Trinamic stepper drivers are pretty good. They are very silent and also come with other cool features like detecting stall by measuring back EMF, also with load-dependent current control (motors will run cooler) and much more. I wonder how much that robot cost.. it looks like it is some kind of prototype (3d printed parts)
I expect a real servo motor would be superior. They are faster, quieter and can be more accurately programmed. The downside is that they are more expensive.
It's the first time that "looks like WE got this open" makes sense. Up until now, he was the only one opening the locks. Now they are two and BOTH are machines.
I started to watch and then got hypnotized and closed my eyes. I opened up (feeling refreshed, but remembering nothing about it), about 1 or 2 before he unlocked it.
@@ipick4fun27 it looks like "leet". if you google "1337" or "leet' or better yet "1337 leet" youll find all the information you could ask for. theres even a wikipedia page that I didnt know about LOL
@@ipick4fun27 It's supposed to be called "leet" speak like as in the word elite. if you remember back in middle school everybody would write "800813" because it "looks like boobies upside down". same concept with 'elite speak'. You basically just replace letters with numbers wh3r3 4ppl1c4ble lik3 th1s and say things like g3t 0wn3d k1d. It's super cringey even when it became a fad and it thankfully died down fast but you'll occasionally see 'skript kiddies' still talking like that because they think they're an 3l1t3 h4x0r when in reality they barely learned the basics of cheat engine. You can usually spot one from miles away because they'll undoubtable have the F4z3 C14n l0g0. God that physically hurt to type and press enter.
For those wondering how it knows when it hits the right combination: After the last digit is correctly guessed, the dial will only turn back so far before it stops spinning. The robot monitors how much resistance there is and when it's suddenly prevented from spinning the dial, it knows it hit the right combination. If you go to 10:50 and watch in 0.25x speed you can see what's going on pretty clearly. As the middle gold disk turns clockwise, this is the robot entering the next digit (notice it spins a bit further each time), and at the end of each clockwise movement you'll see the outside ring with the gate in it move one more tick. It then goes counter-clockwise back to the previous position before trying the next digit. However when all digits have been entered correctly and the gates are all aligned, and the dial starts to turn counter-clockwise again, it allows the hook to fall into place (the loud click in the video) and stop the dial from turning back to the previous position. Since I'm this far, I'll include how the hook & rest of the physical lock works: If you look at the top right of the hook there's the white indent looking bit, that's a piece that's deeper than the rest of the hook that needs all 3 gates aligned so that the hook can move to the left and catch on the cut out bit of the gold ring (when the gates aren't aligned, that bit is just resting against the outside of the 3 rings). At that point, as you(/the robot) continues to spin the dial counter-clockwise it pulls the hook up, including the gold deadbolt looking piece that the hook is attached to. That deadbolt bit is what's physically blocking the silver cylinder at the bottom, which is connected to the bolts keeping the door closed. You can see at 10:56 when he retracts the bolts that the cylinder goes where the deadbolt originally was. This is why when you close a safe after you lock the bolts (normally turn the handle back to the closed position, if you're using the safe normally) you need to spin the dial to properly lock it. It pushes the hook out, which moves the deadbolt back down, and spins the gates so they aren't aligned anymore.
This ia a nice directive explanation 👍, thanks! I'm surprised how little clearance is involved in keeping the safe bolt blocked. The fact that this explanation only got 23 likes, 1 from me is very telling about the audience as a whole and a little sad. Hence LPL gets paid, they don't.
I own a small CMI fire-rated safe with this SG combination-lock fitted, but it won't open despite using what I'm certain is the correct combination as dial does seems to stop where it should when using those numbers. Can these mechanisms bind if left to gather a bit of dust & grime? Story is that I purchased safe in mid 1995 and was using in my jewellery manufacturing business before retiring due to ill-health. After sitting unlocked in my garage for about 5yrs, a friend shut & locked it before I could stop him as I wanted to check it, & now 5yrs on I'm still trying to open it as I'm in the process of moving and I would like to use it at my new residence.
@@stevie-ray2020 Binding would be a pretty serious failure. If it was common there would be complaints online. Stating the obvious just in case: 1) the S&G knowledgebase articles e.g. stuck lever and misaligned wheel 2) the basics: mis-remembered combination order / turning the dial the wrong way / forgot you changed combination / etc. Good luck! You can always buy a robot, drill and repair it, learn lock manipulation or take it to a locksport convention as a challenge.
Hmm I would guess that a simple way in countering this attack is adding a disc with a centrifugal detent. On normal operation one does not spin the dial that fast.
@@eristheslayer hm it’s not really locking you out. It’s just stopping the rotation momentarily, so it WOULD fool the automatic mechanism that detects the opening of the lock. And even if you make it avoid it you still make the dialer slow enough to be impractical
The digital versions the military use have those type of functions: It knows a human can only turn the hand so far, and it requires a variable speed of a human. otherwise it resets. (as far as I know, there is no known surreptitious way to enter these versions.)
@@annakelly9850 Would it simply be possible to read a value from a random number generator for the speed, add ramp up and ramp down features, and simply limit it to the speed/range of a human? Jitter could possibly be be introduced randomly too.
@@Jeff-ss6qt Nope. If that dial spins fast enough it stops the whole process. So, you have to make the dial turn so slow that it'll take a long, long time. You can still use a robot, but the robot won't speed it up, just make it automated.
Crap, now I gotta go watch it for the wingnut ? Seen these operate enough back when I owned one. LOTSA of safes it will NOTY work upon, for reasons I will not enumerate.
@@citylockapolytechnikeyllcc7936 Cam here to see if anybody noticed this... :P You can see it clearly if you move the fwd. But it's moving left, so either it is tightening or it is a left handed screw.
This video is just long enough that the final "click" at the end was super satisfying. Anyone who's ever successfully run a password brute force tool knows how good this feels, when it finally finishes! 😅
Not only in physical locks but also accounts and WiFi password cracking brute forcing is practically impossible especially the security that they implemented but changing the password like 12345678 and the computer says the password is been crack it's a satisfying moment
I kind of know this? Though in a completely different context. The Resident Evil 2 remake that was released back in 2019 has a couple of three wheel six letter combination locks, and I brute forced all of them. Not quite the same, but it still felt satisfying.
Is not one of the ways brute force attacks are made more difficult is to have max tries before a cool down period that gets progressively longer? Could something mechanical like that be added to a combination lock like this?
I reckon you could speed up the algorithm by skipping the "long distance" numbers, its much faster doing "close by" numbers, so if you prioritise testing those combinations first you get through a larger portion of your testing regime sooner.
That won't work because of how it is testing. As you see it is holding numbers one and two until it tests all of number three. It does this because if it wants to change numbers one or two it has to go all the way around the dial in reverse. Good thinking though.
I thought the same thing. Essentially keeping the total of the 3 lock combination numbers as low as possible for as long as possible. Letting the cracker go through more numbers at the beginning and slowing down as it goes through the combinations.
Just imagine walking through your office at night and hearing what sounds like a 3D printer, going to the safe room and finding this thing whirring away on its own
Thank you for showing the interior of the lock. I used one of these locks on a gun safe I made for my father, and he accidentally broke the dial off, rendering the lock unopenable. Now that I have seen the internal mechanism, I know how I can defeat it and open the safe.
Fantastic mate. 50+ yrs ago I was a watch and clock repairer in Adelaide. Had a customer with an S&G lock on his floor safe. Fortunately the door was off when the lock stopped working. One of the springs had broken (rusty). It was many years old. I had a LOT of fun repairing it and and repairs to the number change system. Pity so many new safes gone electronic now.
It was genuinely one of the coolest things I've seen in a long time, I have never seen the mechanism of a combination lock like that work internally and it's super interesting!
10:30 is the moment you want; it cycles back through the previously found spots and then cycles through one more time to unlock 👍 great mechanism and computing
If you’re using a robot to brute force a safe open do you really care about the well-being of the lock? If you cared you’d probably have the combination.
"Nothing on one, nothing on two ... nothing on seventy-seven, nothing on seventy-eight ..." Auto-dialers are legit tools for locksmiths but it's not recommended that they be used repeatedly on equipment that one cares about. The interior shot should make it plain that they can cause wear of several components.
I can't imagine a situation you would need to use this on the same lock repeatedly. If you are stealing, you just need to use it once, if you forgot the code or just don't know it, you would also need to use it only once. If you have brain damage and are always using the machine to open your safe instead of using the code, then you might have a problem.
@@mindfortress105 Yes, that's my point. It's a legitimate tool but it would be unwise to use it for fun. Doing so might be a sign of brain damage. Or thoughtless, anyway.
if these robot beasties ever became a problem, lock makers could do what IT departments have been doing for 50 years -- too many failures in a row would cause a lockout for a few hours.
You’re describing a use case that is ridiculously rare. Don’t use that poor little lock for fun! If it’s their lock it can be used in whatever way they see fit to use it. And you’re calling others brain damaged. Or trolling
Because he knew the combo ahead of time and he could see it was about to open it. If you have the back of the lock open like he shows, you can get the combo in a minute by turning the dial and watching the wheels align.
@@G58 unless you were continuously spraying it, something like wd40 is too light and would get wiped away pretty quick with only one coat. Basically, the lock would need some sort of oil bath to handle that kind of abuse without tearing itself apart.
TheOldPioneer Great points. Thank you. It would be interesting to see how much or how little and how frequently dosing would solve the problem, and how well an automated spray feed could be implemented. I find that GG58 leaves a water resistant coating which also lubricates. Maybe a top down delivery squirt every 60 seconds could sort it. The most valuable component in any engine is the oil. It’s also one of the cheapest, easiest to change, and most often neglected. My ‘02 diesel Mondeo has done 200,000 miles, and to be fair I don’t service it according to the manual. I haven’t touched the injectors. But the emissions are .52 where the max is 1.50! Regular oil changes using quality oil. 🧐😎
Let it be known that LockPickingLawyer will win ASMR video of the year award.🏆 The cadence of his voice along with the metronome quality of the safe cracking machine make for a perfect video. Thank you!
We have one of these in our shop. Only used it about 3 times in 5 years. Only really need it for Tl-30's that are hard to drill etc. The lock in this video can be manipulated by taking readings easily with practice.
There is probably an algorithm it could use to calculate travel distance and do shortest travel distance numbers first. It could knock over a bunch of the solution space faster
There are also general rules about the relationships between the digits you’re recommended to not violate as those settings are apt to bind up the lock and such. From S&G’s manual they suggest the following which also would constrain the solution space a lot… 1. Do not select numbers which all end in “0” and “5.” An example of a poor combination is: “50 - 15 - 30.” An example of a good combination is: “52 - 15 - 37.” 2. Do not select numbers in an ascending or descending sequence. An example of a poor combination is: “22 - 41 - 68.” An example of a good combination is: “22 - 68 - 41.” 3. Leave at least a ten number margin between adjacent numbers of the combination. An example of a poor combination is: “41 - 39 - 66.” An example of a good combination is: “41 - 30 - 66.” 4. Do not use a number between 95 and 99 or between 0 and 20 for the third (or last) number of the combination. This can cause a condition which will inhibit the mechanism from locking correctly. 5. Avoid using easily guessed numbers (birth dates, house and phone numbers, etc.).
@@JamesReedy Note that LPL said that certain combinations are omitted, which is why it has ~800,000 possible settings instead of 100*100*100 = 1,000,000.
Newer S&G digital spin locks defeat this attack in a couple of ways. When you start turning the dial in a direction, it picks the starting position at random. Also, consistent spinning of the dial, i.e. not the "pulsed" spinning you get by hand will be rejected.
The newer S&G mechanicals make you push in at 0(zero) and then continue to open also... 1/2 price of the Electronic locks.... and minimal failure rate compared to the Electronics also.
They use the electronic locks on newer SCIF containers (cabinets and room doors). Easier for security to update codes on a regular basis without having a locksmith come in and change 50 container codes.
@@ejm57301 electronic locks are far better in almost every conceivable way, that's why high security ones can be expensive. Combo locks are good for a safe you'll be entering once a week or less. Anything you have to enter a couple times a week or more, there's no better method than electronic.
@@littlejackalo5326 true, but as an EE I know from experience all electronics fail eventually. Not that mechanical locks can’t too but I have more faith in them than a digital lock. Also push buttons can wear leaving a pattern that constrains the number of guesses one would have to make. That said I realize too many wrong guesses results in a delay on most locks…
With the introduction about 1 minute, 15 seconds to unlock the safe, another 15 seconds to show it's not a fluke, then the rest of the vid showing his comments about how good or bad the lock is.
I spoke with a safe expert. He said auto dialers are dangerous because the more you use a dial, the more risk you can destroy the mechanism, especially with old dials. He said to never use these with old dials, and probably not with new dials if you want to protect the gear. He said even a person trying an old dial a few times can destroy it.
I imagine it would depend upon the safe being cracked. I've worked with a number of large bank safes in my time that it might struggle with at such speeds due to their poor lubrication and service history. The machine likely has a way to tweak the speed though.
@@Thermalions These NEMA 23 units has a pretty decent amount of torque. They're often used for high end 3D printers. The good thing about the feed back system they're running is that you can set it to "talk back" mode. The program tells it to go to a certain position, and it flags the program when it reaches that position. So you pretty much don't need to account for resistance/slow movement in an application like this.
Not that hard to predict when its gonna open looking from the inside, i knew almost exactly when its gonna open by predicting when all three notches will align.
assumedly he already knows the combo and started the machine pretty close to that. Especially since the first number was 63 which would take 20 hours to get to. A cigar and drink is still probably in hand though
I guess since he knows the combination and has a tablet that shows the numbers being tried, he knows roughly how much time it takes to get to correct combo
LPL, at my work we sometimes install security doors with, I'm fairly certain, S&G 8550MP locks. I recently noticed they had replaced the metal discs in the lock with white plastic ones. When using the robotic safe-cracker, have you noticed any heat build up in the discs? Seeing the change to plastic discs made me wonder if melting or softening the discs would/could be a viable attack. Maybe something as easy as some kind of rubber disc on an angle grinder would spin the wheel fast enough to melt/deform the discs inside the lock. I imagine S&G has put enough r&d into it so that they feel it isn't a problem, but the thought struck me that it might be an option.
What do the discs actually do? Something as simple as butane jet lighter might be enough to melt the disc. Could it be that they are teflon discs? Teflon melts really high and is really slick, sometimes even used as a lubricant.
As cool as the safe cracker is, I would love to see a video with the saves themselves as the main feature. Either way I love your videos and the way you explain topics with genuine enthusiasm and interest. It shows in your work and is not lost 👌
Man ngl, I've struggled with sleep deprivation for years, struggling to fall asleep, but I fell asleep listening to the sound of that machine doing its work. It was oddly enough very soothing and stress-reliefing, my breath synced somehow with the tact. 10/10 would recommend! Very interesting to see how it's working. I would however like to see more of the inner workings of a safe lock, would that be possible? Or is it stupid-simple like, I'm looking at it right now?
Should be split screen showing both the front and back simultaneously. Easy video to make after having set everything up once and people would love it. It's great to watch the back tumbler (or whatever it's called) turning ever so slowly.
Would love to see more vids about the internals of these types of locks. I dont quite get how going back and forth like it does solves the combo. Many of these types of locks I've seen require you to go a multiple rotations past a number.
Note how it does a full sweep of the last number, then increments the 2nd to last number, and sweeps the last again...it's checking all possibilities just not redialing the first 1:2 numbers for checking all of the 3rd.
Back and forth is a trick to exhaustively try the third number after the first two numbers have been dialed. This is due to the mechanical nature of the lock and the only way to defeat it is to get a lock with a 4 wheel pack.
It's not only a dial safe opener but a doubles as a durability tester. Any safe that endures that and still functions normally would be an industry gold standard of quality.
[1337] new world (LPL's world) record length video! Over 11 mins!! As always, the LPL doesn't disappoint unlike many products showcased on his channel.
why are people acting like it's such a big thing that his video is over 11 mins long lmao. yes, the product here is different than him picking a lock, the video length will be different.
Until I saw this video, it just never occurred to me that you could check a combination in such a way as to preserve the first two digits while running through all the possible iterations of the third digit.
Why did I just sit here and watch a safe dial being turned super fast by a robotic/Android device? I enjoyed the whole video immensely which is the scary part! Nice break from your normal Lock Picking Magic!
I went on my first acid trip about a year ago. When i would disassociate and freak out, your videos would ground me. I dont do acid anymore but all your videos are still great. You dont miss
I’d still love some explanation how a safe lock works when operated manually, obviously trying out a combination does not require to re-enter all three numbers but the third digit Can be changed repeatedly without altering the first two… I only used the “Master” locker locks so far, and those require a complete reset before the next sequence can be entered…or so it seems
What is the heat build up inside the lock mechanism? Seems like the constant movement would cause extensive wear on the lock. Very, very ingenious device
@Opecuted that does seem to be the better option, though it's probably also something manufacturers are more likely to take precautions against. It might be cheaper or easier to just replace lock parts than to replace everything the drill got through, as well.
Unless you're Parker cracking the Bank of England vault, in a very respectable 2h25. Then he cracks their new high-tech vault in seconds with a hairpin 😁
Interesting to see the inside. The safe we have (Netherlands and Norway) requires you to turn a key to probe if the code was correct, I guess this robot is not suitable for those types?
Running an auto dialer that fast will usually cause the drop in bar to skip over dropping into the drive cam. They also cause quite a bit of wear to the lock and having to run it more than once adds wear and takes more time.
There was something oddly soothing about the interior view. It was also fun watching the gate on the bottom wheel inching closer and closer to an open. There has to be a more efficient algorithm than exhaustive search, but that would require interpreting feedback from the lock, which you're not likely to get from something as well-engineered as a Sargent and Greenleaf.
An obvious one would be, if the combination is user settable, taking advantage of the weak link in any security system (the end user) to narrow initial searches to ones likely to be chosen by humans. The obvious and best known pattern for this is dates, which drastically cuts down on possible combinations (taking 100/100/100 down to 31/31/100, even less for the second number if date format can be locked down).
If you've got to try all the combos, how would an algorithm help? Honestly curious how you're thinking. I think the way this device is programmed makes most logical sense.
@@ryanmalin The idea is to _not_ have to try all combos. That would, of course, depend on knowing the design and manufacturing idiosyncrasies of the lock, being able to get feedback about the internal state of the lock, etc. For an S&G combination lock, a brute force attack may be the only feasible option. At the other end of the spectrum, manipulating a Master combination lock is trivial because the lock practically screams feedback at you. Thank of it as an exercise in cryptanalysis. The first thing you do is try to guess what the user may have used as their key. Next, you see if there are any weaknesses in the system that can be exploited. Brute force is the last resort because it rapidly becomes infeasible. It will eventually work, but it may take much longer than the age of the universe. Given the extremely limited key space of a mechanical combination lock, exhaustive search is practical, if time consuming. I'm just wondering if there's some way to discover and exploit weaknesses so exhaustive search isn't necessary. This is mostly a theoretical concern. For the given problem domain, this is a very clever and useful device.
That can be defeated or delayed if there is a thermal fuse type thing that locks up the mechanism after friction from high speed manipulation heats it up
If the metal gets that hot sure. But metal on metal doesn't make nearly as much heat as your thinking. Then you have the fact a mildly warm day may be enough to equal the heat from this type of attack. You've made it harder to break in, but you've also made the safe completely unsellable to any place that has heat problems
I think that you can eliminate a lot of numbers by adding some torque/resistance measurement and spinning the dial. Testing all numbers where there is a sudden change in resistance should point you to the spot where there is a gate so decreased friction on the latch and then trying those in different combinations until it opens.
Needs more Raspberry Pi! But more seriously; couldn't good safe manufacturers put in some sort of mechanical lockout if it detects a certain rate of guesses? Would require power to the safe but that seems like it'd give a machine like this a bad day (assuming it's EMP hardened inside the thick metal case and has sufficient battery backup).
@@jooei2810 You would know the manufacturer. They would advertise that feature. I bet a simple internet search would be sufficient. Some can be defeated with resets or dimming attacks.
Human error will also be a problem due to inaccuracies in hand movements, imagine a scared old person and their shaking hands, they would likely use a safe for jewelry etc
Ok so that was the most confusing thing I've ever watched. Could it be slowed down was very confusing the direction turning. It did bring back memories of my father doing his taxes with the adding machine with the paper that prints out. 😊
In the top right corner of the video window, there's a little gear icon. Click on it, and a menu folds out where one of the options says 'speed'. You can slow down or speed up the video there at your convenience.
Don't forget to fasten your winged bolts tight. That right one was slipping, as seen by fast forward.. This video has me all giddy because of how cool this is!! Thumbs up!
"Now, normally this security guard would pose quite the problem, but due to an oversight they do not wear any gas mask or other gas attack protection if there is no high security alert. So I'm simply going to toss in a canister of the high grade sleep gas, if you want a canister on your own I sell these on my website."
This is so cool :) From a lock forensic perspective... even if you can attach and remove the auto dialer without leaving a trace, the wear and tear on the lock mechanism itself must be detectable, no?
This should also be optimized by executing the least-travel moves first, or at least have the option. I could see it potentially cutting down on time but could also shift a longer travel result further down the brutelist
![[356] Banggood Lock Pick/Snap Gun Review](http://i.ytimg.com/vi/7bYPF4TZA3c/mqdefault.jpg)
It took 20 hours, and we opened the lock. Now let's do that again to show it wasn't a fluke...
funniest shit ive ever seen
Underrated Comment^^
LMAO
Well, since what it was doing is brute force guessing all the available combinations till it get it right, it was literally a fluke.
@@yuricopperhooves Would a fluke not be guessing in less than a brute force manner (say a very small % of possible combination iterations).
Me: 11 minute video! The lock must be great!
LPL: Brute force guessing
it was hella satisfying doe
And it's still great
worth noting that it's a zero skill attack. LPL is an expert, but basically anyone can push "start" and brute force a combination.
22 minutes video to prove it''s not a fluke, I''m glad he spared us that.
@@Melissanoma Not quite "zero skill". Give me the thing, and I can most likely operate it. Give it to anyone off the street, perhaps not.
I love how LPL's longest video is also the only video where he does nothing.
464 is over 30 minutes
@@mrpw1402 yep, he used to do a lot of 15+ minute videos back in the day.
😅
That's because if he cracked it himself the video wouldn't even reach 5 minutes, gotta make the robot feel good about itself
That's cause he's 1337 LEET!
The noise is the robot saying "nothing on one" two is set" "3 is binding" in robotic language
All I hear is 1000000000000. Oh shit sorry, I meant "yes, no, no, no, no, no, no, no"
The best comment i have read this week.
lol
I don’t know how you manage to get so many people, myself included, to watch you pick locks almost every day. Not complaining, it’s truly fascinating to see your raw skill.
Funny you say this on one of the few videos where he doesn't actually show said skill. 🙃
@@sctjkc01 because programming, assembling, and syncing the *home made* device doesn't require a skills.
I don't even remember how I got here
@@VectorxMan he did not even elaborate to make clear what is that he made to improve or whether he built the thing from scratch. If it was me I would have bragged about it for two hours
Answered your own question there
When he says people wanted to see the robot run for longer I thought "who would want to watch a robot run for 9 minutes?" I then proceeded to enjoy watching a robot run for 9 minutes.
video skipping gang checking in
It's mesmerising indeed... But I skipped AF 😂
I mean, a minute or two sure, just to get an idea of how it runs at normal speed, but it would be interesting to see how the mechanism is turning the dial in slow motion. I've always thought that it you mess up one number in a combo safe that you have to spin it and start over from the beginning, but apparently I need to do more research into that. It seems as if there's a shortcut to try multiple secondary and tertiary numbers without necessarily needing to start all the way over.
Unfortunately that noise does something unholy to my psyche.
Dunno about 9 but it was useful in my mind to confirm it was doing what I thought it was (only working the last 2 numbers against each other)
LPL: This is a high qualiy lock.
Also LPL: Unlocks it without being in the same room as the lock.
High quality lock knows it stands no chance against LPL, unlike low quality locks which fate is to be opened via a piece of can
HIS POWER GROWS EXPONENTIALLY
that said, it did take 10 minutes when being opened from another room, clearly his power is diminished with distance
Such a high quality that he had a robot do it
Safety feature incase its booby trapped!!
Surprised the the lock can take 3 days of rotation without burning up!
Surprised to see you in the wild. I love the content man.
Yeah I kept thinking about all the wear this must put on the lock assembly. Can’t be good for it.
@@RaggedsEdge If you are bruteforcing a lock like this you probably don't care about it surviving to be useful after
@@Yuki2204 yes I agree that’s probably true.
@@Yuki2204 saw one of these used at the bank I worked at when a teller screwed up a combination change. We still used it for years afterwards with no ill effects.
I love how the "robotic cracker" became the 1337th episode.
elite
oh shit your right
nicee
What's the significance?
@@ottokiehl5413 1337 means "leet" as in "elite". It became a kind of language where letters would be replaced with similar looking numbers if applicable. for example, "Hello" would be like "H3110"
big joke in gaming communities usually
it's pronounced "1337est" episode.
This looks like a device I'd see a movie and would complain about for being too plot convenient
Though, in a movie, this would take 30 mins *tops.*
you do have to run it for hours to days though, so it's not that convienient
"Barely an inconvenience!" 😀
@@gregorygurvich7122 Oh really?
"007 the unedited 3 day cut"
Wideo nr [1337] deserved something as cool as this is!
Nuclear wessel
I’m glad I’m not the only person who picked up on that
1337 as!!! Let's go
LPL is leet
it truly is a wery wirtuous wideo, with a wast amount of waluable information
“Finally, a way for me to sneakily break into safes”
Proceeds to be louder than a fax machine
Maybe they make silent stepper motor drivers for this setup? But even safes cylinder/dial mechanism can be noisy itself when operated
Thieves don't usually use this type of machine - it's main use is situations where the legitimate owner of the safe would like it opened non destructively but forgot the combination and an expert safecracker isn't available.
@@cr4zyj4ck or if say you know the owner is away for a few days and you want access to his safe👀
@@zerog2000 Trinamic stepper drivers are pretty good. They are very silent and also come with other cool features like detecting stall by measuring back EMF, also with load-dependent current control (motors will run cooler) and much more.
I wonder how much that robot cost.. it looks like it is some kind of prototype (3d printed parts)
I expect a real servo motor would be superior. They are faster, quieter and can be more accurately programmed. The downside is that they are more expensive.
It's the first time that "looks like WE got this open" makes sense. Up until now, he was the only one opening the locks. Now they are two and BOTH are machines.
He always means "the royal 'we'". ruclips.net/video/E09LU6XVyxs/видео.html
"This is getting out of hand- now there are two of them"
@@seanj3667 I was expecting some rick rolling but thanks I guess
Soon, he will become one with the machine, and no lock will resist him. He will gain access to all. No lock will be safe.
He's the only one that can make us watch a spinning robot arm for 11 minutes
Nah, thanks to fast forward.
I started to watch and then got hypnotized and closed my eyes. I opened up (feeling refreshed, but remembering nothing about it), about 1 or 2 before he unlocked it.
Yup
Now let's see that in super slow mo. Lol that machine is super impressive. 👌
It was relaxing.
I love that you picked 1337 for the super high-tech video.
#SpoilerAlert, jeez.... hehe :)
What's the significance of 1337? I heard ppl keep talking about it on 1336.
@@ipick4fun27 it looks like "leet". if you google "1337" or "leet' or better yet "1337 leet" youll find all the information you could ask for. theres even a wikipedia page that I didnt know about LOL
@@ipick4fun27 It's supposed to be called "leet" speak like as in the word elite. if you remember back in middle school everybody would write "800813" because it "looks like boobies upside down". same concept with 'elite speak'. You basically just replace letters with numbers wh3r3 4ppl1c4ble lik3 th1s and say things like g3t 0wn3d k1d. It's super cringey even when it became a fad and it thankfully died down fast but you'll occasionally see 'skript kiddies' still talking like that because they think they're an 3l1t3 h4x0r when in reality they barely learned the basics of cheat engine. You can usually spot one from miles away because they'll undoubtable have the F4z3 C14n l0g0. God that physically hurt to type and press enter.
For those wondering how it knows when it hits the right combination: After the last digit is correctly guessed, the dial will only turn back so far before it stops spinning. The robot monitors how much resistance there is and when it's suddenly prevented from spinning the dial, it knows it hit the right combination.
If you go to 10:50 and watch in 0.25x speed you can see what's going on pretty clearly. As the middle gold disk turns clockwise, this is the robot entering the next digit (notice it spins a bit further each time), and at the end of each clockwise movement you'll see the outside ring with the gate in it move one more tick. It then goes counter-clockwise back to the previous position before trying the next digit. However when all digits have been entered correctly and the gates are all aligned, and the dial starts to turn counter-clockwise again, it allows the hook to fall into place (the loud click in the video) and stop the dial from turning back to the previous position.
Since I'm this far, I'll include how the hook & rest of the physical lock works: If you look at the top right of the hook there's the white indent looking bit, that's a piece that's deeper than the rest of the hook that needs all 3 gates aligned so that the hook can move to the left and catch on the cut out bit of the gold ring (when the gates aren't aligned, that bit is just resting against the outside of the 3 rings). At that point, as you(/the robot) continues to spin the dial counter-clockwise it pulls the hook up, including the gold deadbolt looking piece that the hook is attached to. That deadbolt bit is what's physically blocking the silver cylinder at the bottom, which is connected to the bolts keeping the door closed. You can see at 10:56 when he retracts the bolts that the cylinder goes where the deadbolt originally was.
This is why when you close a safe after you lock the bolts (normally turn the handle back to the closed position, if you're using the safe normally) you need to spin the dial to properly lock it. It pushes the hook out, which moves the deadbolt back down, and spins the gates so they aren't aligned anymore.
This ia a nice directive explanation 👍, thanks! I'm surprised how little clearance is involved in keeping the safe bolt blocked. The fact that this explanation only got 23 likes, 1 from me is very telling about the audience as a whole and a little sad. Hence LPL gets paid, they don't.
Big brain explanation?
I own a small CMI fire-rated safe with this SG combination-lock fitted, but it won't open despite using what I'm certain is the correct combination as dial does seems to stop where it should when using those numbers.
Can these mechanisms bind if left to gather a bit of dust & grime?
Story is that I purchased safe in mid 1995 and was using in my jewellery manufacturing business before retiring due to ill-health.
After sitting unlocked in my garage for about 5yrs, a friend shut & locked it before I could stop him as I wanted to check it, & now 5yrs on I'm still trying to open it as I'm in the process of moving and I would like to use it at my new residence.
R a vs S a f 😂
@@stevie-ray2020 Binding would be a pretty serious failure. If it was common there would be complaints online. Stating the obvious just in case: 1) the S&G knowledgebase articles e.g. stuck lever and misaligned wheel 2) the basics: mis-remembered combination order / turning the dial the wrong way / forgot you changed combination / etc. Good luck! You can always buy a robot, drill and repair it, learn lock manipulation or take it to a locksport convention as a challenge.
Oh my god, truly an elite tool
for such an elite youtuber
*eLEET
I understood this reference
FAQing elite!
l33t
100% worthy of being episode 1337, as this this is VERY 1337.
Cringe
Came here to note that episode 1337 was indeed not wasted
This is absolutely intentional. Well played Mr lawyer.
@@bigsteve6729 what are they saying? It seems some kind of nerd speak that I cannot fully translate
@@helpabrothawithasubisaiah5316 Urban dictionary exists for you
I'm ready for the 10 hour version to help me go to sleep. This is joyfully mesmerizing!
I recommend getting a cheap 3d printer. makes the same sound and you can make stuff with it
Old matrixprtinter. :)
Hmm I would guess that a simple way in countering this attack is adding a disc with a centrifugal detent.
On normal operation one does not spin the dial that fast.
How annoying (and potentially dangerous) would it be if your safe locked you out because you were opening it too fast though
@@eristheslayer hm it’s not really locking you out. It’s just stopping the rotation momentarily, so it WOULD fool the automatic mechanism that detects the opening of the lock. And even if you make it avoid it you still make the dialer slow enough to be impractical
The digital versions the military use have those type of functions: It knows a human can only turn the hand so far, and it requires a variable speed of a human. otherwise it resets. (as far as I know, there is no known surreptitious way to enter these versions.)
@@annakelly9850 Would it simply be possible to read a value from a random number generator for the speed, add ramp up and ramp down features, and simply limit it to the speed/range of a human? Jitter could possibly be be introduced randomly too.
@@Jeff-ss6qt Nope. If that dial spins fast enough it stops the whole process. So, you have to make the dial turn so slow that it'll take a long, long time. You can still use a robot, but the robot won't speed it up, just make it automated.
This was the best several minutes of watching a wingnut slowly loosen I've experience in a while! Great video as always.
Crap, now I gotta go watch it for the wingnut ? Seen these operate enough back when I owned one. LOTSA of safes it will NOTY work upon, for reasons I will not enumerate.
@@citylockapolytechnikeyllcc7936 Cam here to see if anybody noticed this... :P You can see it clearly if you move the fwd. But it's moving left, so either it is tightening or it is a left handed screw.
The alignment was not 100%! Slight wobble.
😂😂😂
This video is just long enough that the final "click" at the end was super satisfying. Anyone who's ever successfully run a password brute force tool knows how good this feels, when it finally finishes! 😅
Not only in physical locks but also accounts and WiFi password cracking brute forcing is practically impossible especially the security that they implemented but changing the password like 12345678 and the computer says the password is been crack it's a satisfying moment
@@justassimple8328 not true at all cracking wpa2 handshakes is still very possible e.g servers with huge amounts of ram loaded up with rainbow tables
I kind of know this? Though in a completely different context. The Resident Evil 2 remake that was released back in 2019 has a couple of three wheel six letter combination locks, and I brute forced all of them. Not quite the same, but it still felt satisfying.
The final click made me jump. I was mesmerized.
Is not one of the ways brute force attacks are made more difficult is to have max tries before a cool down period that gets progressively longer? Could something mechanical like that be added to a combination lock like this?
Video 1337, he’s showing off his 1337 hacking/cracking skills.
Yeah, I'm really wondering if that was intentional. I hope it was!
And totally named after me! 😁 Lol, at least that's what I tell myself.
Should have made the video 2:16 longer!
I reckon you could speed up the algorithm by skipping the "long distance" numbers, its much faster doing "close by" numbers, so if you prioritise testing those combinations first you get through a larger portion of your testing regime sooner.
The algorithm may do that normally, you would still have to test them later so it may not save that much if you have a bad choice of numbers.
That won't work because of how it is testing. As you see it is holding numbers one and two until it tests all of number three. It does this because if it wants to change numbers one or two it has to go all the way around the dial in reverse. Good thinking though.
I thought the same thing. Essentially keeping the total of the 3 lock combination numbers as low as possible for as long as possible. Letting the cracker go through more numbers at the beginning and slowing down as it goes through the combinations.
@@DinoQueenJoules I think the total time for all numbers is more important than "tweaking it to be better at first then slower after"
@@garyoak4175 It's an optimization problem. Both matter.
Just imagine walking through your office at night and hearing what sounds like a 3D printer, going to the safe room and finding this thing whirring away on its own
...and then all you see is hands.
Imagine crouching behind a desk in the corner with that thing and hoping the security guy thinks it's a 3D printer
A box with acoustic foam over top would likely quiet it down significantly. Only problem motor cooling.
That's why you also need an alarm system for the room with the safe. Security in depth. That's what they do for classified document safes.
then find yourself looking down the barrel of a gun
Thank you for showing the interior of the lock. I used one of these locks on a gun safe I made for my father, and he accidentally broke the dial off, rendering the lock unopenable. Now that I have seen the internal mechanism, I know how I can defeat it and open the safe.
This is indeed, 1337 af. Thanks for keeping it real LPL!
I'm glad I wasn't the only one who noticed that.
Came here to say, there's no chance LPL used this as his 1337th video. He is way too clever to miss that.
Came here to say that too, also glad I was not the only one who noticed.
I was looking forward to seeing what would be featured in the 1337 video.
Fantastic mate.
50+ yrs ago I was a watch and clock repairer in Adelaide.
Had a customer with an S&G lock on his floor safe.
Fortunately the door was off when the lock stopped working.
One of the springs had broken (rusty).
It was many years old.
I had a LOT of fun repairing it and and repairs to the number change system.
Pity so many new safes gone electronic now.
It was genuinely one of the coolest things I've seen in a long time, I have never seen the mechanism of a combination lock like that work internally and it's super interesting!
10:30 is the moment you want; it cycles back through the previously found spots and then cycles through one more time to unlock 👍 great mechanism and computing
I don't think it works quieet like that, I think its literally just trying all the valid combinations
Imagine Payday 2 - 20 hours decoding and restarting the thing every 20 seconds....
overdrill x19
I was looking for Payday comments to make sure I wasn’t the only one.
@@suspiciouscheese4518 payday was my first tought 😂
It doesn't decode it's actually a drill
@@shay4501 “Guys, the decoder, go get it”
The machine is very simple and elegant. I expect that the software was as well. It was a great pleasure to watch it work.
Does the machine need to worry about friction-induced heat? What about wear on the locking mechanism?
it's pretty hard on the locks I always suggest replacing the lock.
If you’re using a robot to brute force a safe open do you really care about the well-being of the lock? If you cared you’d probably have the combination.
@@rogerszmodis If you didn't care about the well-being of the lock, you'd drill it.
@@rogerszmodis my question is more of curiosity than of care.
@@brianflowers4217 but that’s not nearly as cool
The wingnuts on the device were undoing themselves with all that vibration. Undoubtedly a very nifty machine though.
the wingnuts could be easily replaced with locking nuts (with plastic inserts), but I also noticed it when forwarding the video
lol, the tolerances, must have been a cheap combo
It was turning clockwise though, wouldn't that mean it's tightening itself? Maybe I'm missing something here.
Vibration only causes his nuts to tighten.
As is to be expected from LPL.
@@jordivermeulen2519 It could still be english thread (counterclockwise to tighten) but without LPL clearing it up I couldn't say for sure
"Nothing on one, nothing on two ... nothing on seventy-seven, nothing on seventy-eight ..."
Auto-dialers are legit tools for locksmiths but it's not recommended that they be used repeatedly on equipment that one cares about. The interior shot should make it plain that they can cause wear of several components.
I can't imagine a situation you would need to use this on the same lock repeatedly. If you are stealing, you just need to use it once, if you forgot the code or just don't know it, you would also need to use it only once. If you have brain damage and are always using the machine to open your safe instead of using the code, then you might have a problem.
@@mindfortress105 A replacement Group II S&G lock is less than $100.
@@mindfortress105 Yes, that's my point. It's a legitimate tool but it would be unwise to use it for fun. Doing so might be a sign of brain damage. Or thoughtless, anyway.
if these robot beasties ever became a problem, lock makers could do what IT departments have been doing for 50 years -- too many failures in a row would cause a lockout for a few hours.
You’re describing a use case that is ridiculously rare. Don’t use that poor little lock for fun! If it’s their lock it can be used in whatever way they see fit to use it. And you’re calling others brain damaged. Or trolling
Anyone else notice how lpl was just there ready for when the machine finished? Like no hesitation, right on queue and we got this open.
Because he knew the combo ahead of time and he could see it was about to open it. If you have the back of the lock open like he shows, you can get the combo in a minute by turning the dial and watching the wheels align.
On one such tool, you can set the beginning combo and end combo range desired.
3 day unlock
LPL: Now once more to show it wasn’t a fluke.
Allot of bigger safes have quite a few more dials then one :p
And I’d still watch that fucking video.
How hot does the lock get during this procedure? I imagine it’s lots of wear and tear on the lock?
He replied to another comment and said that it gets filled with brass dust and locks that get dialed like this need to be replaced
Dam
Leprechaun170 I wonder what happens if you spray GT58 or WD40 in the lock first?
@@G58 unless you were continuously spraying it, something like wd40 is too light and would get wiped away pretty quick with only one coat. Basically, the lock would need some sort of oil bath to handle that kind of abuse without tearing itself apart.
TheOldPioneer Great points. Thank you. It would be interesting to see how much or how little and how frequently dosing would solve the problem, and how well an automated spray feed could be implemented.
I find that GG58 leaves a water resistant coating which also lubricates. Maybe a top down delivery squirt every 60 seconds could sort it.
The most valuable component in any engine is the oil. It’s also one of the cheapest, easiest to change, and most often neglected.
My ‘02 diesel Mondeo has done 200,000 miles, and to be fair I don’t service it according to the manual. I haven’t touched the injectors. But the emissions are .52 where the max is 1.50! Regular oil changes using quality oil. 🧐😎
Let it be known that LockPickingLawyer will win ASMR video of the year award.🏆
The cadence of his voice along with the metronome quality of the safe cracking machine make for a perfect video.
Thank you!
We have one of these in our shop. Only used it about 3 times in 5 years. Only really need it for Tl-30's that are hard to drill etc.
The lock in this video can be manipulated by taking readings easily with practice.
There is probably an algorithm it could use to calculate travel distance and do shortest travel distance numbers first. It could knock over a bunch of the solution space faster
Not an engineer, but it seems to me that that would cause more heat wear-and-tear on the machine.
Shane Yes, it would take a computer program to do it but YES, that would work. I don't think LPL mentioned this possible enhancement.
There are also general rules about the relationships between the digits you’re recommended to not violate as those settings are apt to bind up the lock and such. From S&G’s manual they suggest the following which also would constrain the solution space a lot…
1. Do not select numbers which all end in “0” and “5.” An example of a poor combination is: “50 - 15 - 30.” An example of a good combination is: “52 - 15 - 37.”
2. Do not select numbers in an ascending or descending sequence. An example of a poor combination is: “22 - 41 - 68.” An example of a good combination is: “22 - 68 - 41.”
3. Leave at least a ten number margin between adjacent numbers of the combination. An example of a poor combination is:
“41 - 39 - 66.” An example of a good combination is:
“41 - 30 - 66.”
4. Do not use a number between 95 and 99 or between 0 and 20 for the third (or last) number of the combination. This can cause a condition which will inhibit the mechanism from locking correctly.
5. Avoid using easily guessed numbers (birth dates, house and phone numbers, etc.).
@@JamesReedy Note that LPL said that certain combinations are omitted, which is why it has ~800,000 possible settings instead of 100*100*100 = 1,000,000.
@@TheRealColBosch true, just wasn’t bothering the math to figure out how many of those rules of thumb were being included.
Newer S&G digital spin locks defeat this attack in a couple of ways. When you start turning the dial in a direction, it picks the starting position at random. Also, consistent spinning of the dial, i.e. not the "pulsed" spinning you get by hand will be rejected.
The newer S&G mechanicals make you push in at 0(zero) and then continue to open also... 1/2 price of the Electronic locks.... and minimal failure rate compared to the Electronics also.
They use the electronic locks on newer SCIF containers (cabinets and room doors). Easier for security to update codes on a regular basis without having a locksmith come in and change 50 container codes.
It would be easy to make a non-consistent spin in software.
@@ejm57301 electronic locks are far better in almost every conceivable way, that's why high security ones can be expensive. Combo locks are good for a safe you'll be entering once a week or less. Anything you have to enter a couple times a week or more, there's no better method than electronic.
@@littlejackalo5326 true, but as an EE I know from experience all electronics fail eventually. Not that mechanical locks can’t too but I have more faith in them than a digital lock. Also push buttons can wear leaving a pattern that constrains the number of guesses one would have to make. That said I realize too many wrong guesses results in a delay on most locks…
If LPL did it by hand, the video would be 2 minutes and 15 seconds long.
yeh
With the introduction about 1 minute, 15 seconds to unlock the safe, another 15 seconds to show it's not a fluke, then the rest of the vid showing his comments about how good or bad the lock is.
I spoke with a safe expert. He said auto dialers are dangerous because the more you use a dial, the more risk you can destroy the mechanism, especially with old dials. He said to never use these with old dials, and probably not with new dials if you want to protect the gear. He said even a person trying an old dial a few times can destroy it.
~ 3:00 that wing-nut slowly rotating itself loose on the right is kinda freaky.
I was honestly so surprised at the sheer speed that this machine operates at. Rad little unit.
I imagine it would depend upon the safe being cracked. I've worked with a number of large bank safes in my time that it might struggle with at such speeds due to their poor lubrication and service history. The machine likely has a way to tweak the speed though.
@@Thermalions These NEMA 23 units has a pretty decent amount of torque. They're often used for high end 3D printers. The good thing about the feed back system they're running is that you can set it to "talk back" mode. The program tells it to go to a certain position, and it flags the program when it reaches that position. So you pretty much don't need to account for resistance/slow movement in an application like this.
Imagine him sitting there half an hour just to say "well looks that we got it open" not even a second after
With a single malt in one hand and a cigar in the other. I'm sure it was brutal...
Completely ignoring the fact that he could have cut the video and you'd never know because nothing was moving on screen or making noise anymore.
Not that hard to predict when its gonna open looking from the inside, i knew almost exactly when its gonna open by predicting when all three notches will align.
assumedly he already knows the combo and started the machine pretty close to that. Especially since the first number was 63 which would take 20 hours to get to. A cigar and drink is still probably in hand though
I guess since he knows the combination and has a tablet that shows the numbers being tried, he knows roughly how much time it takes to get to correct combo
Very suspenseful and quite satisfying. I'm exhausted! Good job LPL.
Gross
LPL, at my work we sometimes install security doors with, I'm fairly certain, S&G 8550MP locks.
I recently noticed they had replaced the metal discs in the lock with white plastic ones.
When using the robotic safe-cracker, have you noticed any heat build up in the discs?
Seeing the change to plastic discs made me wonder if melting or softening the discs would/could be a viable attack. Maybe something as easy as some kind of rubber disc on an angle grinder would spin the wheel fast enough to melt/deform the discs inside the lock. I imagine S&G has put enough r&d into it so that they feel it isn't a problem, but the thought struck me that it might be an option.
What do the discs actually do? Something as simple as butane jet lighter might be enough to melt the disc.
Could it be that they are teflon discs? Teflon melts really high and is really slick, sometimes even used as a lubricant.
Probably replaced for this very reason.
@@lazar2175 Probably Teflon as you said would make it harder to tell when you have a number correct.
Plastic disks were used to prevent x-ray viewing. (radiological attacks)
Video 1337! You did it!
Got a love more than 10 hours of a stepper motor working
11 minutes of LPL brute forcing his way into our hearts
Love how this is video 1337 as this is truly an ELITE way of opening a safe
Amazing the safes bearings hold up to that speed and doing lock up. Cool toy you got
Actually I can imagine the bearing holding up very well after up to 80,000 combinations.
As cool as the safe cracker is, I would love to see a video with the saves themselves as the main feature. Either way I love your videos and the way you explain topics with genuine enthusiasm and interest. It shows in your work and is not lost 👌
Man ngl, I've struggled with sleep deprivation for years, struggling to fall asleep, but I fell asleep listening to the sound of that machine doing its work. It was oddly enough very soothing and stress-reliefing, my breath synced somehow with the tact. 10/10 would recommend! Very interesting to see how it's working.
I would however like to see more of the inner workings of a safe lock, would that be possible? Or is it stupid-simple like, I'm looking at it right now?
Should be split screen showing both the front and back simultaneously. Easy video to make after having set everything up once and people would love it. It's great to watch the back tumbler (or whatever it's called) turning ever so slowly.
Figures it would be a high-tech safe autodialer. It's the LEET episode!
heh, i was searching the comments to see who else saw the link a few people did indeed!
Hypnotic... Definitely trance inducing.
umm no, more like poor editing
thanks this is all i needed to see. i have 4 nema 23 and 3 nema 17 stepper motors for my diy cnc machines. looks like i got a new project to do soon.
I'd love seeing slow-mo of the inside over several cycles.
If you want to understand it, here is a working wooden model explained:
ruclips.net/video/CZ8WRDVgKrk/видео.html
put playback speed on 0.25?
@@Dankey_King More like 0.0025 I'd think.
@@Dankey_King - It's still a blur, it would need recorded with a high fps camera.
Imagine a like 4 hour live stream of this.
😂😂😂😂😂😂😂😂
Some nice ASMR
Would definitely watch it
Would love to see more vids about the internals of these types of locks. I dont quite get how going back and forth like it does solves the combo. Many of these types of locks I've seen require you to go a multiple rotations past a number.
It’s trying the last number not all 3 all the time
Note how it does a full sweep of the last number, then increments the 2nd to last number, and sweeps the last again...it's checking all possibilities just not redialing the first 1:2 numbers for checking all of the 3rd.
Back and forth is a trick to exhaustively try the third number after the first two numbers have been dialed. This is due to the mechanical nature of the lock and the only way to defeat it is to get a lock with a 4 wheel pack.
It's not only a dial safe opener but a doubles as a durability tester. Any safe that endures that and still functions normally would be an industry gold standard of quality.
Die Hard would have been 3 days long if Hans Gruber had used one of these
It already felt that long to begin with. I’m joking, great movie. One of my favorite Christmas movies actually.
@@sophierobinson2738 melon farmer
@@nmcgunagle it's not Christmas till Gruber falls off Nakatomi Tower!
@@ScottKenny1978 just like how it’s not Christmas til cousin Eddie kidnaps Clark’s boss.
[1337] new world (LPL's world) record length video! Over 11 mins!!
As always, the LPL doesn't disappoint unlike many products showcased on his channel.
[464] is the longest. [580] is quite long too.
why are people acting like it's such a big thing that his video is over 11 mins long lmao. yes, the product here is different than him picking a lock, the video length will be different.
Until I saw this video, it just never occurred to me that you could check a combination in such a way as to preserve the first two digits while running through all the possible iterations of the third digit.
id love to just keep watching this robot work for like ten hours, the sound it makes is just so satisfying
This auto-dialer in action is a candidate for one of those "Most Satisfying Machines" videos. Thanks for posting.
Why did I just sit here and watch a safe dial being turned super fast by a robotic/Android device?
I enjoyed the whole video immensely which is the scary part!
Nice break from your normal Lock Picking Magic!
I went on my first acid trip about a year ago. When i would disassociate and freak out, your videos would ground me. I dont do acid anymore but all your videos are still great. You dont miss
You should read Feynman’s book. It has an entire chapter about his safecracking antics at Los Alamos
Fitting that the 1337 video is this :)
I’d still love some explanation how a safe lock works when operated manually, obviously trying out a combination does not require to re-enter all three numbers but the third digit Can be changed repeatedly without altering the first two… I only used the “Master” locker locks so far, and those require a complete reset before the next sequence can be entered…or so it seems
I believe it was just re entering the first 2 digits every time, and only changing which it stops at once the preceding number maxes out
@@Channeldyhb exactly.
What is the heat build up inside the lock mechanism? Seems like the constant movement would cause extensive wear on the lock. Very, very ingenious device
Put ice
He answered a similar comment elsewhere - apparently it's really bad for the lock, to the extent that a lock that's been autodialed should be replaced
@Opecuted that does seem to be the better option, though it's probably also something manufacturers are more likely to take precautions against. It might be cheaper or easier to just replace lock parts than to replace everything the drill got through, as well.
@Opecuted If you want a functional safe for later? No. If it's a better designed safe... Again no as they have anti-drill precautions.
I just love the ASMR Safecracking sounds :D
Reality: average opening time 20 hours
Movies: 2 minutes
Unless you're Parker cracking the Bank of England vault, in a very respectable 2h25.
Then he cracks their new high-tech vault in seconds with a hairpin 😁
Masterlock: 2 seconds
That is the difference between bruteforce and skilled attacks.
Have you ever seen a movie where they tried every single combo until it opened? I haven't.
Yeah, I was imagining Robert de Nero standing in a darkened office yelling “12 hours! Whaddya mean, it’s gonna take 12 hours?!”
Interesting to see the inside. The safe we have (Netherlands and Norway) requires you to turn a key to probe if the code was correct, I guess this robot is not suitable for those types?
That stepper motor is intense.. the power supply and control circuit for it would be interesting to see 😮
Running an auto dialer that fast will usually cause the drop in bar to skip over dropping into the drive cam.
They also cause quite a bit of wear to the lock and having to run it more than once adds wear and takes more time.
There was something oddly soothing about the interior view. It was also fun watching the gate on the bottom wheel inching closer and closer to an open.
There has to be a more efficient algorithm than exhaustive search, but that would require interpreting feedback from the lock, which you're not likely to get from something as well-engineered as a Sargent and Greenleaf.
if it had like and xray lol then it could see how close it was gettin
An obvious one would be, if the combination is user settable, taking advantage of the weak link in any security system (the end user) to narrow initial searches to ones likely to be chosen by humans. The obvious and best known pattern for this is dates, which drastically cuts down on possible combinations (taking 100/100/100 down to 31/31/100, even less for the second number if date format can be locked down).
If you've got to try all the combos, how would an algorithm help? Honestly curious how you're thinking. I think the way this device is programmed makes most logical sense.
@@ryanmalin The idea is to _not_ have to try all combos. That would, of course, depend on knowing the design and manufacturing idiosyncrasies of the lock, being able to get feedback about the internal state of the lock, etc.
For an S&G combination lock, a brute force attack may be the only feasible option. At the other end of the spectrum, manipulating a Master combination lock is trivial because the lock practically screams feedback at you.
Thank of it as an exercise in cryptanalysis. The first thing you do is try to guess what the user may have used as their key. Next, you see if there are any weaknesses in the system that can be exploited. Brute force is the last resort because it rapidly becomes infeasible. It will eventually work, but it may take much longer than the age of the universe.
Given the extremely limited key space of a mechanical combination lock, exhaustive search is practical, if time consuming. I'm just wondering if there's some way to discover and exploit weaknesses so exhaustive search isn't necessary.
This is mostly a theoretical concern. For the given problem domain, this is a very clever and useful device.
It’s software, it can be improved. Perhaps different algorithms for different locks.
That can be defeated or delayed if there is a thermal fuse type thing that locks up the mechanism after friction from high speed manipulation heats it up
Definitely. Their are a lot of ways that I can see a lock being designed to defeat this attack. Thermal expansion from friction for one.
If the metal gets that hot sure. But metal on metal doesn't make nearly as much heat as your thinking. Then you have the fact a mildly warm day may be enough to equal the heat from this type of attack. You've made it harder to break in, but you've also made the safe completely unsellable to any place that has heat problems
@@mickys8065 good point. Perhaps something like a steam engine's mechanical governor that via centrifugal force locks up if spun too fast
LPL is so good at opening locks he doesn't even have to be in the same room to open them.
I think that you can eliminate a lot of numbers by adding some torque/resistance measurement and spinning the dial. Testing all numbers where there is a sudden change in resistance should point you to the spot where there is a gate so decreased friction on the latch and then trying those in different combinations until it opens.
Now he has a robotic safe cracker?! We're doomed!
This is his new and improved one! 😝🔓
You need a safe to be worried
Just hide the safe lmao.
Just wait until he builds a robot to pick locks for him. "bzz, click. on. one. bzzzzzzz, two. is. binding..."
Bloody robots coming here and taking all our jobs.
Needs more Raspberry Pi!
But more seriously; couldn't good safe manufacturers put in some sort of mechanical lockout if it detects a certain rate of guesses? Would require power to the safe but that seems like it'd give a machine like this a bad day (assuming it's EMP hardened inside the thick metal case and has sufficient battery backup).
Hi. Big fan. I'd argue that the threat model this kind of lock defends against does not include someone having undisturbed access to it for 12 hours.
Yup, three wrong dials and get the safe manufacturer to come and open the ultimate lock. So how do you detect it?
@@tomatopotato4229 So, every night, and even longer time every weekend? But at least those things doesn't happen too often :P
High end safes have that. You can't afford those, nevermind what to put in it.
@@jooei2810 You would know the manufacturer. They would advertise that feature. I bet a simple internet search would be sufficient. Some can be defeated with resets or dimming attacks.
Mesmerising!
Thank you...I really enjoy all of your videos and covert instruments!
Now this is some James Bond shit level of coolness
Bonds version is faster ruclips.net/video/ctxpzf5-XuU/видео.html
but whats cooler is that LPL can do this in 30 seconds LOL
Would be interesting to see a mechanical "max 3 attempts" implemented in the dial.
The problem with that is that it's going to have a backup lock
@@MindFlayeR57 Right.
@@MindFlayeR57 And you just know that the backup lock would be a shitty wafer core
Human error will also be a problem due to inaccuracies in hand movements, imagine a scared old person and their shaking hands, they would likely use a safe for jewelry etc
@@Really_Zahren Hehe!
I’ve waited years to finally say leet
The looseness of that combo wheel now cannot be understated. Lol
Thank you for this amazing info. 👏
Ok so that was the most confusing thing I've ever watched. Could it be slowed down was very confusing the direction turning. It did bring back memories of my father doing his taxes with the adding machine with the paper that prints out. 😊
In the top right corner of the video window, there's a little gear icon. Click on it, and a menu folds out where one of the options says 'speed'. You can slow down or speed up the video there at your convenience.
Oh no, he's building a robotic LPL...
I'm confident this will become our real life Skynet
you'll only ever get to see the robotic arms and hands.
What a leet device.
Closing my eyes, the sound gave me flashbacks to printing long banners on pin feed dot matrix printers from around 1990....
Don't forget to fasten your winged bolts tight. That right one was slipping, as seen by fast forward..
This video has me all giddy because of how cool this is!!
Thumbs up!
"This is the Lockpicking Lawyer, and today we will be breaking into one of the most secure buildings in America, The White House"
"Now, normally this security guard would pose quite the problem, but due to an oversight they do not wear any gas mask or other gas attack protection if there is no high security alert. So I'm simply going to toss in a canister of the high grade sleep gas, if you want a canister on your own I sell these on my website."
You mean LPLs house right?
I'd go to fort knox,screw the Whitehouse.
Nothing on one, click out of two, one second while I disarm this guard, nothing on three…
Lol securtiy guard isnt a problem thanks the the pick bill and I made in the shape of a boot that kicks the guard in the tumblers
This is so cool :)
From a lock forensic perspective... even if you can attach and remove the auto dialer without leaving a trace, the wear and tear on the lock mechanism itself must be detectable, no?
In another comment, I think that LPL said that it leaves brass filings or dust, and that the lock would need to be replaced.
Yes, LPL said that *this absolutely shreds the inside of the lock.* It's something like 200 years of use in a couple of days.
HKS SYSTEMS put up a video today of a sargent and greenleaf auto dialer fail. I recommend watching and seeing the damage for yourself.
ruclips.net/video/JoEc5bf6fVQ/видео.html
Link to HKS SYSTEMS fail video.
@@octonoozle how are you getting the butter into the lock mechanism?
This should also be optimized by executing the least-travel moves first, or at least have the option. I could see it potentially cutting down on time but could also shift a longer travel result further down the brutelist
A spectacle of engineering and computer programming, fantastic video.