I've been visiting someone in prison a few times. Every interior door is centrally controlled but I'd love to get a hold of the actual lock because what I've seen while passing through doesn't look that secure to me.
imagine you're in prison, and in the middle of the night you suddenly hear ....this is the lock picking lawyer, and what I have for you today is a typical prison cell door lock
Prison cells are one way locks so only have a key hole on the outside. At least in the uk. But what worked for me once was filling the lock hole with lol roll or paper so the lock dosn't shut. Worked once. I was just testing if it would work as uk prison guards have IQs in the teens. The prison I was in they still used old style keys and locks from the 80s I was only inside for 4 months for driving with a suspended licence but if I was in there longer I could get out but wasn't going to risk getting 10 years added to my centence. If I was in for life without any chance of getting out I would try no stop lol.
Because it's not picking, it's bypassing. Most Bypasses on mechanical locks are just as easy, when they exist. Actually pixking electronic locks is practically impossible
I used to work as an security alarm/door access technician. It amazed me how unsecure "security" devices are. Especially the "high tech" ones costing thousands and thousands of dollars.
@@livenotonevil8279 Or, more commonly, the resistors are set up in the controlling device - out of convenience - instead of the tail end controlled device (i.e. a sensor or a detector).
There's usually a "weak link in the chain" in most systems, the trick it to find it. At 1:29 "All this looks very impressive, but there's a pretty fundamental flaw with the setup"... yeah it's called the LPL attack. lol
I used to do car breakdown nightshift, that included lockouts. Some cars are so fast to open, some customers refused to sign off my work receipt for me to be paid because they didn't believe I had unlocked them, and that it must have already been unlocked, twice I relocked them again and left the scene because the customers were so arrogant and rude. Easy to say take longer then to convince them of the effort, but there was always people waiting for me, and I got paid by each individual job.
For me senior project we are using a fingerprint sensor in a similar type project and another flaw besides that is that they typically store the fingerprint templates ON the sensor board. So theoretically you could pluck that board, plug it in somewhere else and dump all the stored fingerprints. How do I know? I've tested it for my project.
this type of thing of thing never comes up in mission impossible movies. They'd have found a way to copy the fingerprint or executed an awesome stunt to cut the power. LPL- here I am with a screwdriver and a paperclip
@@Anton-cv2ti reminds me of when I was a civilian contractor working on a air Force Base that I had to have clearance enhanced to work on this particular building and a full time escort to get into and out of the area. The gard was unable to get his electric key to work as well as unable to call the inside gard ( both required to have keys and unlock at the same time). So I was like let's go through the overhead door they put the switch on the outside and I think with a screwdriver I can hit the open button. Boom 16X16 door opens. Never figured out what they did in that building other than have a very fancy lock on the man door.
holy crap! I almost choked when you said the verification and authentication system was on the insecure side. One would have to be almost literally brain dead to make a design like that.
almost ... no I ont think almost is that dumb ... heck a village idiot knows enough to drop a woodedn bar across the other side to secure a door ... and at an IQ if 17 that is about as brain dead as one can get ... hmm come to think of it .. we do have a prime minister who would need to go to school to become a village idiot
@@pugnate666 I2C uses two wires and can transmit the read data to the control unit for processing and verification using one *less* wire than the current setup lpl is showing us. And can't be shorted open.
I never imagined that one of my all time favourite things to do of an evening would be watching a man demolish my illusion of security with such succinct precision. This is 100% a compliment.
That's a subcontext to his whole channel. A lock will not give you security by itself. A security service decal in the window provides more safety then most common door locks.
@@Kishandreth However that security service decal could be detrimental to have if you actually use a sticker for the security system you have installed as they can then look up the model etc and the default bypass or a major security flaw.
@@empoleonmaster6709 That's why you use a generic sticker instead of a branded and model one! So they know there's something but not WHAT. Though a surprise without sticker could also be good. Or good old "security led".
@@SaphireLattice Do better and get stickers for nearly every company you're NOT signed up for which will make it impossible to figure out you have one of the security systems that's NOT listed via your stickers.
Hollywood movies: The hacker connects to the door panel with a fancy laptop and starts running complicated hacker tools on the door. LPL: Here's a paperclip and a screwdriver, let me show you how that's done.
there is an RJ45 port inside and a usb port on the OUTSIDE so a software attack is probably also possible. this is why LPL says a NON standalone digital access control system is much better, in this case to gain entry it is necessary to control a computer farther away to open the door, which requires some kind of cyber attack, so you might as well have an actual inside man to just open the door for you at that point.
Places in need of security should hire this guy after they've installed their security systems, just to have him detect flaws so they can improve on them.
Such an atrocious design. Even if they're too lazy to switch the side that the authentication is performed on, they couldn't at least have used a PWM signal instead? Obviously still unsecure, but requires a significantly greater amount of knowledge and technology to overcome than a paperclip.
@@MatthewStauffer would cost more to implement, either raising the MSRP or reducing profit per unit. So instead we have LPL demonstrating that the product is utter crap and should be returned to the seller as not fit for purpose.
@@MatthewStauffer Look, there are multiple problems here; using Phillips screws, rather than any other type that decreases the likelihood of an attack to the interior of the electronic components, is already a huge flaw that signifies a particularly telling lack of interest on the manufacturer's part. Having just *_one_* screw that is easily accessible from outside is just ridiculous.
That was so wonderfully simple and anticlimactic. The beep, the lock falling open, that's it. One-cent Paperclip - 1, $170 dollar Lock - 0. Bravo, sir!
Thank you for this as always. I am an old man. One thing that I notice with security devices is that no matter how sophisticated they become there is always a need for physical security This is often missing. You can have a very secure access system but if someone can just put a boot through the door, or short it out with a paper clip, the level of security is low.
No, this is stunningly flawed. Some of the mechanical/physical exploits seem to me like they require knowledge of the particular mechanism... but this one is written in silkscreen on the circuit board.
*The FBI raids LPLs house and takes him in for questioning* The FBI: So... we've been watching you for some while now, we know that you are experienced in lock picking and may be a threat to the United States, we have seen your lock picking abilities and have put you in handcuffs no mere mortal could escap... HEY ARE YOU EVEN LISTENING TO ME. LPL: Nothing on 1, nothing on 2, some tension on 3, a nice click on 4, and another nice click on five. Alright guys and that's how you get out of military grade handcuffs. Not that hard all you really need is a paperclip and a button on your shirt and you can do it at home.
Almost every experienced burglar avoids targets with security systems. And no experienced thief will try to open a lock like this without reading about it before hand. Still seeing LPL double penetrate this thing is pure gold 😂😂
It's the old thought of, a lock keeps the well behaved out, but anyone that TRULY wants into something can always find a way. I bet 1out of 10 smashing this head unit defaults to opening up too or might short the cables as well...lol.
The thing is that there is door contacts on most doors in shops or wherever so when a door is opened and the alarm is set opening the door will result in a alarm.
Haha yes I have noted that in ccomments my self. But I understand like all education it is double edged. It can be used for good or bad purpose. It shows us all how much of our security is nothing more then a fake "feeling". Most security systems do nothing more then buy time at best, create noise. So my hat is off to LPL for showing us reality of many security devices and systems. I still lock my doors, use pad locks etc. Mainly for insurance issues to prove I tryed to secure against theft. LPL has shown us the best and the worst but proven its all image and feeling when it comes to security.
I view LPL in the same way I view people who make exploits, bugs and glitches in video games well known. yes, people can use those glitches and exploits, but it puts an immense amount of pressure on the developer to rapidly make changes. (in LPL's case, the manufacturer)
When he cut the ottolock with Tin snips they accused his video of being deceptive. He then cut the improved version with tin snips, and responded to the accusation with what one comment described as "the most polite roast" they'd ever seen
I remember a friend of mine bought one of those small cut-proof/fire-proof digital keypad safes from Walmart, he was carrying it up some stairs in his polebarn and accidentally dropped it right on the keypad and it shattered, whatever material it was behind the plastic keypad looked like metal but it just crumbled and conveniently enough thats where all the tumblers were so by essentially dropping it he was able to get into it, unfortunately for him he didnt need to get into it and hadnt even gotten the chance to put anything into it, he was so mad but I couldnt help but think that youd be even more angry if someone else got into it
When you're watching Stargate and Carter opens a door with a knife and you think "that's alien tech, it wouldn't be that easy" LPL .. "well, actually..."
As a former security systems tech, I can tell you that this is a garbage design that you will never see in any commercial setting. Card authentication is never done at the door on any real system. The reader is only there to send the card data (facility code and encoded ID #) to a security panel that will fire a relay to open the door. Security panels are typically installed inside of a locked data closet that is located INSIDE the space you're trying to enter. The panel may even be located multiple floors above, or below the floor that you're currently standing on.
Coming from the perspective of an apartment manager, I wouldn't have known to drill the security vendor on this issue. It also seems like this setup makes the outer-facing components more expensive to replace if vandalized. When it's set up like you described, replacing the outside panel sounds like a much cheaper job.
@@googiegress7459 as a manager you should know more than average people but realistically it's impossible to know everything, that's why security experts exist. Consult with one of them before you go looking through stuff on Amazon otherwise you might think "slash proof" means something (LPL has a great series about slash proof stuff).
@@purplefreedom1631 Oh in this situation we'd definitely go with vendor recommendations instead of just slapping something down from Amazon. I'm just saying it's possible for the vendor to go cheap with me none the wiser. Except I guess in this case I know to ask about this one specific thing.
The security at my work had the wrong door code for the outside of the last door of our fire exit at work yesterday. One of the fire doors in between that got stuck shut because of a piece of metal on the outside which was a huge risk for obvious reasons. Thanks to one of your videos I managed to work out the correct combination and pick the lock, so we cleared the obstruction and the fire exit. If there was a fire people could have died because the fire exit was blocked. Thank you for making these videos
thank you for telling me to stick to the old lock n' key, at least it doesn't take seconds. maybe i'll just invest in many multiple locks. you've also instilled a paranoia. still love your videos
The main defense is misdirection. The burglar gets in, goes to your bedroom, and starts looking in the usual places for jewelry and watches. Maybe his tweaker buddy is running around grabbing laptops and tablets. They also check the typical "safe in plain view" products like the super obvious wall shelf. You have a big heavy safe in the garage that can't be lifted by four people, and maybe they drag that away with a truck, or maybe they waste time picking it; it's full of lead bricks and boring porn. Your real goodies are in your hoarder shed under all the bales of crochet magazines in a soiled cardboard box labeled "pink bathroom sink". Of course, you could always use the patented Millennial Defense: just don't own anything.
I love backends too.... though in the bedroom. ;D All they had to do is encrypt the signal from the fingerprint reader to the main control unit, problem solved (well, not for LPL lol).
I was like, "Oh man, almost four minutes," and then the first 1:30 was literally just him explaining and modeling how the lock works, followed by another minute of him talking about how to undermine it.
Just a little grease down the drain every day for a few years can completely clog a city sewer system. Seen it done. If I remember right, they're called fat bergs
@Богдан Кондратов Equipment will never replace mentality and training. Give me a good driver with a Volkswagen Beetle from the 1930s over a bad driver with the all new 2020 Nissan Altima.
@@pavelthefabulous5675 Yeah. but his point is: if the bad driver with the 2020 Nissan Altima ends up hitting the 1930 Beetle at 80 km/h (or 50 miles per freedom), guess who is more likely to survive..
That bypass could be fixed by a simple circuit. A circuit that would require a certain voltage to be passed through the wires instead of simply just closing the circuit. Or have a required variable pulsed code to unlock through the wires to unlock.
like he said its simply wrong by design. The Terminal should just transmit the dialed numbers to the power supply control box. And the actual verification is done on the "secure side", not on the terminal side.
s3sebastian I assume it’s more so the wires aren’t supposed to give that much (As in they should be tight not allowing for the cover to be removed without damaging the wires) And when the wires are damaged the system remains locked.... Assuming I’m right I’d say this is actually a pretty alright lock...
@@swordstrafe Nah, theres no way for the secure side to know if the wires are damaged or not. Even if the connector breaks when you remove the body you could just connect your paperclip to pairs of wires until it unlocks. Also its very unlikely that the connector will break because the installer need enough cable lead to install the product in the first place. Also the connector will just disconnect from the plug, its just a common JST plug which arent fragile by any means. Even after it disconnects its just as novel to decode the wire functions. The only way to make this style of system airtight in anyway is to have the verification on the secure side, as suggested by LPL, with the verification using one time keys or time coded keys to defeat sniffer attacks (that read valid signals and resends them later).
I mean it is pretty secure but, as he said, if the part that controls the lock is also outside it's easily bypassable, or less easily depending on how much effort they spent on anti-tamper. Also, assuming you are using an seperate control box inside, you probably want to set it up so that it requires a key/fingerprint and a passcode.
jigsaw: the key is hidden in your hand and you need to cut it to get the key can you do it LPL: and this how you opens easily opening locks with only paperclips jigsaw: wait thats not how you play the game
Jigsaw just gets more and more pissed as he tries more brutal techniques, only to find that lpl has picked every lock before he even finishes explaining them
Year 2055 "This is the lockpicking lawyer and today, I'm going to show you how to open the master lock "retina-pro plus" retina scanning padlock using nothing more than a common soup spoon"
Finally the moment we have all been waiting for: Opening a lock with a paperclip. (Although, admittedly, it wasn't the kind of lock, or the way to open it, that I was expecting.)
As an electronics engineer this makes my day lmao! It's so easy to do at least some sort of indirect connection but they went with a relay switching a silkscreened connector. Genius!
Even a hobbyist is able to build something more secure for a couple of bucks, just switch positive, reduce the incoming voltage when you send it back and the reciever checks for the right voltage, the devices could have random signal voltages, or each device a list of voltages that switch on every use randomly jusg by sending a one digit integer for a switch statement, this would make it ways harder to hack, even if you know how it works. But this is just ridiculous, I mean there is only one simple screw, a curious kid could open this thing and finally even steal it because it looks so cool and best thing is that it doesn't even need the other parts to reuse it because this is the whole control unit, the kid could have a cool looking door lock and you couldn't enter your own place, well, until you short the two wires by accident 😂
Nice video (as always). In the office I used to work in, of a multi-billion dollar business, they had installed the card reader AND magnetic lock on the outside of the door. Admittedly a few more screws but to take the entire lock off the top of the door was still a viable means of entry As the building had recently been completed I took photos and explained to management why this was a bit silly...nothing was done in the two years I remained with that company.
As soon as I saw that setup I knew what the bypass was going to be, why would anyone think having your control circuitry on the non secure side of the door is a good idea. I have a couple of customers who have yards with electronic gates and the control box for said gate is on the outside of the fence/gate... the box that holds the electronics is quite stout and is all steel construction with hidden hinges but it is secured with basic cam locks!
If you think about it , it is so " MR TECH GUY CAN RESCUE YOUR LOCKED CAT BECAUSE YOU HAVE FORGOTTEN / LOST / LOCK IN THE IDENTITY RDIF KEY , ETC ." But it's just way too easy a by pass . No identity needed for by pass .
There actually is a way to do this somewhat more securely - by having a tamper-switch inside the external device that disables the unlock functonality until it is reset from the inside of the secure area. But that would obviously add one more component, and cost more, so the cheap sets don't include it.
Exactly this. Unfortunately it's quite common though. Manufacturers prefer to put all the fancy electronics in one place, so because they're making a keypad/rfid reader/fingerprint scanner, it's easiest to just add the rest of the control circuitry there. It's a horrible plan, but extremely common. In the ideal world, the outside of the door would simply send the credentials (encrypted in such a way as to prevent MITM replay attacks if the outside device is compromised) to the inside. That inside module would then authenticate the credentials and decide if the door should be allowed to open. What's worse is that this isn't just done with cheap stuff you can order off Amazon, this is also done with many professional grade systems, and in fact the vast majority of apartment door buzzer systems do this too (the newer ones have locks on the front of a thin aluminium box, the older ones don't even have that). Even high end office control systems that use card access to a central server for authentication still frequently transmit the authentication from the reader to that central control system in plain text making them vulnerable to MITM replay attacks. You have to be very careful with electronic locks, most are designed only with electronic security in mind, not physical security.
@@SebastianSonntag That's not really a great solution anyway for a couple of reasons: first, almost all tamper switches can be bypassed in such a way that they never alarm in the first place with minimal skill. Second, if all your control circuitry is on the outside, then that tamper reset signal would necessarily also be travelling to the outside and be just as easily bypassed as the door bypass shown here. The only secure way to do it is to keep all the control circuitry, and all the authentication circuitry, on the secure side, and only pass encrypted, un-authenticated, data from the outside to the inside. All authentication must happen on the secure side of the door.
@@Green__one Your assertion that "almost all tamper switches can be bypassed in such a way that they never alarm in the first place with minimal skill" is inane. I use electronic fingerprint locks on some of the doors on several of my properties. In each case, the tamper switch is fully integrated into the casing of the fingerprint reader, with dozens of contact points and sensors. Accessing the electronics without tripping the tamper switch, while it might be theoretically possible if you were to take a jackhammer - although that would almost certainly trip the vibration sensor - to the wall and attack the enclosure (which is recessed into said wall) from the back where there are fewer contact points, is as close to impossible as it can be. At that point you're better off breaking a window if you want to get in. Additionally, of course not *all* the control circuitry is on the outside. The tamper control module is inside the secure area. Once the tamper switch is tripped, the control module needs to be reset from the inside, because it cuts all power to the door module by tripping a breaker which has to be physically switched back on. No electronic lock is perfectly secure. Fingerprints can be copied, RFID tags can be spoofed, PINs can be guessed or brute-forced (which can be as easy as checking which buttons on the keyboard show the most wear on certain installations). However, with a little effort an electronic lock can be made at least as good as a mid-range mechanical lock, which is usually sufficient. On most properties, there is no point in trying to create a perfectly secure door lock because criminals will just find another way in.
Thanks for showing me how to bypass the door where my ex lives, she will be surprised when I'm waiting for her in her closet tonight. You are the best.
@@ctrl_x1770 Considering there's 4 wires and 2 of them are universally recognizable to anyone who has worked with any kind of electronics... Not exactly a difficult puzzle to solve.
@@Oznerock Picking and torquing a mechanical lock is also extremely obvious to any one who pays you any attention. Now if you really wanted to, you could get some kind of blue carpenter's coveralls and if anyone questions why you're opening the lock with a screwdriver, tell them you're maintenance. The average person is less likely to question that than question why you're attacking a mechanical lock with a pick set or whatever your method of attack is.
also without them its eas hackable, the validation process should not be done on the outside LPL points out. Cause thats the real weakness of the system. If memory of users and also validation is inside, it should be way harder to break.
A serious access control system would never utilise a local relay on an externally mounted device. At minimum there should be a cover tamper monitoring on the reader.
umm atm machine ... it takes 5 seconds to drop a fake pad overlay on it and get everyones code and card number ... and those suckers are supposed to be tamper proof
I added a fingerprint lock to my front door when I had to rebuild the old rotted door frame. To make it secure, I built it inset into the wall so there's no direct access to the case screw. Plus it makes it nearly impossible for crims to kick down or smash it off to gain access to wiring. I can access from the inside by removing an inside wall panel, the unit is mounted to a smaller board that's screwed in to an inner frame from that side. I also went with an electric strike paired with a night latch (rather than an electric latch) and kept the original lock and door handle as well. It keeps all the wiring on the inner door frame, plus I can manually open via the night latch or even disable by locking the night latch in retracted state and revert to physical locking with a key on the main door handle if required. The only minus is if the power goes out there's no way to access the front from outside until you get in to do this. But I have a backdoor with a standard physical key. The one other thing I did was add a cover over the front of the unit, so only the finger print scanner part of the unit is visible / accessible. This was partly to protect from the weather, but also I think a pin code pad would tempt crims more. RFID works through the cover fine. I've had this set up now for 6 years and I have to say, it has been super convenient. I never have to fumble with keys coming home late, in rainy bad weather, drunk or laden down with groceries. I just need a free finger to scan and go straight in.
Does it work on all ten fingers? Just wondering if you got some glue or paint on your hand or cut yourself, even just put on a plaster, might you be locked out?
![[1045] Swiss Army Knife Bypass of Keypad Lock](http://i.ytimg.com/vi/ANsipsS7IK8/mqdefault.jpg)
![[1045] Swiss Army Knife Bypass of Keypad Lock](/img/tr.png)
![[1422] Did I Cheat On This Challenge? (Tamper-Sealed Abus)](http://i.ytimg.com/vi/xUJtqvYDnkg/mqdefault.jpg)
“this is the lockpicking lawyer and today we are breaking into a bank vault with a potato chip and a red bull can”
Except he didn't need the potato
@@rnemovr59 mans gotta eat when mans gotta eat
the video would probably only be like 2.5 mins long
The red bull can is to by-pass. The potato chip is just for snack purpose...
DN
“Seems like you are having issues opening the door, do you wish for me to aid you?
-Clippy 2020
Clippy! Forever in my heart))
I still use them for picking... If it won't break, best thing ever!
Best comment!
Hahaha you deserve a comments award
fun fact his actual name is clippit, not clippy
We can never put this man in jail he'll just post a video being like "leaving a high security prison with a bagel and thumb tack"
"The bagel isn't actually necessary I just wanted a snack for the road."
"To show it wasn't a fluke, I will do it again"
haha
I've been visiting someone in prison a few times. Every interior door is centrally controlled but I'd love to get a hold of the actual lock because what I've seen while passing through doesn't look that secure to me.
@@giarnovanzeijl399 haha 😂
This man can be responsible for the biggest heist of all time.
Can be?
Next time, on Ocean's14!
Can be?²
Can be?³
🤣🤣🤣
imagine you're in prison, and in the middle of the night you suddenly hear
....this is the lock picking lawyer, and what I have for you today is a typical prison cell door lock
he's the chosen one!
He’s like finally I’m free!
Prison cells are one way locks so only have a key hole on the outside. At least in the uk.
But what worked for me once was filling the lock hole with lol roll or paper so the lock dosn't shut.
Worked once. I was just testing if it would work as uk prison guards have IQs in the teens.
The prison I was in they still used old style keys and locks from the 80s
I was only inside for 4 months for driving with a suspended licence but if I was in there longer I could get out but wasn't going to risk getting 10 years added to my centence.
If I was in for life without any chance of getting out I would try no stop lol.
@@TheWhteWolf Next week on BBC:
Serial Killer on the loose after using toilet paper.
XD
Step 1: find a secure facility and note what lock they use
Step 2: send one of those locks to lpl
Step 3: profit
Lolololol... Clever af
it's a powerful technique. you can defeat a grandmaster in chess using a similar method
Step 4: go to jail
@@ericr7611 step 5: send prison locks to plp
@@duckgoesquack4514 I think he has already done a few of those.
That was actually a lot easier than picking a mechanical lock
Think so too. I cant open a mechanical lock. No chance. But this here can be done by a 5 year old lol
Because it's not picking, it's bypassing. Most Bypasses on mechanical locks are just as easy, when they exist. Actually pixking electronic locks is practically impossible
I used to work as an security alarm/door access technician. It amazed me how unsecure "security" devices are. Especially the "high tech" ones costing thousands and thousands of dollars.
Even systems with available supervisory resistors are bypassed by installers to make the installation easier.
@@livenotonevil8279 Or, more commonly, the resistors are set up in the controlling device - out of convenience - instead of the tail end controlled device (i.e. a sensor or a detector).
Well, at least there were no high-security sponges involved this time.
IW4 “high security sponge” 😂
Which video did the security sponge meme come from?
@@Mikemk_ ruclips.net/video/i7g-TvczpSw/видео.html
Luckily otherwise it would've been impossible 😂
That's great that's literally the last video that I seen
"The more sophisticated the lock, the more prone it is to primitive attack. People often overlook the obvious."
"What's that?"
"Bent paper clip."
Not enough puns
Po lil tank tank
- Wakandans
lolol
There's usually a "weak link in the chain" in most systems, the trick it to find it.
At 1:29 "All this looks very impressive, but there's a pretty fundamental flaw with the setup"... yeah it's called the LPL attack. lol
I used to do car breakdown nightshift, that included lockouts. Some cars are so fast to open, some customers refused to sign off my work receipt for me to be paid because they didn't believe I had unlocked them, and that it must have already been unlocked, twice I relocked them again and left the scene because the customers were so arrogant and rude.
Easy to say take longer then to convince them of the effort, but there was always people waiting for me, and I got paid by each individual job.
For me senior project we are using a fingerprint sensor in a similar type project and another flaw besides that is that they typically store the fingerprint templates ON the sensor board. So theoretically you could pluck that board, plug it in somewhere else and dump all the stored fingerprints. How do I know? I've tested it for my project.
Fk that's really bad.
no shit
@@connorzoesch9087 I more meant for the system he was working with, but I can see how the way I worded is confusing.
But Is it on Github?
@@piezaclave393 no.
Now I get why rich people buy lions and tigers.
Feed them milk and let them sniff sleepy powder....we good. Or
Shoot darts and tranquilizers
"Now to distract this tiger here, I'm going to take out this steak Bosnian Bill and I prepared..."
And bears, oh my!
He's going to unlock the tiger anyway.
My dude, Best comment ever. Cracking up
this type of thing of thing never comes up in mission impossible movies. They'd have found a way to copy the fingerprint or executed an awesome stunt to cut the power.
LPL- here I am with a screwdriver and a paperclip
To be fair, mission impossible is usually about super top secured facilities, where consumer hardware like this would never be used.
Wasn't McGiver like this? But to be point of stupidity?
Anton Juul-Naber Eh.. military grade doesn’t mean much.
Military grade mean't made by the lowest bidder right?
Not always the case, but hey maybe when Area 51 raid actually happens.
@@Anton-cv2ti reminds me of when I was a civilian contractor working on a air Force Base that I had to have clearance enhanced to work on this particular building and a full time escort to get into and out of the area. The gard was unable to get his electric key to work as well as unable to call the inside gard ( both required to have keys and unlock at the same time). So I was like let's go through the overhead door they put the switch on the outside and I think with a screwdriver I can hit the open button. Boom 16X16 door opens. Never figured out what they did in that building other than have a very fancy lock on the man door.
"This is the Lockpicking Lawyer, and today I'm going to show you that the president really isn't that safe from my abilities."
holy crap! I almost choked when you said the verification and authentication system was on the insecure side. One would have to be almost literally brain dead to make a design like that.
Welcome to website security! 😃
This way they don't have to run that many wires into the "Power Supply Control" and get away with one processor. They're just going cheap.
@@metamud8686 welcome? I've been doing comp sec for 40 years. :)
almost ... no I ont think almost is that dumb ... heck a village idiot knows enough to drop a woodedn bar across the other side to secure a door ... and at an IQ if 17 that is about as brain dead as one can get ... hmm come to think of it .. we do have a prime minister who would need to go to school to become a village idiot
@@pugnate666 I2C uses two wires and can transmit the read data to the control unit for processing and verification using one *less* wire than the current setup lpl is showing us. And can't be shorted open.
I never imagined that one of my all time favourite things to do of an evening would be watching a man demolish my illusion of security with such succinct precision. This is 100% a compliment.
That's a subcontext to his whole channel. A lock will not give you security by itself. A security service decal in the window provides more safety then most common door locks.
@@Kishandreth However that security service decal could be detrimental to have if you actually use a sticker for the security system you have installed as they can then look up the model etc and the default bypass or a major security flaw.
@@empoleonmaster6709 That's why you use a generic sticker instead of a branded and model one! So they know there's something but not WHAT.
Though a surprise without sticker could also be good. Or good old "security led".
@@SaphireLattice Do better and get stickers for nearly every company you're NOT signed up for which will make it impossible to figure out you have one of the security systems that's NOT listed via your stickers.
@@empoleonmaster6709 But then you just guess what sticker you don't have. So the best solution is to just stick everything including one you do have.
Hollywood movies: The hacker connects to the door panel with a fancy laptop and starts running complicated hacker tools on the door.
LPL: Here's a paperclip and a screwdriver, let me show you how that's done.
And he still gets it done faster and easier than the hacker while teaching you how to do it.
Why does Ocean's Eleven come to mind?
But if we see a high security lock being picked this way in a movie, we will complain
@@WHIRLWOLF Not really, only people who don't know locks.
there is an RJ45 port inside and a usb port on the OUTSIDE so a software attack is probably also possible. this is why LPL says a NON standalone digital access control system is much better, in this case to gain entry it is necessary to control a computer farther away to open the door, which requires some kind of cyber attack, so you might as well have an actual inside man to just open the door for you at that point.
Places in need of security should hire this guy after they've installed their security systems, just to have him detect flaws so they can improve on them.
> Places in need of security should hire this guy after they've installed their security systems
*Before* they install their security systems...
I've always thought those magnets that can hold doors closed are so cool.
Did they leave a good impression on you?
It’s just a electro magnet
@@conradgladue4717 I'm sure she has a name, don't be so condescending
@@SedgeSedgicus huh
@@yourlocalhuman3526 the magnet...
This is the hardware equivalent of authenticating your password client-side...
Yup.
Such an atrocious design. Even if they're too lazy to switch the side that the authentication is performed on, they couldn't at least have used a PWM signal instead? Obviously still unsecure, but requires a significantly greater amount of knowledge and technology to overcome than a paperclip.
@@MatthewStauffer would cost more to implement, either raising the MSRP or reducing profit per unit.
So instead we have LPL demonstrating that the product is utter crap and should be returned to the seller as not fit for purpose.
Fire up disassembler, bridge the jmps with paperclip, done.
@@MatthewStauffer Look, there are multiple problems here; using Phillips screws, rather than any other type that decreases the likelihood of an attack to the interior of the electronic components, is already a huge flaw that signifies a particularly telling lack of interest on the manufacturer's part. Having just *_one_* screw that is easily accessible from outside is just ridiculous.
And thats how an engineering team get humilated in 3.40 mins...
He takes the time to explain. It would have been done in 40 seconds otherwise
It was probably a Chinese child.
@@albertlopez7079 Actually, it's pretty weird. They usually use some simple coding, not just on-off signal.
should's use centralized system for that one .. smh ..
3.40 minutes is 3 minutes and 24 seconds.
That was so wonderfully simple and anticlimactic. The beep, the lock falling open, that's it. One-cent Paperclip - 1, $170 dollar Lock - 0. Bravo, sir!
Thank you for this as always.
I am an old man. One thing that I notice with security devices is that no matter how sophisticated they become there is always a need for physical security This is often missing. You can have a very secure access system but if someone can just put a boot through the door, or short it out with a paper clip, the level of security is low.
boots work grate on most doors and windows!
The fundamental flaw is underestimating the Lock Picking Lawyer.
Or he's wife, when she wants ice cream!
No, this is stunningly flawed. Some of the mechanical/physical exploits seem to me like they require knowledge of the particular mechanism... but this one is written in silkscreen on the circuit board.
@@WeslomPo his, not he's
The flaw would be securing the panel with a single small screw and not making it impossible to get into without sending it back to the manufacturer
*The FBI raids LPLs house and takes him in for questioning*
The FBI: So... we've been watching you for some while now, we know that you are experienced in lock picking and may be a threat to the United States, we have seen your lock picking abilities and have put you in handcuffs no mere mortal could escap... HEY ARE YOU EVEN LISTENING TO ME.
LPL: Nothing on 1, nothing on 2, some tension on 3, a nice click on 4, and another nice click on five. Alright guys and that's how you get out of military grade handcuffs. Not that hard all you really need is a paperclip and a button on your shirt and you can do it at home.
don't even try to lock him up with a lock that he can reach.
FBI & CIA: You are hired!
FBI & CIA: NO WE HIRE HIM FIRST
LPL: May the best Detective wins and let the game begins.
@@notsosecrethow-tos6166 he can use the force duh
Longest joke I've ever read
@@OMARD55 You clearly haven't read your username before.
I'm glad he's one of the good guys, immense heist potential otherwise.
I like to imagine he did one giant job and then retired XD
Hey, there’s plenty of heists out there to be done for the good of humanity. (half serious)
your quick to assume he hasnt done a heist with the skillset he has
Or is he a good guy? (Vsauce music plays)
I mean .... He could be both
Almost every experienced burglar avoids targets with security systems. And no experienced thief will try to open a lock like this without reading about it before hand. Still seeing LPL double penetrate this thing is pure gold 😂😂
Coming from personal experience huh?
Lets get out the Paperclip BosnianBill and I had around the office...
😁
Under rated comment.
@@herefishyfishy6907 519 at 9:27 PST now
I was searching exactly for this one
*This system is installed all over my University*
Me after watching this: hehe boi😂😂
That's exactly what I'm thinking bro... Faculty room I'm coming boi
Bro what university do you attend?
@@dekotakilcrease9525 Hogwarts University wbu
thats bad
Pro tip: once you've bypassed the lock, quote 1:55 to scare everyone even more shitless 😂
High tech lock: **exists**
LPL: "Oh, no... Anyways..."
High tech 🤣 its literally a button
Just saw your video for the first time and This was great. Great voice, diction and concise format. Fun
Wow, just goes to show that most security systems rely on intimidation and general ignorance over actual security. One screw, that's ridiculous.
@Curi Osity Nice. Anything to slow them down is a win in my book. :)
It's the old thought of, a lock keeps the well behaved out, but anyone that TRULY wants into something can always find a way. I bet 1out of 10 smashing this head unit defaults to opening up too or might short the cables as well...lol.
That screw may be small, but it's 3D printed out of cold-rolled, degaussed, depleted titanium.
The thing is that there is door contacts on most doors in shops or wherever so when a door is opened and the alarm is set opening the door will result in a alarm.
@@TheTruthKiwi He's saying the heater has the security screw, not the lock lol.
Cables: *NO*
Lock picking lawyer: Paperclip
Cables: *YES*
Love how he's teaching future robbers how to pick fingerprint locks😂
And it is great because that forces them to upgrade their locks!
or consumer be more careful what hes picking.
more like teaching people to choose a better product dumbshit
Haha yes I have noted that in ccomments my self.
But I understand like all education it is double edged.
It can be used for good or bad purpose.
It shows us all how much of our security is nothing more then a fake "feeling".
Most security systems do nothing more then buy time at best, create noise.
So my hat is off to LPL for showing us reality of many security devices and systems.
I still lock my doors, use pad locks etc.
Mainly for insurance issues to prove I tryed to secure against theft.
LPL has shown us the best and the worst but proven its all image and feeling when it comes to security.
I view LPL in the same way I view people who make exploits, bugs and glitches in video games well known. yes, people can use those glitches and exploits, but it puts an immense amount of pressure on the developer to rapidly make changes. (in LPL's case, the manufacturer)
Lock development team: "why didnt we put two screws? WHY DID WE GO JUST ONE SCREW?!"
Simple, they saved $0.02 on the total cost. lol
I thought we might have a little drama: "Do I cut the red wire, or the blue wire?" But, no, just a pedestrian paper clip...
Sometimes the best option isn't to cut the power, but to redirect it or give more power.
heeey thats MacGiver's! paperclip! ok !
@@Krushak69 MacGyver
Gotta ask, do companies ever get pissed at you and email rude things cause you destroy their locks and such?
I'd like to know that either!
I'm listening..
Yeah same here
When he cut the ottolock with Tin snips they accused his video of being deceptive. He then cut the improved version with tin snips, and responded to the accusation with what one comment described as "the most polite roast" they'd ever seen
I know he received an angry letter from a Chinese lock manufacturer and posted it on Twitter awhile back
I remember a friend of mine bought one of those small cut-proof/fire-proof digital keypad safes from Walmart, he was carrying it up some stairs in his polebarn and accidentally dropped it right on the keypad and it shattered, whatever material it was behind the plastic keypad looked like metal but it just crumbled and conveniently enough thats where all the tumblers were so by essentially dropping it he was able to get into it, unfortunately for him he didnt need to get into it and hadnt even gotten the chance to put anything into it, he was so mad but I couldnt help but think that youd be even more angry if someone else got into it
This is amazing! Please, keep doing these videos! Thanks for the great work!
I'm waiting for the day LPL gets out of a high security prison using a taco.
...that BosnianBill and he made.
El Chapo beat him to it.
@@gary_rumain_you_peons Yeah, but with a bike and a tunnel. Not a taco.
@@SuryanIsaac He was eating one at the time. :)
Meat taco
When you're watching Stargate and Carter opens a door with a knife and you think "that's alien tech, it wouldn't be that easy"
LPL .. "well, actually..."
Thats a good one sir :D Never thought i see a Stargate comment on 2021 lol
Hahaha yeah guess Stargate wasn't so farfetched after all.
I REALLY miss Stargate. Carter was so awesome, LPL would certainly make an excellent SG team member!
Indeed. *jaffa deadpan*
@@Preston241 aye, kri to that
Always impressed with your videos that you produce!
As a former security systems tech, I can tell you that this is a garbage design that you will never see in any commercial setting. Card authentication is never done at the door on any real system. The reader is only there to send the card data (facility code and encoded ID #) to a security panel that will fire a relay to open the door. Security panels are typically installed inside of a locked data closet that is located INSIDE the space you're trying to enter. The panel may even be located multiple floors above, or below the floor that you're currently standing on.
These are probably bought by cheapskates who want a lock, but don’t want to pay for a good one!
Coming from the perspective of an apartment manager, I wouldn't have known to drill the security vendor on this issue.
It also seems like this setup makes the outer-facing components more expensive to replace if vandalized. When it's set up like you described, replacing the outside panel sounds like a much cheaper job.
@@googiegress7459 as a manager you should know more than average people but realistically it's impossible to know everything, that's why security experts exist. Consult with one of them before you go looking through stuff on Amazon otherwise you might think "slash proof" means something (LPL has a great series about slash proof stuff).
@@purplefreedom1631 Oh in this situation we'd definitely go with vendor recommendations instead of just slapping something down from Amazon. I'm just saying it's possible for the vendor to go cheap with me none the wiser. Except I guess in this case I know to ask about this one specific thing.
What would happen if one slid a thin sheet of metal (magnetic ofcourse) between the locking magnets ? Would the threshold of 600 lbs come down ?
Imagine the LPL doing an escape room.
LPL: "searching for clues? Boring. I'll just pick all the locks in order"
LPL: The world's toughest escape room is a joke: Jiggled open in 2 minutes.
INEXCUSABLE FLAWS
I'd watch that
[1589] "Un-escapeable" escape room escaped within 2 minutes
my favorite part is the beginning when he explains how beautifully everything works... because I am thrilled waiting for the "but..."
The security at my work had the wrong door code for the outside of the last door of our fire exit at work yesterday. One of the fire doors in between that got stuck shut because of a piece of metal on the outside which was a huge risk for obvious reasons.
Thanks to one of your videos I managed to work out the correct combination and pick the lock, so we cleared the obstruction and the fire exit. If there was a fire people could have died because the fire exit was blocked.
Thank you for making these videos
thank you for telling me to stick to the old lock n' key, at least it doesn't take seconds. maybe i'll just invest in many multiple locks. you've also instilled a paranoia. still love your videos
The main defense is misdirection. The burglar gets in, goes to your bedroom, and starts looking in the usual places for jewelry and watches. Maybe his tweaker buddy is running around grabbing laptops and tablets. They also check the typical "safe in plain view" products like the super obvious wall shelf. You have a big heavy safe in the garage that can't be lifted by four people, and maybe they drag that away with a truck, or maybe they waste time picking it; it's full of lead bricks and boring porn.
Your real goodies are in your hoarder shed under all the bales of crochet magazines in a soiled cardboard box labeled "pink bathroom sink".
Of course, you could always use the patented Millennial Defense: just don't own anything.
During this COVID quarantine, I am learning new skills for the coming apocalypse!
Same
you read my mind
And specially the walking dead apocalypse
Get ready for the Great Reset. Join the resistance now!
@@Hi-cz3nv That'll be the most secure lock in such an event...as I never ever witnessed a zombie with a paperclip.
Just put up a sign.
“No screwdrivers allowed on the premises”
BOOM- Fort Knox security levels again.
we should just make crime illegal
"Hey, this is a gun, eer, screwdriver free zone"
Didn't you know? - Criminals can't commit crimes if they're told they're not allowed to.
Or you could put 601lbs of force and the lock would give
@@kevinlin7674, I'm pretty sure at 500lbs the frame might just give way. The 600lbs is just a novelty unless you bolt it into the floor.
@@saints360row Thanks for the heads up! Hey folks, we only need to exert 501lbs of force now!
Your videos have come in handy as references when I'm working on stories. ☺
Thanks for the tutorial man, now I am a millionaire with your help and living my life peacefully
This is like having the user authentification in the front-end instead of the backend
"like"?
it literally is
it is literally front-end authentication
And including authorized boolean in the request
wow, IT geek jokes.. 👌
I love backends too.... though in the bedroom. ;D
All they had to do is encrypt the signal from the fingerprint reader to the main control unit, problem solved (well, not for LPL lol).
This looks like something you’d see on an episode of MacGuyver and think was too silly to be true.
is normal to me though.
佐藤海翔 because RUclips have disabled the thumbs down button; I am writing this comment just to let you know that I thumbed down your comment.
What’s macguyer
@@Anonymous-vh6kp is either you're dreaming or you are drunk xD
CCP trolls?
MacGuyver used some powder to duplicate a finger print I think... I saw that episode
That’s so funny. Well done LPL, thank you.
Super easy fix on the manufacturers end. Quick engineering is always sure to cause simple flaws.
I was like, "Oh man, almost four minutes," and then the first 1:30 was literally just him explaining and modeling how the lock works, followed by another minute of him talking about how to undermine it.
I appreciate the time he takes to explain things, but im also like, "Do the thing".
just be happy he is not like the rest of the you tubers that make every single video 10:01. long.
Who would win:
a 160$ security system
or
Clippy
?
My money is on clippy boy
"It looks like you are trying to break in through a security system.
Would you like some help?"
> Yes No
I still miss clippy :-(
That depends on who is wielding the clippy
@Богдан Кондратов Clippy isn't alone, he has Screwy by his side.
This man know what he's doing. Respect
You're magic. Congrats!
"The more they overthink the plumbing, the easier it is to stop up the drain." - Scotty, Star Trek III
But clearly they underthought this one!
Just a little grease down the drain every day for a few years can completely clog a city sewer system. Seen it done. If I remember right, they're called fat bergs
@Богдан Кондратов Equipment will never replace mentality and training. Give me a good driver with a Volkswagen Beetle from the 1930s over a bad driver with the all new 2020 Nissan Altima.
@@pavelthefabulous5675 Yeah. but his point is: if the bad driver with the 2020 Nissan Altima ends up hitting the 1930 Beetle at 80 km/h (or 50 miles per freedom), guess who is more likely to survive..
Thomas Vlaskamp III - I’ve dated a few of those in my time.
The label on the latch reading "seral no." gives me the highest confidence
i am proud of you
Nice catch!!!
Chy-na
Lol nice find. I Googled "Seral No" And guess what popped up? The exact same magnetic door lock
Yeah, and that's not even the vulnerable part.
That bypass could be fixed by a simple circuit. A circuit that would require a certain voltage to be passed through the wires instead of simply just closing the circuit. Or have a required variable pulsed code to unlock through the wires to unlock.
like he said its simply wrong by design. The Terminal should just transmit the dialed numbers to the power supply control box. And the actual verification is done on the "secure side", not on the terminal side.
Thanks, this really helped me steal my neighbor's jewelry! Couldn't find any other tutorials online, so this was essential.
Surely the manufacturer is like: You're not supposed or allowed to remove that screw!
I bet the removal of the screw violates warranty 😀
s3sebastian I assume it’s more so the wires aren’t supposed to give that much (As in they should be tight not allowing for the cover to be removed without damaging the wires)
And when the wires are damaged the system remains locked....
Assuming I’m right I’d say this is actually a pretty alright lock...
if they'd used a star screw or at least something less common than a Phillips head it might have fared a bit better
@@swordstrafe Nah, theres no way for the secure side to know if the wires are damaged or not. Even if the connector breaks when you remove the body you could just connect your paperclip to pairs of wires until it unlocks.
Also its very unlikely that the connector will break because the installer need enough cable lead to install the product in the first place. Also the connector will just disconnect from the plug, its just a common JST plug which arent fragile by any means. Even after it disconnects its just as novel to decode the wire functions.
The only way to make this style of system airtight in anyway is to have the verification on the secure side, as suggested by LPL, with the verification using one time keys or time coded keys to defeat sniffer attacks (that read valid signals and resends them later).
Darcy Moloney is the wire are damaged you can’t send the unlock signal.
Fingerprint/RDIF: I am strong and secure.
LPL: Yeah, now talk to my paperclip.
I mean it is pretty secure but, as he said, if the part that controls the lock is also outside it's easily bypassable, or less easily depending on how much effort they spent on anti-tamper. Also, assuming you are using an seperate control box inside, you probably want to set it up so that it requires a key/fingerprint and a passcode.
😅👍
This is a really well done video.
I think the short length of all these videos really adds insult to injury for all these locks. Always feels like a “mic drop.” Love it.
Next vid: gun safe defeated by turkey sandwich
"I'm now going to take this turkey sandwich that Bosnian Bill and I made"
Lets be honest, the safe didnt have a chance
Bribing the lock's overseer with a turkey sandwich is still non-destructive entry.
;)
@@bencushwa8902 That was the most common way to defeat locks in the USSR.
LOL !
jigsaw: the key is hidden in your hand and you need to cut it to get the key can you do it
LPL: and this how you opens easily opening locks with only paperclips
jigsaw: wait thats not how you play the game
@@noviefros8911 what?
@@noviefros8911 what?
Jigsaw just gets more and more pissed as he tries more brutal techniques, only to find that lpl has picked every lock before he even finishes explaining them
To get lpl in a saw game you'd need to cut off his hands first, and even then I'm not too confident he couldn't pick his way out with his tongue
@@npc6817 now I know why his wife loves him.
Nice design, works well and very easy to set up.
This tutorial is amazing. Now I have a new house, well not that new but it works.
Year 2055
"This is the lockpicking lawyer and today, I'm going to show you how to open the master lock "retina-pro plus" retina scanning padlock using nothing more than a common soup spoon"
Nope, only a small booger would be sufficient if it's a Master Lock.
He then proceeds to just pressing the big red "OPEN DOOR" button, bypassing everything
@@canalalex0119 of course my horse
Finally the moment we have all been waiting for: Opening a lock with a paperclip.
(Although, admittedly, it wasn't the kind of lock, or the way to open it, that I was expecting.)
Thank you sir, you have now successfully taught so many burglars
I can now add this info to my mazing stockpile of information that I'll never actually use but love learning!
As an electronics engineer this makes my day lmao! It's so easy to do at least some sort of indirect connection but they went with a relay switching a silkscreened connector. Genius!
All the fancy tech just to operate a mechanical relay.
Even a hobbyist is able to build something more secure for a couple of bucks, just switch positive, reduce the incoming voltage when you send it back and the reciever checks for the right voltage, the devices could have random signal voltages, or each device a list of voltages that switch on every use randomly jusg by sending a one digit integer for a switch statement, this would make it ways harder to hack, even if you know how it works. But this is just ridiculous, I mean there is only one simple screw, a curious kid could open this thing and finally even steal it because it looks so cool and best thing is that it doesn't even need the other parts to reuse it because this is the whole control unit, the kid could have a cool looking door lock and you couldn't enter your own place, well, until you short the two wires by accident 😂
LPL: "Thank you for your generous donation"
Marc: "DONATION?!?!?"
well: surely LPL would send it back, but... this thing would not be secure enough to keep a candy bar safe, so... would anyone want it back?
@@sarowie They would, for a refund.
lol
Marc. with a c.
*key and peele reference*
@@Slepepe Cark?
Thanks for the information!!!
C'est le cinq mille unième commentaire et j'en suis très fier... Ces vidéos sont vraiment passionnantes, même pour un francophone. Best regards!
The fact that they misspelled "serial" should be a tip off that this is junk.
No, you spelled "seral" wrong!
The pair of you are stupid, the correct spelling is “cereal”
This isnt just a fatal flaw in this model, its a flaw in many like this for some reason.
Yes because typos are always indicative of lying about whats happening in the video youre playing of what you did
@@realitynowassigned If they're too lazy to get a dictionary, why should we give them the benefit of doubt about the lock?
Next weeks episode, I'll show you how to break into Fort Knox using a plastic zip tie and a chicken.
He'll need 5 minutes - 10s to unlock everything with the zip tie and 4 minutes 50 to eat the chicken.
There's no gold... LOL...
thats a bullcrap conspiracy theory there is nothing at fort knox, there is currently 147 troy ounces worth $290 billion
@@iamasmurf1122 And it's on loan from israel.....
plastic zip tie and a rubber chicken....
Love the videos
Nice video (as always). In the office I used to work in, of a multi-billion dollar business, they had installed the card reader AND magnetic lock on the outside of the door. Admittedly a few more screws but to take the entire lock off the top of the door was still a viable means of entry As the building had recently been completed I took photos and explained to management why this was a bit silly...nothing was done in the two years I remained with that company.
As soon as I saw that setup I knew what the bypass was going to be, why would anyone think having your control circuitry on the non secure side of the door is a good idea.
I have a couple of customers who have yards with electronic gates and the control box for said gate is on the outside of the fence/gate... the box that holds the electronics is quite stout and is all steel construction with hidden hinges but it is secured with basic cam locks!
If you think about it , it is so " MR TECH GUY CAN RESCUE YOUR LOCKED CAT BECAUSE YOU HAVE FORGOTTEN / LOST / LOCK IN THE IDENTITY RDIF KEY , ETC ."
But it's just way too easy a by pass . No identity needed for by pass .
There actually is a way to do this somewhat more securely - by having a tamper-switch inside the external device that disables the unlock functonality until it is reset from the inside of the secure area. But that would obviously add one more component, and cost more, so the cheap sets don't include it.
Exactly this. Unfortunately it's quite common though. Manufacturers prefer to put all the fancy electronics in one place, so because they're making a keypad/rfid reader/fingerprint scanner, it's easiest to just add the rest of the control circuitry there. It's a horrible plan, but extremely common.
In the ideal world, the outside of the door would simply send the credentials (encrypted in such a way as to prevent MITM replay attacks if the outside device is compromised) to the inside. That inside module would then authenticate the credentials and decide if the door should be allowed to open.
What's worse is that this isn't just done with cheap stuff you can order off Amazon, this is also done with many professional grade systems, and in fact the vast majority of apartment door buzzer systems do this too (the newer ones have locks on the front of a thin aluminium box, the older ones don't even have that). Even high end office control systems that use card access to a central server for authentication still frequently transmit the authentication from the reader to that central control system in plain text making them vulnerable to MITM replay attacks.
You have to be very careful with electronic locks, most are designed only with electronic security in mind, not physical security.
@@SebastianSonntag That's not really a great solution anyway for a couple of reasons: first, almost all tamper switches can be bypassed in such a way that they never alarm in the first place with minimal skill. Second, if all your control circuitry is on the outside, then that tamper reset signal would necessarily also be travelling to the outside and be just as easily bypassed as the door bypass shown here.
The only secure way to do it is to keep all the control circuitry, and all the authentication circuitry, on the secure side, and only pass encrypted, un-authenticated, data from the outside to the inside. All authentication must happen on the secure side of the door.
@@Green__one Your assertion that "almost all tamper switches can be bypassed in such a way that they never alarm in the first place with minimal skill" is inane. I use electronic fingerprint locks on some of the doors on several of my properties. In each case, the tamper switch is fully integrated into the casing of the fingerprint reader, with dozens of contact points and sensors. Accessing the electronics without tripping the tamper switch, while it might be theoretically possible if you were to take a jackhammer - although that would almost certainly trip the vibration sensor - to the wall and attack the enclosure (which is recessed into said wall) from the back where there are fewer contact points, is as close to impossible as it can be. At that point you're better off breaking a window if you want to get in.
Additionally, of course not *all* the control circuitry is on the outside. The tamper control module is inside the secure area. Once the tamper switch is tripped, the control module needs to be reset from the inside, because it cuts all power to the door module by tripping a breaker which has to be physically switched back on.
No electronic lock is perfectly secure. Fingerprints can be copied, RFID tags can be spoofed, PINs can be guessed or brute-forced (which can be as easy as checking which buttons on the keyboard show the most wear on certain installations). However, with a little effort an electronic lock can be made at least as good as a mid-range mechanical lock, which is usually sufficient. On most properties, there is no point in trying to create a perfectly secure door lock because criminals will just find another way in.
Ahhh - the good old Processor And Peripheral Electronic Reactive Computer Line Interface Probe.....
Good one
:)
I read that in the voice of Agent 86, AKA Maxwell Smart.
ha nice
OK, KND operative.
been stuck outside my office for 4 years finally can get in thank you lmao
Thanks for showing me how to bypass the door where my ex lives, she will be surprised when I'm waiting for her in her closet tonight. You are the best.
"Bypassing this is as simple as bypassing a simple mechanical lock" Wrong, this is way easier
Tbf you have to unscrew the case. That does make it really obvious as to what you're doing to everyone for miles and does slow you down.
@@Oznerock Unless you went at night with no one to see~
And you need to know which parts to bridge.
@@ctrl_x1770 Considering there's 4 wires and 2 of them are universally recognizable to anyone who has worked with any kind of electronics... Not exactly a difficult puzzle to solve.
@@Oznerock Picking and torquing a mechanical lock is also extremely obvious to any one who pays you any attention. Now if you really wanted to, you could get some kind of blue carpenter's coveralls and if anyone questions why you're opening the lock with a screwdriver, tell them you're maintenance. The average person is less likely to question that than question why you're attacking a mechanical lock with a pick set or whatever your method of attack is.
There's even enough room in there to hide an Arduino board so you can have permanent easy access without anyone knowing.
Or a radio controlled switch as seen in other lpl videos...
Wonder if you can code in your own fingerprint while you have the lock open?
You can even put your weed in there!
Someone's been watching some Modern Rogue, I see.
i'd say get an esp32, it has the wifi already built in :D
Oh my god.. thank you so much! I can now feed my family!
All the homies thank you for this, New York will never be the same....
When will these companies stop putting externally accessible screws on their locks?
Then there are the ones that slap a sticker over top like a Band-Aid.
@@sinnison23 And the sticker will say "Voids warranty if removed".
also without them its eas hackable, the validation process should not be done on the outside LPL points out. Cause thats the real weakness of the system.
If memory of users and also validation is inside, it should be way harder to break.
@@Tjalve70 genius
Nothing on “thumb”, slight click out of the bottom plate, counter rotation on the paper clip...and there you go!
A serious access control system would never utilise a local relay on an externally mounted device. At minimum there should be a cover tamper monitoring on the reader.
umm atm machine ... it takes 5 seconds to drop a fake pad overlay on it and get everyones code and card number ... and those suckers are supposed to be tamper proof
LockPickingLawyer was the Mastermind behind MacGyver - great short videos - top content
-Someone: Can you open that door?
-LockPickingLawyer: Hold my documents
Good one... 😅
Good one! 😅
I'd say it should be "hold my briefs" but that has a whole different connotation.
You missed the point of this lock. It actually is a security measurement, as every criminal will be incapacitated by laughter.
I added a fingerprint lock to my front door when I had to rebuild the old rotted door frame. To make it secure, I built it inset into the wall so there's no direct access to the case screw. Plus it makes it nearly impossible for crims to kick down or smash it off to gain access to wiring. I can access from the inside by removing an inside wall panel, the unit is mounted to a smaller board that's screwed in to an inner frame from that side.
I also went with an electric strike paired with a night latch (rather than an electric latch) and kept the original lock and door handle as well. It keeps all the wiring on the inner door frame, plus I can manually open via the night latch or even disable by locking the night latch in retracted state and revert to physical locking with a key on the main door handle if required. The only minus is if the power goes out there's no way to access the front from outside until you get in to do this. But I have a backdoor with a standard physical key.
The one other thing I did was add a cover over the front of the unit, so only the finger print scanner part of the unit is visible / accessible. This was partly to protect from the weather, but also I think a pin code pad would tempt crims more. RFID works through the cover fine.
I've had this set up now for 6 years and I have to say, it has been super convenient. I never have to fumble with keys coming home late, in rainy bad weather, drunk or laden down with groceries. I just need a free finger to scan and go straight in.
Does it work on all ten fingers? Just wondering if you got some glue or paint on your hand or cut yourself, even just put on a plaster, might you be locked out?
I'll be comin throught the back door ; )
This video made me subscribe. Bravo. I'm picky, no pun intended, with my subscriptions. This guy is good.