Getting past a locked door is easy if you have the right tools. It’s just a matter of knowing how to adjust the pins inside to an even level while turning the mechanism at the same time when everything is perfectly in place. That’s the beauty of a bump key. You never have to see the actual key or what it looks like. And with a simple hit to the back of the key, and bumping it just enough, the lock can magically be opened.
Lock picking items like this can be ordered online for a couple of dollars, or as [Jos Weyers] and [Christian Holler] showed in a recent Wired article, alternatively you can print your own at home. The video of these 3D printed keys (which can be viewed below) attempts to prove that a person can unlock a door with plastic, which was a little bit surprising to us because it seems like the edges would break off right away. But as it turns out, a thin plastic bump key can be made and does function. Not sure how long these keys can last though, but sometimes all you really need is a one time use when trying to open a specific, tricky lock.
As the article states, “Weyers and Holler aren’t trying to teach thieves and spies a new trick for breaking into high-security facilities; instead, they want to warn lockmakers about the possibility of 3-D printable bump keys so they might defend against it.” Although this information is geared towards lockmakers, we see our Hackaday readers finding this data useful as well. Organizers of hackerspaces who hold regular lock-picking events might want to print their own keys and teach classes centered around security. The uses for this are boundless in regards to educating the public about how locks truly work.
We searched through Shapeways, i.Materialise, and Thingiverse searching for 3D bump key STL files and came up short handed. So if you decide to create your own version of this, be sure to upload the models somewhere so other people can learn from it!
“passed” -> “past”
kthxbye
Forget it Jake, it’s Hackaday.
That does not seem like a key printed on a home grade 3D printer, more like selective laser sintering.
I don’t understand why manufacturers still use pin tumbler locks when disc tumblers (http://en.wikipedia.org/wiki/Disc_tumbler_lock) are much harder to pick, work reliably in winter also and the patents have expired ages ago. I can’t imagine them being much different price-wise either, if mass-manufactured.
Probably so you can actually have them picked when you lock yourself out. Its not like a home with this lock could not be broken into. Just break a window, or a door jam, etc.
Lol, so it is actually a feature?
Around here the solution to “lock yourself out” problem is just to have a spare key at some trustworthy place. Indeed locks don’t prevent breaking in, but atleast make it more difficult and cause break-ins to leave clear evidence for insurance.
Locksmiths don’t pick locks, they just put a drill through it.
“Locksmiths” however thieves do.
the idea of bumping the lock is to open it and reset it without anyone even knowing or to make the advance forensics required to detect bumping .
Locksmiths drill out the lock because the lock is usually broken or missing the key and requires replacing.
some locks a Locksmith may require photo id before working on it
Thank you for telling us what we already know.
Go pat yourself on the back for a job well done. Atta boy!
It all comes down to price points and distribution deals.
High quality disc locks exist (Abloy Discloc Pro, Abloy Protec, etc) – and certainly have their uses.
But, the general public are generally incredibly tight when it comes to paying for locks, padlocks, etc – and will opt for the cheaper/est options available.
Incidentally, lock manufacturers / designers are fully aware of lock exploits, drilling, bumping, etc – agian, it comes down to price point and target market. If you’re purchasing a $5 padlock, it’s not going to be using anti-bump, anti-drill, anti-pick techniques.
Quite a few of the big brands (Assa Abloy, Medico, etc) employ people coming from the lockpicking world, and there is quite a bit of cross over.
NB: Work in lock manufacturing
Because the patents on the original Abloy designs have expired decades ago, why haven’t they replaced the pin tumblers as the most common off-brand design? Is there something about a disc lock that is so much more expensive to manufacture?
It really depends on what are you trying to protect. Same thing with encryption. If you want to hide your porn stash or secure your data in case the PC is stolen, a truecrypt is a good choice. If on the other hand you must hide some data from jewish, american or russian gov. then using TC might not be the best choice (see rubber-hose cryptanalysis).
Jewish? Thank you for the handy little dose of antisemitism.
Jewish? Unacceptable! The bit about Russians and Americans is fine though. Remember kids, using the word “jewish” in a sentence automatically makes you antisemite, even if, as it is the case here, there is actually no negative connotation. Thanks Will for your zeal, spending your days looking for people using the “j” word finally paid off: you nicked one! Everyone, give Will a big pat on the back.
http://goo.gl/vXwzTV
“The purpose of locks, the locksmith said, is to protect you from the 98% of mostly honest people who might be tempted to try your door if it had no lock.”
“…locks won’t do much to protect you from the hardened thieves, who can get into your house if they really want to.”
Unless you have the security level of Fort Knox a standard deadbolt will suffice.
Not to mention economical opportunity cost, most people will not spend $300 a lock to increase the probability that a burglar will be stopped and give up.
The vast majority of them are very easy to pick. The problem with them is that it is easier to destroy them. That is what theives do. They don’t care about fancy skill. They are looking to steal stuff fast. A drill with an endmill can take the front face of disc detainers off in seconds and the guts can be removed. It takes more time, a modicum of skill, and is easier to thwart similar attacks on traditional locks.
At first I thought that this was completely stupid- a bump key takes very little time to make with a file and the key will last ages. But then I thought about the lock. Bumping with a metal key can damage the pins. Plastic will be softer and hopefully lessen damage.
Good point. The ultimate defense against bumping, along with everything else, is insurance. Bumping leaves very obvious dents on pins and sometimes messes up the lock face. Insurance companies will not fight claims with such obvious evidence. With plastic, it is not likely to leave dents in the brass. Hopefully, probably, it leaves trace evidence.
yeah, good luck finding a 3d printer that can handle those geometries on that scale. not many people will have access to a selective laser sintering machine, and even then, i can’t imagine that those parts are all that strong, like being able to take the abuse of bumping!
Good luck picking my door lock with a bump key. Unless you know how to bump the door just right with your knee at the same time, you’re not getting in :P
Hum this key looks like a real one covered by white plastic/epoxy. Aren’t the edge shiny like metal ?
No, forget about it.
I wonder whether you could 3D print a mold, then cast in JB Weld.
I also wonder about validity of the “disclaimer” typically included with these types of articles, like:
“Weyers and Holler aren’t trying to teach thieves and spies a new trick for breaking into high-security facilities; instead, they want to warn lockmakers about the possibility of 3-D printable bump keys so they might defend against it.”
It would take a large increase in the use of bump keys, either real or imagined, to illicit any significant defensive response from lockmakers or consumers. For any increase below that, the info provided is in fact only benefiting a few thieves and spies.
Let’s assume though that this article and whatever events/publicity that follows, results in 50% of all locks being upgraded. The thieves are hardly inconvenienced, having to try only two locks on average. The lockmakers also make a fortune. The mass populace is on the losing end to some degree, no matter what they choose to do.
So no, I don’t buy into Weyers and Holler’s altruistic claims. Their actions are of anarchists, or maybe lockmakers…
Funny that they don’t make the software public, since they share enough to infer how to do by hand in – say – blender what the code would do for you. Wouldn’t both trying this with a FFF printer, but it would be fun to experiment doing this with a normal lock.
Similarly, if one had a photo of a key and its dimensions and a picture of the slot it goes into, you could easily make a plastic reproduction of such a key without any magical software.
I think you are thinking about “burning” a key. You take a blank and flash the edge with a candle, lighter, etc and stick it into the lock and twist it a couple of times. You then file down the cut marks by the pins. Rinse and repeat a bunch and you eventually cut your own key. It is far easier to “carbon copy” a key with an original by doing the same thing holding them together. These are both old old methods though and without a bit of skill ymmv. Sorry if you were shooting for something else, it just reminded me of that. There are a number of “emergency keys” that are credit cards with fold out keys- you may have some luck with them :)
Useful as a POC only. Otherwise just kinda dumb use of a 3d printer. A lot of energy for something you are going to use twice illegally.
We’ve actually printed a working key on a commercial desktop 3D printer. If the lock isn’t too heavy it’s very possible to use a 3D printed key.
Lockmakers can defeat a proportion of criminals using plastic bump keys by keeping the barrel of the lock heated to plastic melting point. Or using silicone tubing to dispense acetone into the chamber.
Is there a chance of this breaking off inside of the lock? Have you guys had any experiences like this?