key

38 Articles

This Robot Picks Locks, If You’re Very Patient

May 5, 2024 by 17 Comments

We all know the Hollywood trope of picking a lock with a paperclip, and while it certainly is doable, most reputable locks require slightly more sophisticated tools to pick effectively. That’s not to say that wire is off the table for locksports, though, as this cool lock-picking robot demonstrates.

The basics behind [Sparks and Code]’s design are pretty simple. Locks are picked by pushing pins up inside the cylinder until they line up with the shear plane, allowing the cylinder to turn. Normally this is done a pin at a time with a specialized tool and with a slight bit of torque on the cylinder. Here, tough, thin, stiff wires passing through tiny holes in a blade shaped to fit the keyway are used to push all the pins up at once, eliminating the need to keep tension on the cylinder to hold pins in place.

Sounds simple, but in practice, this looks like it was a nightmare. Getting five wires to fit into the keyway and guiding them to each pin wasn’t easy, nor was powering the linear actuators that slide the wires in and out. Applying torque to the lock was a chore too; even though tension isn’t needed to retain picked pins, the cylinder still needs to rotate, which means moving the whole picking assembly. But the biggest problem by far seems to be the fragility of the blade that goes into the keyway. SLA might not be the best choice here; perhaps the blade could be made from two thin pieces of aluminum with channels milled on their faces and then assembled face-to-face.

The robot works, albeit very slowly. This isn’t [Sparks and Code]’s first foray into robot lock picking. His previous version attempted to mimic how a human would pick a lock, so this is really thinking outside the box.

Continue reading “This Robot Picks Locks, If You’re Very Patient” →

Open Source Key Programmer For HiTag2 Keys

October 28, 2023 by 9 Comments

Hitag transponders have been used in a wide variety of car keys as a protective measure against hot-wiring and theft. They’re also a reason why it’s a lot more expensive to get car keys duplicated these days for many models that use this technology. However, there is now an open source programmer that works with these transponder keys, thanks to [Janne Kivijakola].

The hack uses an old reader device salvaged from a Renault in a scrapyard, hooked up to an Arduino Mega 2560 or Arduino Nano. With this setup, key transponders can be programmed via a tool called AESHitager, which runs on Windows. It’s compatible with a variety of Hitag transponders, including Hitag2, Hitag3, and Hitag AES, along with the VVDI Super Chip and certain types of BMW keys.

If you’ve been having issues with coded keys, this project might just be what you need to sort your car out. Everything you need is available on GitHub for those wishing to try this at home. We’ve seen some interesting hacks in this space before, too. Video after the break.

Continue reading “Open Source Key Programmer For HiTag2 Keys” →

Security Vulnerabilities In Modern Cars Somehow Not Surprising

March 2, 2023 by 16 Comments

As the saying goes, there’s no lock that can’t be picked, much like there’s no networked computer that can’t be accessed. It’s usually a continual arms race between attackers and defenders — but for some modern passenger vehicles, which are essentially highly mobile computers now, the defenders seem to be asleep at the wheel. The computing systems that control these cars can be relatively easy to break into thanks to manufacturers’ insistence on using wireless technology to unlock or activate them.

This particular vulnerability involves the use of a piece of software called gattacker which exploits vulnerabilities in Bluetooth Low Energy (BLE), a common protocol not only for IoT devices but also to interface a driver’s smartphone or other wireless key with the vehicle’s security system. By using a man-in-the-middle attack the protocol between the phone and the car can be duplicated and the doors unlocked. Not only that, but this can be done without being physically close to the car as long as a network of some sort is available.

[Kevin2600] successfully performed these attacks on a Tesla Model 3 and a few other vehicles using the seven-year-old gattacker software and methods first discovered by security researcher [Martin Herfurt]. Some other vehicles seem to have patched these vulnerabilities as well, and [Kevin2600] didn’t have universal success with every vehicle, but it does remind us of some other vehicle-based attacks we’ve seen before.

Translating And Broadcasting Spoken Morse Code

January 24, 2023 by 24 Comments

When the first radios and telegraph lines were put into service, essentially the only way to communicate was to use Morse code. The first transmitters had extremely inefficient designs by today’s standards, so this was more a practical limitation than a choice. As the technology evolved there became less and less reason to use Morse to communicate, but plenty of amateur radio operators still use this mode including [Kevin] aka [KB9RLW] who has built a circuit which can translate spoken Morse code into a broadcasted Morse radio signal.

The circuit works by feeding the signal from a microphone into an Arduino. The Arduino listens for a certain threshold and keys the radio when it detects a word being spoken. Radio operators use the words “dit” and “dah” for dots and dashes respectively, and the Arduino isn’t really translating the words so much as it is sending a signal for the duration of however long each word takes to say. The software for the Arduino is provided on the project’s GitHub page as well, and uses a number of approaches to make sure the keyed signal is as clean as possible.

[Kevin] mentions that this device could be used by anyone who wishes to operate a radio in this mode who might have difficulty using a traditional Morse key and who doesn’t want to retrain their brain to use other available equipment like a puff straw or a foot key. The circuit is remarkably straightforward for what it does, and in the video below it seems [Kevin] is having a blast using it. If you’re still looking to learn to “speak” Morse code, though, take a look at this guide which goes into detail about it.

Thanks to [Dragan] for the tip!

Continue reading “Translating And Broadcasting Spoken Morse Code” →

An illustration of a key sitting on an ID card. The key is light grey and the ID card is a darker grey gradient. The ID card says ID-1 Card 85.60 by 53.98 mm

All Your Keys Are Belong To KeyDecoder

January 21, 2023 by 56 Comments

Physical security is often considered simpler than digital security since safes are heavy and physical keys take more effort to duplicate than those of the digital persuasion. [Maxime Beasse and Quentin Clement] have developed a smartphone app that can duplicate a key from a photo making key copying much easier.

KeyDecoder is an open source Android app that can generate all the necessary bitting info to duplicate a key from just an image. Luckily for the paranoid among us, the image must be taken with the key laying flat without a keyring on an ISO/CEI 7810 ID-1 ID or credit card. A passerby can’t just snap a photo of your keys across the room and go liberate your home furnishings, but it still would be wise to keep a closer eye on your keys now that this particular cat hack is out of the bag.

The project’s GitHub page is awash in warnings that this tool is designed solely for “pentesters and security enthusiasts” to warn their friends and clients about the dangers of leaving their keys exposed. After learning about this tool, we wouldn’t be surprised if some in the audience start rethinking how they carry and store their physical keys from now on.

If you want to see some more hacks to duplicate keys, checkout Copying High Security Keys With OpenSCAD And Light and Methods Of Copying High Security Keys.

Front Door Keys Hidden In Plain Sight

October 18, 2022 by 27 Comments

If there’s one thing about managing a bunch of keys, whether they’re for RSA, SSH, or a car, it’s that large amounts of them can be a hassle. In fact, anything that makes life even a little bit simpler is a concept we often see projects built on to of, and keys are no different. This project, for example, eliminates the need to consciously carry a house key around by hiding it in a piece of jewelry.

This project sprang from [Maxime]’s previous project, which allowed the front door to be unlocked with a smartphone or tablet. This isn’t much better than carrying a key, since the valuable piece of electronics must be toted along in place of one. Instead, this build eschews the smartphone for a ring which can be worn and used to unlock the door with the wave of a hand. The ring contains an RFID which is read by an antenna that’s monitored by a Wemos D1 Mini. When it sees the ring, a set of servos unlocks the door.

The entire device is mounted on the front of the door about where a peephole would normally be, with the mechanical actuators on the inside. It seems just as secure (if not more so) than carrying around a metal key, and we also appreciate the aesthetic of circuit boards shown off in this way, rather than hidden inside an enclosure. It’s an interesting build that reminds us of some other unique ways of unlocking a door.

Continue reading “Front Door Keys Hidden In Plain Sight” →

3D Printing The Key To A Bass Clarinet

September 27, 2022 by 8 Comments

Playing music as part of a group typically requires that not only are all of the instruments tuned to each other, but also that the musicians play in a specific key. For some musicians, like pianists and percussionists, this is not terribly difficult as their instruments are easy to play in any key. At the other end of the spectrum would be the diatonic harmonica, which is physically capable of playing in a single key only. Other orchestral instruments, on the other hand, are typically made for a specific key but can transpose into other keys with some effort. But, if you have 3D printed your instrument like this bass clarinet from [Jared], then you can build it to be in whichever key you’d like.

The bass clarinet is typically an instrument that comes in the key of B flat, but [Jered] wanted one that was a minor third lower. Building a traditional clarinet is not exactly the easiest process, so he turned to his 3D printer. In order to get the instrument working with the plastic parts, he had to make a lot of the levers and keys much larger than the metal versions on a standard instrument, and he made a number of design changes to some of the ways the keys are pressed. Most of his changes simply revert back to clarinet designs from the past, and it’s interesting to see how simpler designs from earlier time periods lend themselves to additive manufacturing.

While [Jared] claims that the two instruments have slightly different tones, our amateur ears have a hard time discerning the difference. He does use a standard clarinet bell but other than that it’s impressive how similar the 3D printed version sounds to the genuine article. As to why it’s keyed differently than the standard, [Jared] points out that it’s just interesting to try new things, and his 3D printer lets him do that. We’d be happy to have another instrument in our 3D printed orchestra, too.

Continue reading “3D Printing The Key To A Bass Clarinet” →