Your Door Locks and Padlocks are Probably Useless.
 |
You are about
to discover something that scared the hell out of me.
- The locks I rely on to protect my family and my business
can be opened without damage in seconds.
- By just about anyone, using easily
found information.
- You don't need special tools. Or locksmith training.
- All you need is a normal key that you can file down with
an ordinary file.
- Or you can buy such a key on the internet.
|
I don't believe in "Security by Obscurity" -
where severe problems with the things that we rely on are covered
up and kept
secret.
The technique of key bumping (also known as rapping) has been known
for over 50 years.
Lock manufacturers and criminals know all about it. While all of
us poor suckers still buy crappy locks that we falsely believe will
protect our families and possessions.
I believe that people should know about
the things they use, and decide if any problems are of concern to
them.
If not - they need to do nothing.
Otherwise, they can take appropriate action to the
extent that they see fit.
What's the Problem.
There is a fundamental flaw in
the design of the pin and tumbler mechanisms that are used on commonly
sold latches
and deadlocks.
Even those rated as "high security".
This flaw makes it possible for
anyone to open most most of these locks - even deadlocks - very
quickly using
a technique known as "bumping"
This technique does not damage the lock. All you need is a few minutes
practice in a certain technique, and filed down key that fits into
the lock. (Or you can easily buy such a key on the internet)
In a bizarre twist,
the more expensive locks are actually easier to open, because of
their tighter tolerances, and better quality. A Dutch consumer
organisation tested over 60 locks that has been approved by the police
as providing
High Security, and found that most of them could be bumped open.
See http://www.toool.nl/consumer-reports-nl.pdf
I realise that locksmiths and criminals have always been able
to open locks without keys.
But this technique allows anyone to do it.
At first, I thought Key Bumping was a joke.
So I’ve spent a large part
of a weekend researching it - and proving to myself that key bumping
actually works.
Imagine This
You arrive home (or at your business), unlock the door, and discover that
everything of value is missing. Your new Home Entertainment system, Computers,
Stereo Equipment, etc. etc. All gone.
You are devastated. But that’s
nothing to what happens next.
You call the police and your insurance company, and make a claim.
The insurance company refuses to pay.
What’s
worse – they think you did it – because there is no sign of illegal
entry, and your premises are protected by high quality locks. They might
even charge you with attempted fraud.
Not a nice situation for a completely innocent, recently burgled person to
find themselves in.
The above situation is becoming more and more common in many countries because
of a fundamental flaw in the design of the majority of locks we trust to protect
our property.
In Australia some companies will pay out on
a theft claim where there is no forced entry, as long as the theft has
been reported to the police. Some won't. (Check your situation with your insurer.)
And even if your premises are not burgled, are you comfortable
with the fact that someone can open your locks, come in and snoop around
your house, and then leave without a trace?
Bump Keys make this possible.
Key Bumping - The Proof.
Here’s a video from
NOVA, a well respected European
TV program which includes a full demonstration of key bumping, and
comments from
lock experts and police.
(It's in Dutch, goes for about 7 minutes, and has
English subtitles.)
Like I said, it scared the
hell
out
of me - especially these parts:
- The speed and ease with which this technique can open locks.
- The ability of a child to open locks with a bump key and a few minutes
practice
- The contradiction between the statements of the
police representative, and the reality which was demonstrated by the
lock experts.
- The ability to open 47 of 60 locks that had been approved as high security
by the dutch Police.
- The fact that some high quality, expensive locks are easier to open than
cheap ones.
I don't know about you, but I'm not thrilled knowing that the locks
protecting my family and possessions have this problem.
So I went down to a
locksmith to get some locks that are immune to bumping.
What I discovered really made my jaw drop!
I Visit The Locksmith - (You're not going to believe this.)
I visited a locksmith to ask him about this technique,
and to see if he could recommend locks that were bump proof.
He was clearly unaware of the term, and I had to explain exactly what I meant.
His scarcastic comment was that as he had only been in
the industry for over 20 years, he knew nothing about it.
Anyway, he was gracious enough to humor me and made me
a copy of his standard 999 key and modified it slightly as I requested.
The fact that he did this indicates that he really was
unaware of the problem.
To his credit, he ended up being very helpful and explained
to me in great detail about how locks worked - and why bump keys would
take lots of practice to master if what I had told him about was true.
He said that learning how to use one to open locks consistently
would probably take years of training to master all the intricacies -
quote "I think you'd have to be the Tiger Woods" class of locksmiths
for it to work .
He dismissed the notion of a child picking up the technique in a few minutes
as probably being a media stunt that had been specially set up.
He let me try to open a few sample locks using the bump
technique - and I was totally unsuccessful.
He had no concerns about the bump technique being a danger
to anyone's security, and probably thought that I was a bit of a nutter.
(and maybe I am - but not for this reason)
I came home with the bump key, and re-read my information. The technique
I had been using at the locksmiths was all wrong.
I practiced on the deadlock on my back door for about
5 minutes. using various ways to hit and turn the key. After about 15
tries, I got it right and the lock opened.
Another 10 tries - did it again. another 5 minutes, and
I could do it pretty well every time.
I tried another lock at home - and it opened.
I then went over to my sisters house, and she was stunned when I opened
her security deadlock at the second attempt. (total time taken for both
attempts: - 4 seconds)
Not every lock can be bumped. I've tried 2 others without success. But
experts estimate that the technique will work on around 80% of commonly
used house locks.
And given that the majoriy of house locks have an identical key profile,
It would be reasonable to estimate that over 50% of houses in Tasmania
(possibly Australia) could be entered with this method. Yikes! |
Industry Knowledge of Key Bumping
It would appear that there is little knowledge of the bumping in
the Locksmithing Industry.
The Master Locksmiths Association of Australia are aware of the technique,
but don't regard it as a problem. They don't have a list of locks that are
immune to bumping.
Another locksmith I contacted knew about the technique, but was unaware of
the information and publicity about the technique.
I went to 4 locksmiths with my bump key and asked them to copy
it. All of them just did so - without asking a single question about
the unusual appearance of the key.
I've also made contact with the Police and Security organisations
- they don't know about this either. (And from their lack of response to this
it seems that they don't want to know about it)
Insurance Companies I contacted the insurance companies I deal with (QBE and AAMI). If they were aware of bumping, they didn't tell me. But
they were very keen to receive the information that you are reading now. They did say that if their clients were burgled without
any forced entry, they would normally pay the claim. I've been told that other companies will not pay out in the event of
a burglary where there is no forced entry. Check your company's terms & conditions. How Many People Know about This? Many Millions.
There are lots of Internet sites and fully documented
reports about the technique readily available on the internet. I won't
provide them here, but they are easy to find.
Bumping has been widely reported in Europe, and covered
on several TV programs.
The US magazine Newsweek also
did a story on it recently, and it's all over the social contact
sites that young people use.
I'm pretty sure that lots of Australians
will know about it before too long - and you can bet that some of
them
are
will use the information for criminal purposes.
What To Do Next
1. If you are concerned about this, go to
your locksmith and buy a bump proof lock cylinder.
I understand that
Abloy
disk tumbler locks, and BiLock locks cannot be opened by bumping.
2. Do some research regarding the topics discussed
here.
3. Visit www.toool.nl for
lots more information about bump keys. That's the site that led me
to most of the information I found.
|
|
|