Welcome, Guest
You have to register before you can post on our site.

Username
  

Password
  





Search Forums

(Advanced Search)

Forum Statistics
» Members: 5
» Latest member: Mylah
» Forum threads: 11
» Forum posts: 15

Full Statistics

Online Users
There are currently 14 online users.
» 0 Member(s) | 13 Guest(s)
Google

Latest Threads
[UNSOLVED] KOTW #5
Forum: Key of the Week
Last Post: SaltyHashes
06-29-2019, 07:14 PM
» Replies: 0
» Views: 21,772
[UNSOLVED] KOTW #4
Forum: Key of the Week
Last Post: SaltyHashes
06-17-2019, 07:26 PM
» Replies: 0
» Views: 65,060
[SOLVED] KOTW#2
Forum: Key of the Week
Last Post: SaltyHashes
06-13-2019, 03:19 AM
» Replies: 2
» Views: 35,782
Site Updates 2019
Forum: Information
Last Post: SaltyHashes
06-11-2019, 03:26 PM
» Replies: 1
» Views: 4,650
[UNSOLVED] KOTW #3
Forum: Key of the Week
Last Post: KOTWBot
06-11-2019, 02:28 PM
» Replies: 0
» Views: 19,621
KOTW#1 Explained
Forum: Information
Last Post: SaltyHashes
06-04-2019, 03:42 AM
» Replies: 0
» Views: 1,101
[SOLVED] KOTW #1
Forum: Key of the Week
Last Post: SaltyHashes
06-03-2019, 01:49 AM
» Replies: 1
» Views: 19,033
The Risks of Key Photogra...
Forum: Physical Security
Last Post: SaltyHashes
05-28-2019, 05:12 AM
» Replies: 0
» Views: 3,820
How To Play
Forum: Key of the Week
Last Post: SaltyHashes
05-27-2019, 05:08 AM
» Replies: 0
» Views: 15,261
Honor Code
Forum: Information
Last Post: SaltyHashes
05-27-2019, 04:49 AM
» Replies: 0
» Views: 237

 
  [UNSOLVED] KOTW #5
Posted by: SaltyHashes - 06-29-2019, 07:14 PM - Forum: Key of the Week - No Replies

Here a padlock key for this week, see attached!



Attached Files Thumbnail(s)
   
Print this item

Exclamation [UNSOLVED] KOTW #4
Posted by: SaltyHashes - 06-17-2019, 07:26 PM - Forum: Key of the Week - No Replies

Hi all, I'm out of town so this week is a tad different. See the attachment for the picture, and good luck!



Attached Files Thumbnail(s)
   
Print this item

Exclamation [UNSOLVED] KOTW #3
Posted by: KOTWBot - 06-11-2019, 02:28 PM - Forum: Key of the Week - No Replies

Key Of The Week #3 Challenge

Welcome -- going to change it up and make the cuts a little more obscured. You might have to fight to get this one.

This week:

  • Extremely common (if not the most common) key in the United States
  • Key has obstructed bitting
  • Contrast is decent, view of bitting is decent.
  • Key is pretty straight on
Exclamation  HOW DO I SUBMIT THE BITTING VALUE?
REMEMBER: Do NOT reply with the bitting value. Keep it fun!

When you believe you have the correct one, message me (KOTWBot) and I will message you back if you got it correct. Once the automated system is ready, I will make it so it automatically assigns points and updates the post. Currently fighting with the caching system.

Here it is!

[Image: w3.jpg]

Print this item

  KOTW#1 Explained
Posted by: SaltyHashes - 06-04-2019, 03:42 AM - Forum: Information - No Replies

I want to keep each week open so that folks can improve their techniques and learn more about how this process works. But, to make understanding it a little easier, I drew out this (not at all to scale) drawing of of how to do this.

Each of the flat spots on a key is the cut (which, when measured, forms the bitting code). I drew yellow rectangles over each flat spot you would measure.

The deeper the cut, the higher the number (Some manufacturers go from 0-9, like Schlage. The key pictured here in fact does -not- go that high).

When you enter the bitting codes, you would read them out from bow to tip (so the handle to the tip of the key). In this case, the bitting for KOTW#1 starts with 56 and ends with ???.

Deviant Ollam has a GitHub repo under "Decoding" that gives you overlays that you can lay over the key to easily measure it. Of course, I won't be doing common house keys every week so this may not work forever.

He also has a fantastic talk from WWC about how to use this information.

Check out KOTW#2 to get an idea how quickly this can get difficult. I have quite a few ideas on how to make these even tougher, so lets see how ya'll do!



[Image: help.jpg]

Print this item

Star [SOLVED] KOTW#2
Posted by: KOTWBot - 06-04-2019, 03:25 AM - Forum: Key of the Week - Replies (2)

Nice work to hobojoe551 for completing the KOTW#1 challenge first!

Remember: Just because it is solved doesn't mean you can't send in bitting values for them and still get points.


Also: Yikes about the spam. I hate e-mail validation on forums so I was avoiding that. Lets see if it happens again.


Key Of The Week #2 Challange

The goal is to have these up every Monday morning. Now that folks are joining, I will get this stuff automated so you never have to wait!

This week:
  • Extremely common (if not the most common) key in the United States
  • Key is overlaid over other keys, though of opposite metal composition.
  • Contrast is decent, view of bitting is decent.
  • Angled key, not directly straight on.
Exclamation  HOW DO I SUBMIT THE BITTING VALUE?
REMEMBER: Do NOT reply with the bitting value. Keep it fun!

When you believe you have the correct one, message me (KOTWBot) and I will message you back if you got it correct. Once the automated system is ready, I will make it so it automatically assigns points and updates the post. Currently fighting with the caching system.

Here it is!

[Image: w2.jpg]

Print this item

  Site Updates 2019
Posted by: SaltyHashes - 05-30-2019, 06:30 AM - Forum: Information - Replies (1)

Submitting Bitting Requests
I've started on an automated bot to handle bitting requests. KOTWBot already posts the key, and now you can message KOTWBot with your bitting guesses.

See the attachment for details on what a reply looks like.

When sending your message, follow this format:

Subject: KOTW1
Body: 123123

Any non-numeric characters are ignored in both bodies, anything leading zeros in the subject are also ignored (hence saying "Hey, KOTWBot -- Week #01 guess" Will work exactly like "KOTW1"

The letters flag on it.

If you find that you found a bitting code > 9 -- stop. I'm avoiding those for now.

___

When this is ready, it will handle your leaderboard and points automatically.

Print this item

  The Risks of Key Photographs
Posted by: SaltyHashes - 05-28-2019, 05:12 AM - Forum: Physical Security - No Replies

For most purposes and intents, keys are immutable security devices. You cannot lend a key to a friend, then log in and change it like you may a password.

A key is a token that, through its physical characteristics, is made to enter a lock and allow it to open. If you want to use a different key, you may have to disassemble the lock to the point where you add additional pins.

For this reason, you should protect your keys. Imagine taking your passwords, throwing them onto a keyring, and laying them on the bar. Or at the counter of a gas station.

Through this site, I would like to see awareness spread about leaving keys where they are visible. If you decide to share a key of your own in a thread, feel free -- however you should treat that key as compromised, as well as the locks it goes to.

Cases of Key Photography
There have been several documented cases of key photographs causing some major headaches. Lets take Diebold for example. Some time ago, they had posted a purchase page for keys that would open voting machines. To further the impact, all of the voting machines within that model used the exact same key and bitting. The photo below is of their website -- and it actually led to key compromise:

[Image: diebold.jpg]


Next up -- we have the beloved Transportation Security Agency (TSA). To prevent locks from being cut off, and while offering travelers some semblance of security -- Travel Sentry and the TSA came out with a series of keys and locks that TSA agents could use to inspect your bag without damaging the lock. These are pretty easy to identify by the diamond logo on these locks.

The Washington Post decided to do a story, where they posted a photograph of not one... but ALL of the TSA keys:


[Image: tsa.jpg]



It didn't take long before nice and clear images became available, and of course 3D printer files so you can make your own at home.

BTW: Just about any lock you come across uses TSA007...

The takeaway here being -- if you're going to share photos of your keys, do so on this site, and do so knowing that the key will probably be decoded and maybe even copied. Don't leave your keys out. People rarely need to snatch them to get copies. Everybody has a camera in their pocket.

Print this item

Star [SOLVED] KOTW #1
Posted by: KOTWBot - 05-27-2019, 05:20 AM - Forum: Key of the Week - Replies (1)

Welcome to the first Key of the Week Challenge!

Since it is the first week, I've decided to make this as easy as possible:

  • Extremely common (if not the most common) key in the United States
  • Ample information (decoding overlays, bitting information, etc)
  • High level of contrast
  • Clear, in focus key
Exclamation  HOW DO I SUBMIT THE BITTING VALUE?
I fully intend on building out an automated submission system that will handle points, leaderboard, and so on. But I also want to have a few keys up and ready when I get that out. DO NOT POST THE BITTING.

When you believe you have it -- please go to your messages and send it to me. See the other topics on the site: How do I play? and Honor code.



Here it is!

[Image: w1.jpg]

Print this item

Star How To Play
Posted by: SaltyHashes - 05-27-2019, 05:08 AM - Forum: Key of the Week - No Replies

What is "Key of the Week"?
Each week, a picture of a key will be posted in this forum. Your goal is to uncover the "bitting" of the key using only the photograph. To keep it interesting, some weeks will be very easy -- for example, they may have a clear, contrasting background. Other times, they may be on a keyring in a pile of brass, dirty, or of an unusual key make.

Here's an example image:

[Image: example.jpg]

From this image:
 - You can identify the key maker by the head of the key, and find bitting charts (how deep each cut on the key is, which is how the key works). Some sites offer overlay images, sometimes you'll need to scale the image from the bow of the key.
 - It's against a carpet, so contrast won't be perfect
 - Key is off angle
 - Key is rotated

Using an image software (Photoshop, GIMP, Paint Shop Pro, etc), you can fix up the image -- as long as you don't change the scale of the image. Then, measure and enter the code in to claim your ranking and points.

Is this crowdsourced key breaching?
No. Over time, I've amassed quite the collection of keys that don't go to a lock anymore. None of these images are from people who are unaware of the key on this site (at least for the first while, all the keys posted will be mine. I have enough for at least two years... hoarders, I know.)

The goal here isn't to figure out random stranger's keys -- the goal is to clearly demonstrate how easy this is, even when the images are awful -- and to make people more cognizant of the data they leave in plain view of others when in public.


How do I submit an answer?
In the future, there will be an automated way to do this. For now, message KOTWBot the bitting and the week, like this:

See THIS THREAD for up-to-date info on submitting bitting.



This is a manual process so bear with me on this. I will let you know if you got it, and I'll make sure I get your name and points documented so that I can work it into the future automated system.

BITTING DIRECTION IS FROM BOW TO TIP: The first number in the series should be the one closest to the bow -- or the part you attach your keys. End with the number at the tip. Even if this is different than the manufacturers typical bitting order. Reverse submissions are wrong submissions.


Leaderboard, Points, and Tries:
For each week, each member gets three (3) tries at a key before subsequent guesses will not be considered. This is to keep folks from just scripting out a for-loop of attempts.
The leaderboard will contain information on the folks who nail this out of the park -- the person with the most firsts, the people who decoded the key first, and the points winners.

The points system is a variable system. I'm awful at building out these things, so I will store all the data I need to recalculate them later (if tries count, and so on).

For keys solved within the first week:
First Person to Solve: 10 points
Second: 8
Third: 6
All Others: 2

For keys solved after the first week: (Key is regarded as harder if nobody figures it out)
First person to solve: 20 points
All others: 4

Print this item

  Honor Code
Posted by: SaltyHashes - 05-27-2019, 04:49 AM - Forum: Information - No Replies

Key of the Week is designed to be a fun place to learn about physical security, lock picking, and especially -- decoding key bitting from images. Everybody from every skill level is welcome here.

To keep this fun, all members should abide by the honor code.

Discovering bitting codes will be very easy in some weeks, and very difficult in others. Simply sending other members the bitting code or posting them on a different site takes away from the goal of the site. We want everybody to have a fun challenge, and realize that this is a tempting way to mark off a key or two. There's no way to enforce this, so we ask that you do it on an honor system. If we find that you are completing challenges by cheating, you may lose your points or your account.

We don't want to moderate this place. Again: It's about fun.

Print this item