Picking Locks with Audio Technology

I hate the way journalists try to make things sound scarier by throwing in 3D printing, as if a new world of criminal technology is upon us. Surely 3D printing is the very worst, and slowest, way to make a key. Nobody has been waiting for 3D printing to enhance their breaking-and-entering game.

Last week some comment linked to a LockPickingLawyer YouTube video and I’ve been binge watching since. Odds are, it is faster just to pick your lock for anyone who knows enough about the type of lock to know the right blank to cut. And access to set up a microphone means access to set up a camera and work from a picture of your key. But with that kind of access, traditional impressioning is probably practical.<p>Anyway <a href="https:&#x2F;&#x2F;m.youtube.com&#x2F;channel&#x2F;UCm9K6rby98W8JigLoZOh6FQ&#x2F;videos" rel="nofollow">https:&#x2F;&#x2F;m.youtube.com&#x2F;channel&#x2F;UCm9K6rby98W8JigLoZOh6FQ&#x2F;video...</a>

That&#x27;s an interesting attack. However, it looks like they used it on rather simple lock. These locks could be picked quickly by a moderately experienced picker, and with the right tool, decoded.<p>But most high security locks have some kind of trick: sliders, rotating pins, pin in pins, or simply a rediculous amount of pins. It would be interesting to know how exciting security features in locks could prevent that attack. For example, if two pins are lifted at the same time, how to tell which is which by sound?

Given some isolation from prying eyes, a good non-technical method of making a key is to use a blank and grind it by hand. By binding the cylinder and wiggling the key, it leaves marks for each pin that is bound up; grind a little and repeat. Obviously not going to work for certain lock styles with security pins, or Medeco locks (but nor will audio work either, unless you can somehow hear a pin rotating a specific direction)

The talk on this is here: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=bxyAa_txM34" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=bxyAa_txM34</a>

I’m not sure what the threat model that this brings is. It’s certainly very cool research, but nothing particularly scary to even the highest security facilities... I can’t really imagine a situation where you can install an audio bug where you can’t also install a video bug to grab a picture of the key...

Acoustic side-channel attacks on mechanical locks, I guess it&#x27;s possibly more effective than an acoustic side-channel attack on an electronic lock running inside a computer. Side-channel, side-channel everywhere.

If your home is broken into, but there is no smashed window, most home insurance policies won&#x27;t pay out.<p>This sort of research will hopefully allow more homeowners to get payouts they are entitled to.

&gt; <i>work out how to surreptitiously acquire the audio from a key insertion</i><p>Another way: hang a flyer or bag on their door knob. Include a free pen that has a hidden microphone&#x2F;transmitter in it. People stick things on doors all the time for marketing purposes, so probably not too suspicious.

Interesting. I wonder if a laser&#x2F;receiver pointed on the door would give a good enough vibration noise&#x2F;signal ratio to get the required detail level audio to print a key?

This is ingenious!

Or make clicking noises when you insert your key?