31 Comments
- Wolf451man, on 10/12/2007, -0/+16Lots of articles recently on bumping. But this one did a very good job of explaining the physics and mechanics behind this method of lock picking.
- cmiller1, on 10/12/2007, -2/+10See EvilTesdall, people digg you down even when you're not bashing Apple too. See the reason you get dugg down has very little to do with the "fanbois" just hating on you, it has a lot more to do with the fact that you're a ***** moron.
- rotten777, on 10/12/2007, -0/+7that's not the point of this article. they're showing that the majority of people rely on a flawed locking technology to keep people out of their homes/property. they have no idea how easy the technology is to get around.
by your logic, i could line up a crane outside and use a demolition ball to get into your house. but that's not what we're talking about here is it? - superpixel, on 10/12/2007, -0/+5kinda makes that whole FEMA trailer key manufacturer debate moot, don't it?
- merreborn, on 10/12/2007, -0/+4Er, on the contrary... Until this has been dealt with, isn't it best that we do everything we can to get the word out?
- phoenixsrebirth, on 10/12/2007, -1/+4Best article in describing the threat and ease of bumping. Very well laid out and wow kinda scary what we think is secure and what actually is.
- Caddy, on 10/12/2007, -0/+2The only way to prevent this is with medeco locks. they are resistant to this as well. they are a far superior lock. I am a locksmith and this is what we recommend to customers when they are looking for something to prevent bumping and want actual security on there house.
http://rbsecurity.medeco.net - RevEng, on 10/12/2007, -0/+2When picking any kind of lock, you need to keep some rotational tension on the plug to keep the pins from falling down. It may not look like she's turning it, but she is applying pressure; just not enough to actually turn it. Otherwise the pins would just fall back down.
- headzoo, on 10/12/2007, -0/+2Okay, maybe someone can explain to me how this works. The article makes it sound like, when you whack the key, the pins are thrown upwards, leaving a gap at the shear line for a brief moment. If you time it just right, you can turn the key while that gap is there.
But in the video, the girl whacks the key, stops, and then turns the key. No timing needed. As if whacking the key broke the lock, and it was free to turn. - sycorob24, on 10/12/2007, -0/+2Probably not suprising, but the medeco.net site doesn't talk about bumping (although they do mention a frighteningly large number of ways to break locks open). Ice pick? Really?
Is there any confirmation that locks, even ones with UL437 certification, are resistant to key bumping? - merreborn, on 10/12/2007, -0/+2The article was great for explaining the theory, but I didn't *totally* understand the technique til I watched this video.
http://www.youtube.com/watch?v=7Uv45y6vkcQ&search=bump%20key
Specifically, the example they give, comparing the pins in the tumbler to newton's cradle, is when I really had the "ah-hah" moment -- The pins at the top are the ones that moves, while the ones in the middle stay stationary.
It also has several closeups of a couple experts executing the technique. They all keep a finger on the key so they can twist it at the right time.
I, too, thought it pushed the plug foreward, but that really probably only happens in really cheap locks. You do indeed have to twist for most locks, as you'll see in the video - merreborn, on 10/12/2007, -0/+2That's the conclusion they come to in the article as well. One of the things they mention to look out for is "UL437" certification.
- drapelyk, on 10/12/2007, -0/+1@headzoo apparently I forgot to hit [reply]
that's the way it works, but you apply a little torque to the cylinder before whacking it. When the shear line does gap, the cylinder shifts and catches the falling pins above the shear line, making the lock unlocked. - wvdavis, on 10/12/2007, -0/+1Not really, there they handed you the keys.
- headzoo, on 10/12/2007, -0/+1Er.. never mind, I think I just figured it out. I wasn't sure why having the key move forward mattered, but I guess it's because it pushes the plug forward just a little bit. With that, the top pins can't fall back down.
- Burner, on 10/12/2007, -0/+1http://www.selfdefenseproducts.com/lockpick.htm this site is great for this kind of shady stuff!
- talledega500, on 10/12/2007, -0/+1All security is obfuscation
- Burner, on 10/12/2007, -0/+1Not to burst anyone's bubble, but why does it matter whether there is any evidence of a break in. The fact that your stuff has been stolen remains the same with or without the broken door jam/window.
- headzoo, on 10/12/2007, -0/+1Ah.. that's more clear, because you can plainly see they are putting pressure on the key as they tap it. In the video of the 11 year old girl, the angle of the camera hides the fact that she's also putting a little pressure on the key.
- sycorob24, on 10/12/2007, -0/+1I'm going to have the 1 townhome with a retinal scanner installed on the front door...
- Burner, on 10/12/2007, -0/+1Bumping seems to me like cheating when it comes to lock picking. Just try and pick a lock with a standard tension wrench and a diamond shaped pick, it's really a lot of fun once you get the hang of it.
- RavenLemo, on 10/12/2007, -0/+1ouch, I don't get it... why you guys are mean with him?
I really liked what he said. It makes me think about what stops me from stealing from people or hack computers. Unfortunately, if I had the right tools and knowledge, I think nothing would, not even ethics. - rocketryguy, on 10/12/2007, -0/+1When I saw the technique demonstrated, the bumper would thwack the bump key slightly sideways, so it twisted a little at the time of impact, locking the pins out(NPI). The guy had some practice, but it was just stupid easy even without keeping pressure on (which he didn't).
After thinking about it for a while, I can see where this would actually be really valuable for me as access issues often come up in my job, where some idiot has changed a lock when they shouldn't have, and costs my employer lots of money as until I get in there to fix the damn network, nobody can do their jobs. I'm bonded and authorized for full access anyway, so I might quietly build a key library and thumper... - rasterbator, on 10/12/2007, -3/+3It's kind of like the Windows operating system. You think running the firewall, spyware and anti-virus software is protecting you, but it is really not. And if for some reason you are dumb enough to argue the point, listing to the Security Now podcast and you will staart locking down everything but the kitchen sink.
- beachdude, on 10/11/2007, -0/+0Public service site about lock bumping and how to protect yourself against it!
http://LockBumping.org - Chucklz, on 10/12/2007, -0/+0I do have anecdotal evidence that some Medeco's are bumpable. Just requires a key with the appropriate angles cut.
- achnet, on 10/12/2007, -0/+0@Burner
There is a main reason why evidence matters. This reason is for insurance reasons. If you're a small privately owned company and someone breaks in, if you want your insurance to cover a minimum, you need to show damage or evidence. If there is no evidence of a break-in, they will think you are lying and give you nothing. - headzoo, on 10/12/2007, -1/+1Hehe.. thanks. :)
- encognito, on 10/12/2007, -0/+0The future...
http://www.thinkgeek.com/gadgets/electronic/77af/ - EvilTesdall, on 10/12/2007, -9/+5wish people understood, locks..password, and anything of the likes is not SECURE its a deturent for keeping truthful people truthful. If you want in some where bad enough, there are ways of doing it.
- dbug, on 10/12/2007, -10/+3Alright, I get it. There is a technique called bumping to open locks. OK!
No need for yet another frontpage story about the same thing.


What is Digg?
Check out the new & improved