Howard Payne & Deviant Ollam - This Key is Your Key, This Key is My Key
DeviantOllam3 HN recommenders · 2017–2021
450K views · talk · evergreen · Uploaded 2016-07-29
A HOPE conference talk by Howard Payne and Deviant Ollam on common keys, such as elevator and fire service keys, that open many buildings. It covers physical security weaknesses from shared key standards.
Brought up in threads on elevators and locks as an engaging talk on common keys.
1:01:20Indistinguishable From Magic: Manufacturing Modern Computer Chips
Andor Gafotas
51:32Behind the Scenes of iOS Security
Black Hat
56:09Project Code Rush - The Beginnings of Netscape / Mozilla Documentary
The Documentary Network
12:01Why Electronic Voting Is Still A Bad Idea
Tom Scott
51:22USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
42:50Defcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
1:46:51"Money doesn't interest me" - Ton Roosendaal 2017 Interview
Blender Guru
59:2328c3: The Science of Insecurity
28c3
4 comments from Hacker News
I realise the thread is phone phreaking related and that was kind of the point of your post; but in the spirit of the talk below to think more outside the box... There's a pretty good chance in many cases you can just open the external box with some easy to get (and relatively standard) key. And hit a button. Related: [LINK] This is a good related talk - goes outside the box on all the ways you can often get into commercial buildings without picking (or even in many cases, interacting with) the lock "The Search for the Perfect Door" by Deviant Ollam [LINK] Also good: [VIDEO] [Howard Payne & Deviant Ollam - This Key is Your Key, This Key is My Key] [LINK] [DEF CON 22 - Deviant Ollam & Howard Payne - Elevator Hacking - From the Pit to the Penthouse]
I've watched it twice before. I also recommend "This key is your key, this key is my key" [VIDEO] Deviant is a pentester focused on physical sec. Not just elevators.
The moral equivalent of "admin,password" happens all the time with physical locks. With physical goods, the key is often sold with a default bitting. (Which is the data embodied in the key equivalent to the password.) That's because just ordering the default is often cheaper, and the contractor will often just opt for the cheapest option. It wouldn't surprise me if this also happened with combination locks. [VIDEO]
Relevant video discussing fire keys and other common keys: [VIDEO] And since this thread is about elevators, I have to also mention another video of theirs: [LINK]