The Study of Physical Hacks at DefCon

eldavojohn writes "DefCon usually focuses on electronic security, but Saturday a talk was held that focused on possibly the oldest form of hacking — lockpicking. As software security becomes better and better, the focus may be shifting towards simple hacking tips like looking over someone's shoulder for their password, faking employment or just picking the locks to gain access to the building where machines are left on overnight. From the article: 'Medeco deadbolt locks relied on worldwide at embassies, banks and other tempting targets for thieves, spies or terrorists can be opened in seconds with a strip of metal and a thin screw driver, Marc Tobias of Security.org demonstrated for AFP ... Tobias says he refuses to publish details of 'defeating' the locks because they are used in places ranging from homes, banks and jewelers to the White House and the Pentagon. He asked AFP not to disclose how it is done.' I'm sure all Slashdot readers are savvy enough to use firewall(s) but do you know and trust what locks 'physically' protect your data from hacks like these?"

Protection

[SaidinUnleashed]

>>do you know and trust what locks 'physically' protect your data from hacks like these?"

I know I weld my doors shut nightly. You should too!

Locks are pretty much useless

[Anonymous Coward]

Because doors are riddled with 0-day exploits in the frames and hinges. With even a small vehicle, you can exploit a stack-overflow in the frame, popping the entire door out. DOS attacks against hinge pins can also be used to completely bypass a lock.

Re:Protection

[KingJ]

I know I weld my doors shut nightly. You should too!

I tried that with my wooden doors, didn't work out too well...

Re:"Hacking"

[Anonymous Coward]

Language, how it doth change! How I mifs the language of yore, and fmite the technological neologifms brought.. ironically.. by the self-proclaimed "hackers" who then complain that the word they used to describe themselves has evolved in meaning.

Re:"Hacking"

[multisync]

I'm reminded of Ralph Macchio asking Mr. Miyagi what kind of belt he had in the Karate Kid. Mr. Miyagi's answer:

"Canvas. JC Penny. Three ninety-eight. You like?"

Yeah but just try a remote DDOS with zombies

[davidwr]

Yeah you can get an army of zombies [dubbdesign.com] to help you pick the lock, but you have to get the in close proximity to the lock and make sure they don't trip over each other.

Besides, most zombies don't have the physical dexterity necessary for good lock-picking. In large groups they are good at tearing the door off its hinges or ramming through it though.

Re:Protection

[mcpkaaos]

Using doors for physical security is so 90s. I keep my servers suspended over an open pit of RIAA lawyers.

If its anything like hacking..

[g0dsp33d]

There's probably a door around back that is standing open.

Re:Protection

[maeka]

How do you resist the temptation to let the servers drop?

Comment removed

[account_deleted]

Comment removed based on user account deletion

Re:Backstop that lock...

[Anonymous Coward]

>we've emaciated homeowners and law-abiding citizens by making it difficult to use deadly force.

Why? Were they eating the corpses?

Re:Protection

[CodeBuster]

Do they have friggen laser beams attached to their briefcases?

Re:Backstop that lock...

[Anonymous Coward]

100% of unarmed people are unable to repel boarders with arms

Make that 99.9%, you forgot Chuck Norris.

Re:Backstop that lock...

[dwarfsoft]

Not forgetting those that just want to steal your sign...

Re:Backstop that lock...

[Anonymous Coward]

100% of unarmed people are unable to repel boarders with arms

Make that 99.9%, you forgot Jack Bauer.

Re:Backstop that lock...

[TheLink]

I'm a slashdotter you insensitive clod. Of course I'd be in the house. In the basement too, stuffing my face with pizza, emailing old korean people "In Soviet Russia" jokes while watching Natalie Portman movies.

It's not like I'd have other things to do ;).

Actually, might be better to get comprehensive insurance, and put nonreplaceable valuables in a good safe (backups, passports, certs etc) - mark it "No cash in here - documents only".

Re:Backstop that lock...

[Filip22012005]

That's only illegal near spawn points.

Re:Backstop that lock...

[stevemm81]

Chuck Norris is 1/10 of one percent of the population

Medeco deadbolt locks - that's easy!

[Muad'Dave]

"Medeco deadbolt locks ... can be opened in seconds with a strip of metal and a thin screw driver..."

The thin strip of metal is called a "key" - you insert it into the "lock", and turn it. I'm not sure of the screwdriver's purpose. Perhaps you use it to scratch your head, wondering why you brought it along.