High Security Handcuffs Opened With 3D-Printed and Laser-Cut Keys 202
Sparrowvsrevolution writes "In a workshop Friday at the Hackers On Planet Earth conference in New York, a German hacker and security consultant who goes by the name 'Ray' showed that he could open high-security handcuffs from manufacturers Chubb and Bonowi with plastic copies of keys that he cheaply produced with a laser-cutter and a 3D printer. Both companies attempt to control the distribution of their keys to keep them exclusively in the hands of authorized buyers such as law enforcement. Lasercut plexiglass versions of the Chubb key, which opens handcuffs like the ones used in passenger airline restraints, were selling for $4 at the conference. Ray plans to post the CAD file for the key on the 3D printing site Thingiverse after LockCon later this week."
Mcgyver (Score:5, Funny)
Mcgyver used a bar of soap and a file to copy keys. Color me unimpressed.
Re: (Score:3, Informative)
MacGyver (http://www.imdb.com/title/tt0088559/). Not offensive to some, but the difference between a Mc and a Mac is like calling a Suni a Shiite to others.
Re:Mcgyver (Score:5, Funny)
Re: (Score:2)
I'll take The Macallan (Score:3)
Forget MacGruber, the only Mac that had any interest to me is The Macallan.
Re: (Score:2)
Re: (Score:3)
Re: (Score:3)
They will forgive you if you hand them a bottle of fine single malt Irish whiskey though.
I'm taking the Irish or Scotts... I'm certain the middle eastern fellows will cut off your head for offering them booze.
Re: (Score:3)
So an order of Irish Car Bombs for all? /I wish I could accurately describe the faces in that bar when I saw some obviously ignorant college students on vacation order that drink combo.
Re: (Score:3)
Re: (Score:3)
I've successfully copied a few keys (different types but common) using a Xerox copy of the key, some tape, cardboard, an exacto knife, and a key copying machine - simply tape xerox of key to cardboard, cut out carefully with exacto knife, run result thru key duplicator..
Re:Mcgyver (Score:4, Interesting)
Really? I've tried using an actual key and a key duplicator and it still doesn't work half the time. Tolerances are really tight on good locks.
Re:Mcgyver (Score:5, Interesting)
Since most locks use standard tubler sizes, the key code (tubler measurements) can be determined from a photograph of the keys and then cut from the keycode
Re: (Score:3)
Copy me up a key for the cable ties that it seems like 9 outa 10 cops use now, at the arrest.
A cuff key doesn't do much good when I have door locks to get through too, later at the station.
Who says geeks don't like drinking and fighting?
Re:Mcgyver (Score:4, Funny)
The real hard part is doing any of that with a broom handle sticking out of your ass.
Re:Mcgyver (Score:5, Funny)
What if the laser was on a shark?
Re:Mcgyver (Score:5, Funny)
Mcgyver used a bar of soap and a file to copy keys. Color me unimpressed.
Ok, you're colored. But what's this? Suddenly you're pulled over and in need of a handcuff key.
Re: (Score:2)
Re: (Score:2)
Most epic post on slashdot in a long time. If you weren't already at +5 I'd mod you up.
"cheaply produced" (Score:2)
Re:"cheaply produced" (Score:5, Insightful)
Well, $4 is cheap enough.
Re:"cheaply produced" (Score:4, Informative)
If you actually read the article, you'll find that he produced keys with a laser cutter and separately with a 3D printer. You don't need both.
Re: (Score:2)
Re: (Score:2)
see (Score:4, Funny)
See, that's why they should simply use magical warding and locking spells. Then anyone trying to escape would have to get a really lucky die roll to overcome the caster level of the original lock spell.
Re:see (Score:5, Funny)
Ah, but what if i'm carrying plastic keys AND a loaded D20? What will you do then?
Re: (Score:2)
Re: (Score:2)
If I see you carrying around a loaded D20 [wikipedia.org], I'm going to assume that I'm either dreaming or high.
Re: (Score:2)
I put on my robe and my wizard hat [albinoblacksheep.com]
identical? (Score:2)
Re: (Score:3)
It's pretty standard to have identical cuff keys... the guard opening them after you go into the cell is unlikely to be the arresting officer that put them on you.
I guess the issue here is they at least need something like a magnetic component to be somewhat secure, but I imagine there's actually very little you can do to make a lock that's immune to being defeated if you have infinite prep time.
Re: (Score:3)
Re: (Score:2)
http://www.patriotsurplus.com/r30093.html?productid=r30093&channelid=FROOG&utm_source=CSEs&utm_medium=GoogleProducts&utm_campaign=PatriotSurplus&gclid=CIKix8ayoLECFQFx4AodsUWQWw [patriotsurplus.com]
Re:identical? (Score:4, Interesting)
Did you read the article? All handcuff keys for a certain brand are identical. That is to allow one officer to handcuff a suspect and any other officer to remove the cuffs. The issue is that the arresting officer may not be anywhere around when the suspect needs to be uncuffed as the suspect may have been passed on for transport. This is the way handcuff keys work. Manufacturers are now trying to restrict the possession of keys by being selective to whom they sell. The printer/laser cutter method of making keys now makes this effort useless.
Re: (Score:3)
Seemed like a dumb strategy anyway - a combination of artificial scarcity and security-by-obscurity. It isn't like the keys look particularly complex. In the 'olden days' somebody could have just created a mold and cast them or machined a copy. The laser cutter / 3D printer is just the modern twist.
A pair of bolt cutters also works in a pinch.
Re:identical? (Score:5, Interesting)
No matter how complex the key bolt cutters usually work but it is rather difficult to conceal a set of bolt cutters big enough to do the job on one's person and bolt cutters that large are not all that common. Hand cuff components are made of hardened steel and a small set will not work.
Hand cuffs are and never have been completely secure. They are more secure than the cuffs that have been around for years as those keys are very common now but they are less secure than hoped.
There used to be one key that would open every handcuff in current use. Now there are at least three different ones. Even this makes things more secure as the suspect has to have at least three keys to ensure escape. Three keys are much more difficult to conceal than one. Officers can easily carry three keys on their key ring. It is not about making escape impossible; just more difficult.
Re: (Score:2)
Nonsense. Bolt cutters are just large because they use a simple lever to generate the force needed to cut through hardened steel. You could replace them with a small box with a hand crank and multiplier worm gear attached
Re: (Score:2)
A saw as you suggest would be a few cubic inches in volume and would easily be found in a pat down. Have you heard of anyone cutting handcuffs with such a device? Perhaps it is because concealing such a device would be impossible. Even though it is smaller than 18" bolt cutters it is still much larger than a key.
Re: (Score:2)
a hand crank and multiplier worm gear
The teeth of the worm gear would need to be quite big to avoid breaking off by the force needed. Which implies the whole thing would need to be big. Too big to conceal.
Also they aren't meant to be super-secure (Score:5, Interesting)
Handcuffs are just a quick and easy way of ensuring someone can't cause too much trouble. When your hands are held behind your back, you can't make much mischief in general. They aren't intended to be something to hold someone securely for long periods. Just to temporarily restrain someone for transport.
As such it isn't like the keying system has to be top notch. It is far more important that they are easy to unlock than that they are ultra-secure.
For that matter at times the police will just use what are more or less large zip-ties. Plastic flexi-cuffs are easy and cheap to use in a riot situation. They aren't very secure, they can be easily cut off and indeed that is what the police themselves do, but you can cheaply have a bunch of them if needed.
Re: (Score:2)
are all of their keys identical?
Considering the article is about cracking high security handcuffs the easiest way of getting out them is some C4 or just a plain sharp knife assuming you don't really care about the person you are trying to get out of the handcuffs :)
:)
Actually the sharp knife is the cheapest method but the cost of hand reattachment surgery won't be cheap unless you are one of those people who have an eye-patch have a long haired white cat
Re: (Score:2)
Why does my eye patch have a cat? I know cats own you, but my possessions? Mwahahaha
Re:identical? (Score:5, Informative)
It has nothing to do with mass production. The reason is so that any officer can open any other officer's cuffs and time is lot lost trying to find the arresting officer and sorting out who owns which cuffs..
Re:identical? (Score:4, Insightful)
Re: (Score:3)
Re: (Score:2)
Hopefully nobody ever loses that globally unique key to your handcuffs...
Or they could just use zip ties, which cost less, weigh less, go on easier and don't need keys at all.
=Smidge=
Re: (Score:2)
Re: (Score:2)
For starters, kicking out "strawman" as a rebuttal when it clearly is nothing of the sort just makes you look like a dunce. "Globally" does not need to apply to the entire planet... but even if you drop the world "globally" my point still stands: If there is only one key in the whole {world | country | department} to unlock your handcuffs, you are in trouble if they go missing.
If you have a master key, then your entire point is moot because someone could just copy the master key. You're right back at square
Re: (Score:3)
Zip ties cost less the first 30 times they are used but after that they cost more. A set of handcuffs can last years. Say someone arrests 100 people a year and cuffs last 10 years. If one used zip ties it would cost around 10*100*2= $2000 or $60 for a set of steel cuffs.
The other issue is the zip ties can be cut on any sharp edge or broken by a strong and/or drugged up person.
Re:identical? (Score:5, Informative)
...It's not like these things are impossible to get out of if you know what you are doing...
That would be the rub. They are quite hard to defeat compared to normal cuffs. Having an interest in the lockpicking community I can say hardly the top 5% of them could get out of these with improvised tools. Making a tool out of scrap bits of plastic makes them easy for anyone to get out of.
Anything a laser-cutter or 3D printer can do so can a human, especially locksmiths with an eye for detail. The skills are not dissimilar to watchmakers before precision machine tools. These new methods makes anyone of no skill and no talent be able to do what only highly trained, highly practiced people can do. That is a security threat.
Re:identical? (Score:5, Informative)
There have been commercially available disguised handcuff keys for a long time.
This one isn't terrible, but not the best I have seen either.
http://theawesomer.com/bracelet-with-handcuff-key/144904/ [theawesomer.com]
Note: The people most likely to want to get away after being apprehended are both guilty AND repeat offenders. The second factor being a group that might have the foresight to wear such a thing.
Re:identical? (Score:4, Insightful)
Note: The people most likely to want to get away after being apprehended are both guilty AND repeat offenders. The second factor being a group that might have the foresight to wear such a thing.
Wrong. I want to get away after being apprehended illegally.
You know--if the police decide to kidnap and beat me [t.co]....or just beat the shit out of me while other offices stand by and watch^H^H^H^Hfigure out their cover stories [bit.ly]....Maybe they'll just handcuff you and take you back to their torture chair [blogspot.se] to let you die...or your baby [bit.ly].
Maybe you should do nothing. You'll get your day in court, right? I mean--this is the United States of America where we have due process and a fair trial. The government would never fuck with that [policemisconduct.net] perfect system.
Resist. Always resist [blogspot.se].
Re: (Score:2)
And thanks to NDAA, they don't have to do any of that anymore.
Re: (Score:3, Insightful)
WTF is wrong with normal URLs people?!
If you want me to follow a link then post the orignal link.
Re: (Score:2)
Your first reference about being kidnapped is complete allegation where nothing has been proven, the officers have not been charged or gone to court. Perhaps it was fabricated to throw suspicion on the officers?
Your second reference to "beat the shit out of" which at most was slapped in the face four times with an open hand. No medical attention was given or required. Try reading the whole article.
Your third reference to a "torture chair" is about a restrain device used to control suspects who do not follow
Re: (Score:2)
: The people most likely to want to get away after being apprehended are both guilty AND repeat offenders.
Guilty of peaceable assembly and repeated dissent. There's nothing wrong with unarresting the wrongfully arrested.
Remember, the police aren't here to protect you. They're here to protect the ultra rich from you. Anything that tips the power balance away from the cops, also tips the balance away from the oligarchy. This is a good thing.
Re:identical? (Score:4, Interesting)
A few years ago someone arrested in Tampa had a key in their back pocket, not found during the frisk, and managed to get loose and killed 3 cops. Not saying its common, but your impossible situation has happend in the recent past with the worst possible outcome. The criminal always carried the key with him anticipating trouble with police.
http://tampabayonline.net/reports/shooting/carrday2.htm
LockCon? (Score:3, Interesting)
The fact that he managed to make a key for these doesn't surprise me at all.
The fact that there is a LockCon on the other hand.....
Endless Cycle (Score:5, Funny)
Now lets say this type of key creation is outlawed. .
Create handcuff keys
Be put in handcuffs
Use Key. Escape
It will be like bribing Law enforcement with counterfeit cash
How much does it actually matter? (Score:3)
The thing about having one's hands in cuffs is that it is pretty difficult to unlock the handcuffs even you if had and could reach the key. Presumably, the first result is wide spread key availability is that your pockets are searched at the time the cuffs go on.
For the laser cut keys to really work, you need an accomplice and to be essentially unguarded.
Re:How much does it actually matter? (Score:5, Interesting)
it is pretty difficult to unlock the handcuffs even you if had and could reach the key
Difficult is not impossible and with enough practice difficult becomes easy.
Keys can be in the mouth, swallowed, in a seam, in a concealed compartment in a belt loop, etc. There are many places to carry a key that will get by most searches. There was one instance where a man has a pouch surgically installed in his cheek just big enough to hold a handcuff key. Many "escape artists" conceal keys on their person for their acts and these keys are not found by the spectators, sometimes police officers, who search them.
So no, an accomplice is not necessary.
Re: (Score:2)
If you use rigid cuffs, with hands behind the back, and palms facing away from each other,
escaping from handcuffs requires either a contortionist or someone willing/able to dislocate joints.
Rigid cuffs make life a lot harder for anyone trying to get out of cuffs.
Re: (Score:2)
Or a partner in crime.
Re: (Score:2)
If you use rigid cuffs, with hands behind the back, and palms facing away from each other,escaping from handcuffs requires either a contortionist or someone willing/able to dislocate joints.
I have a rotator cuff injury and pinched nerves in my right arm. My hands will not come together back to back behind me. In fact I would loose blood supply to my arm in that position. Any officer who tried that would be guilty of abuse. How would the officer tell if I am lying or telling the truth? He would have to take my word for it. Then there are people so big that the above configuration can not be used. Rigid cuffs are a simple solution that does not always work considering how complex the issue is.
Re: (Score:2)
remember Sklyarov? (Score:2)
indefinite detention in 3...2...
more cops are better then high tech locks (Score:2)
more cops are better then high tech locks any ways with high tech locks you just go after the weak points.
Clever but stupid? (Score:2)
Who holds the design and patent rights to the keys? I am betting that they are legally protected in some way.
There is only one set of legitimate buyers for these handcuffs.
Which means that being caught with one of these copycat keys in your possession is going to be hell of a thing to explain to an unsympathetic and skeptical cop,
Re: (Score:2)
An unsympathetic and skeptical cop who has no legal basis for asking for an explanation.
It isn't illegal to be in possession of a key.
Re: (Score:2)
Re: (Score:2)
"Not at all, it'd just be illegal to use it to attempt escape from a lawful arrest."
Perhaps we'll get lucky and they'll sue Thingieverse for copyright violation after the design is posted.
It has to happen sooner or later.
Re: (Score:2)
It isn't illegal to be in possession of a key.
Yet.
Re: (Score:3)
Buy your own set of police handcuffs without a key, and then get a key. With millions of pairs in use it shouldn't be too difficult. Then you have a perfect reason to own a key. If the judge asks why do you need handcuffs you can always claim curiosity about BDSM.
Re: (Score:2)
I have a set of real cuffs in my car locked to my steering wheel. A key in my glovebox and a key on my keyring. Not sure why, other then I can. It makes for interesting conversation.
Re: (Score:2)
Re:Clever but stupid? (Score:4, Informative)
Who holds the design and patent rights to the keys?
Design and patent rights are a civil matter and not a criminal matter. Until there is a law passed that criminalizes the possession of handcuff keys there is nothing the police can do.
There is only one set of legitimate buyers for these handcuffs.
There are actually at least five sets and possibly more; police, prison guards, court house guards , private security and bounty hunters. Basically anyone who has a legitimate reason for detaining someone else.
Airline security? (Score:3)
Interesting the article mentions how those plastic keys are easy to take through airport security. As if it's easier than metal keys. I've routinely taken a keyring with about a dozen keys on planes, could contain any key, never did they really inspect which keys (it just had to go through the scanner). I'm sure just adding a metal handcuff key to that bunch would let me through just as easily. Maybe even easier than with a plastic key, as metal keys are more common.
Re:Airline security? (Score:5, Interesting)
I can confirm this. I've had a common police handcuff key on my keyring for years* and I've never had it singled out at any security checkpoint. The keys go in the briefcase with a bunch of other crap where they might even be difficult to identify as keys.
*Kinky ex girlfriend. I figured I'd better stash a few keys in convenient places in case she wandered off at an inappropriate moment.
Re: (Score:2)
Don't fly to Florida with that key in your pocket
http://law.onecle.com/florida/crimes/843.021.html [onecle.com]
Could be construed as "Unlawful possession of a concealed handcuff key"
A homeless man was picked up with a handcuff key on a necklace and charged under that law.
"including, but not limited to" is pretty broad
Re: (Score:2)
OK, now you've got me curious.
I know of cannilingus, but this is clearly different [urbandictionary.com].
Kinky with handcuffs is known entertainment, yes, but putting people in cans so they need a backup can opener is new to me. Obviously I need to get out more :)
Re: (Score:2)
Re: (Score:2)
Good one. I have no experience with those: how about checks on your regular metal keys? Almost everybody carries a bundle of keys around (home, office, bicycle, car, whatnot), often invisibly packed in a small purse. Will they check whether you carry any metal handcuff keys in between your normal keys? Or, like at the airport, put it through a separate scanner where they only look for weapons and so?
A Handcuff isn't meant to be unbreakable (Score:5, Insightful)
the goal of a handcuff is to restrain a person, namely a person who isn't likely to have a copy of the key handy, nor a 3d printer. And the detained person will not likely be given access to people who have keys or printers either.
It doesn't matter if the keys can be made easily, really, or even if it's the same key used in all the locks. THe basic point is that a handcuffed person would not be able to get themselves out without the tool.
Perhaps a lot is being made because it's a "high tech lock". Well you can take a low tech lock, such as a chain linked to a concrete block, and even though you could easily get out with a set of boltcutters, it's just as impossible to free yourself without access to the tools.
Re:A Handcuff isn't meant to be unbreakable (Score:5, Insightful)
It isn't about having a 3D printer handy after you are cuffed. It is about challenging the idea of physical security through obscurity. Handcuffs rely on a "shared secret" of the physical key, that's why the manufacturers go to great lengths to control distribution of those keys. But 3D printers make it practical to turn that physical key into data, and at that point all of the problems of security through obscurity of information start to apply to a formerly physical security model.
In other words, all it takes is for one person to "scan" a key and upload it to the internet and now it is orders of magnitude more likely that someone will have a copy of the key on their person, perhaps disguised as jewlery or just in stuck in their pockets, that will let themselves unlock their cuffs while sitting in the back of a police car.
Re: (Score:2)
Except how can you make such a release mechanism that can't be defeated by using stationary objects as extra hands - that's the patentable magic.
Mind you, standard hadcuffs that dont use the pivot chain are difficult to get out of, with a key, when they are put on right side up
Posting CAD files for keys may be unwise (Score:2)
Ray plans to post the CAD file for the key on the 3D printing site Thingiverse after LockCon later this week."
If the lock maker is anything like other lock makers, it's likely to result in them sending in the lawyers and somehow contriving DMCA-takedown notices
Re: (Score:2)
Ray plans to post the CAD file for the key on the 3D printing site Thingiverse after LockCon later this week."
If the lock maker is anything like other lock makers, it's likely to result in them sending in the lawyers and somehow contriving DMCA-takedown notices
Yes, but... how DMCA applies in this case? The manufacturer never made the 3D plans available, so there's nothing "copyrightable" to copy.
The current CAD plans were reverse engineered but... not after something digital (thus subject to the copyright laws and DigitalMCA) but using a physical artifact. Can a mass produced artifact - more than that, it is an accessory to something, not the something in itself - be subject to copyright laws?
Re: (Score:2)
Yes, but... how DMCA applies in this case? The manufacturer never made the 3D plans available, so there's nothing "copyrightable" to copy.
They never made plans available to the public, that doesn't mean there are no 3D plans; unpublished works still copyright, possibly even if you can derive the plans by looking at the physical object.
Can a mass produced artifact - more than that, it is an accessory to something, not the something in itself - be subject to copyright laws?
Lock makers usually use paten
Re: (Score:2)
Yes, but... how DMCA applies in this case? The manufacturer never made the 3D plans available, so there's nothing "copyrightable" to copy.
They never made plans available to the public, that doesn't mean there are no 3D plans; unpublished works still copyright, possibly even if you can derive the plans by looking at the physical object.
Seems improbable to obtain copyright for something that you did not publish or did not register a copyrightable work (otherwise, I would be able to claim that I wrote ... whatever ... before the original author). The only question is: would expressing a blue-print in tangible object equates to "publishing the blue-print"?
There seem to be even exceptions to the copyright for "useful articles" [wikipedia.org] - which seem to indicate that the utilitarian/functional aspects of an article are not copyrightable (at least this i
Fortunately my local PD still uses Smith&Wesso (Score:2)
standard cuffs that use the same key you can get anywhere.
Good to keep a copy on your keyring... just in case.
lock pick is cheaper (Score:4, Insightful)
There are plenty of youtube videos teaching how to make your own.
I've yet to find a lock that I couldn't pick with one... that includes every lock in my house and even my car.
It's really not that hard when you get used to it.
Re: (Score:3)
These cuffs are in fact a bit harder to pick the lock from. Especially when cuffed yourself, it would probably take you too long to pick the lock to remain undetected and your pick taken from you.
There are quite a few more modern lock designs that require specialist tools to unlock without a key. Those tools usually cost a multitude of a key and are hard to buy, even from chinese clone sites. One of those locks is the "abloy classic". Another lock that is hard to pick without special tools is the lock syste
Re: (Score:3)
Read about Meadco lock cylinders. They are common and you cannot "pick" them. You also can't "pick" VW/Audi BMW or Mercedes style key cylinders or most automotive keys for that matter... but for most of those things you mention, a rock is cheaper, quicker and more effective.
Re: (Score:2)
This guy will become the poster boy... (Score:2)
Summary is wrong (Score:2)
Ray plans to post the CAD file for the key on the 3D printing site Thingiverse after LockCon later this week.
From Article:
Even so, Ray says he won’t post CAD models of the Bonowi or Clejuso models online, given that those keys are harder to obtain and providing blueprints for their reproduction could in fact reduce their real-world security.
WTF, Sparrowvsrevolution?
Flat keys work? (Score:2)
The surprising thing is that a flat key will work. Laser cutters are 2D devices; they do a great job cutting flat sheets, but you can't make 3D objects with them. The process is fast and cheap, though. Stereolithography takes forever.
I'm surprised that laser-cut acrylic would work. Thin acrylic isn't very strong. Polycarbonate ("Lexan") doesn't cut well with CO2 lasers. Acetyl ("Delrin") is probably the best choice. It's kind of expensive, but a key isn't very big.
Re: (Score:2)
So a key opened handcuffs (Score:2)
A plastic copy of a key is still a key.
This is news how?
"Durrr. Hey look Cleetus this here plastic key works just like a key."
Re: (Score:2)
There aren't master key sets for each car - their are lock cylinder decoders and assemblable/half step key kits and key cutters that cut from key code. You could create these from a small CNC mill.
Take apart a lock cylinder some time and learn what you are talking about before you sound like an idiot.