Check the YouTube channel 'the lockpicking lawyer". He picks locks, both mechanical and electrical. His typical videos don’t take more than 2-3 minute because that’s all he needs to pick a lock multiple times. Electrical locks usually are opened with a paperclip or something similar. Wat too many locks are designed and built by idiots who have no idea about security
I wish that he would try his hand on a lock from Yale. Considering that they are part of Assa Abloy who are very well respected in the lock business. My suspicion is that a company who are mainly makers of mechanical locks at least won’t fall prey for the many of the beginners mistakes lockpicking lawyer points out.
Many of them feature a normal pin-tumbler lock cylinder as a backup in case the electronics fail, and best case scenario it’s going to be as mediocre as any old Kwikset hanging on the peg on the comedy aisle at Lowe’s. So you’re probably still vulnerable to key theft, key duplication, picking, combing, raking, jiggling, etc.
Then there’s the electronics. A surprising number of them rely on either a solenoid to directly operate the latch/bolt, or a relay that energizes a motor to do the same, both of these are vulnerable to attacks by magnets. A stupid number of them are vulnerable to disassembly attacks. There are trace evidence attacks such as looking at the keypad and noticing where all the fingerprints are, there’s just watching you dial the combination…
And the smart phone app driven ones…sure, let’s send a signal that means “I just got home” across the internet. That sounds safe.
It depends on your threat vector. In the academic sense they’re less secure but if you often loan out keys they’re more secure because you don’t have to give someone the key. If you often forget to lock the door they’re more secure because you can do it remotely.
If the door is made of cardboard as most us’s one are u better get the cheapest one it won’t make a difference… look at an European door if u don’t now what I mean…
In my case, definitely more secure. If I’d given my kids a key, my ex was likely to copy it without my knowledge. With a code, I could tell them to go ahead and give him the code if he pressured them, then just change it.
The largest tech companies can’t secure their shit properly.
No these smart locks are terrible. Their physical locks are usually bargain basement trash, their design is usually full of well known flaws and their code is full of well known exploits.
Definitely less secure, but way more convenient. Security for residential door locks doesn’t really matter that much though; thieves are unlikely to try to pick your lock or use some smart-device exploit to access your home - they’ll just smash a window.
Agreed, most of home security is to try and make your neighbours a more tempting target than you. The ethical choice is to do it by making your home a bit more difficult to break into though I guess you could “debuff” the neighbours as well 😉
Let’s be frank, traditional locks exist to keep honest people honest. It’s trivial to learn how to pick locks, there are YouTube channels dedicated to exactly that, and the tools can be purchased for very little upfront cash.
There is no such thing as a foolproof unpickable locks. Any lock that is designed to be opened will have vulnerabilities associated with it that can be exploited by somebody who knows how.
That said, smart locks are probably not much worse off in that regard. I think you can still use a manual key with some models, so that’s not really adding security, but rather convenience. For the ones that are 100% digital, the issue is just shifted to technical knowledge of the lock software and not the mechanical workings.
I’d say they aren’t any more or less secure, just another option that a determined thief can get past, either through skill or brute force if necessary.
I’d say the main purpose of any kind of lock (meaning the weakest link all around your house - strong front door won’t help if the kitchen door to the patio is always unlocked) is to be less appealing to burglars than the next house. At least that is how it works in Germany: Burglars drive around in vans, typically in daylight, sometimes walk around houses, looking for opportunities. If they see a cracked window, or an easy to access balcony door without too much exposure, they’ll give it a go. If that balcony door (I lived in a flat with that setting) has a big iron grating installed in front of it, they’ll move on and look for another place to rob, not because they couldn’t maybe find out that the iron grating is not attached very well, but because it looks like too much effort to even invest the time to find out.
There is at least the possibility to get a good traditional lock that is trusted by organisations that value security and has the interest in getting security solutions that genuinely defeat intrusion.
Anyways, the general idea should be to have a house lock that is better than your neighbors, and that is sufficient for most purposes.
Depends. Any modern lock can easily be picked with something called a comb, which can bypass all the pins by pushing them far up into the lock so it can turn. However, the position on the security of pin pads is debatable. Regardless of which is better, both can easily be bypassed with a drill, so I guess neither.
The reason why people even pick locks to get in homes is because it’s most of the time silent to pick a lock. Do you think someone would just choose to pick the lock instead of breaking the window if noise wasn’t a concern? Though I guess there are silent glass cutters too.
Only cheap locks with a huge design flaw can be picked using a comb. The lock picking lawyer explains in many videos, how this is a very old exploit and easily can be defended against.
However, locks like that sadly still exist. So it is important to choose a reputable manufacturer - be it for classic locks or digital ones. However I will say, that digital locks usually have a classical backup. So that gives an attacker just one mor option to defeat the lock.
I got a lock pick set and was pretty happy learning how to pick all the locks in my house. So I ran out to a hardware store to buy more padlocks and some other stuff. Come in the house and noticed I left the bag of padlocks I bought in my car. Go out to my car and noticed I forgot my keys. Head back and my door is locked. Locked out of my house and car. Through the window I can see my lock picking set on the kitchen table, mocking me.
I have decided to never share this story with my wife.
Still, I take him at his word that he makes it look much much easier than it is. And have bought a couple of locks based on his contentment with the quality and pick resistance.
I haven’t done a breakdown on smartlocks. I do work with machine locks, you know for safeties. We can make them pretty freaken hard to bypass, but I can.
What I have already works. I added a few security pins and my door will likely be broken before someone picks it. Insurance company will understand if I someone broke something to get in, which is why I’m not entirely made at kwikset.
Why add more points of potential failure? I’m more concerned someone can get in without me knowing they had.
If you need electricity to operate your locks, a power failure is the difference between you sleeping on your front porch, or burglars having a key to your house.
No house lock goes from locked to unlocked if you cut power to the house. What the hell are you talking about? They’re battery powered and nearly every single one of them still uses a key from the outside as a manual override.
They have a regular backup cylinder that has all the vulnerabilities of a regular lock.
On top of that they have a bunch of electronics that can be vulnerable.
I can’t see how it would be possible for them to be more secure unless you’re someone who leaves their keys around a lot and a smart lock would let you not have a key on you.
They don’t have to have a backup cylinder. The most common kind (Yale doorman) where I live doesn’t have one. If the Internal battery goes out you can plug in a 9V battery from the outside to power it.
Add comment