7 ms·

A combination "20 - 40 - 60" on a dial that goes from 1 to 60... Sounds like an equivalent of a factory-default admin/admin login credentials. I wonder if it re

by pferde 7y ago

A combination "20 - 40 - 60" on a dial that goes from 1 to 60... Sounds like an equivalent of a factory-default admin/admin login credentials. I wonder if it really was the default combination that the safe was bought with, and the owners never bothered to change it. :)

chrisseaton 7y ago
> A combination "20 - 40 - 60" on a dial that goes from 1 to 60... Sounds like an equivalent of a factory-default admin/admin login credentials. The article explains that it was a common combination for people to use on this type of safe - "Typical combination lock, three times clockwise - 20 - two times counterclockwise - 40 - once clockwise - 60, tried the handle and it went".
- taneq 7y ago
  "admin", ""? Nope. "admin", "admin"? Nope. "admin", "passwd"? Yep!
  - larkeith 7y ago
    For maximum security, use username "password" with password "admin".
    - taneq 7y ago
      "I pulled a sneaky on ya"
- jrochkind1 7y ago
  So that's a quote from the museum visitor who opened it. I don't think he knew "common combinations on this type of safe". I think he was saying what was typical was the mechanism, three times clockwise [some number], two times counter-clockwise [some number], etc. Not the numbers. We of course wouldn't have heard about it if it wasn't succesful. The real odds are "how many safes are there like this that people are trying all over the world, and what's the chance that someone at ONE of them would succeed." :)
jmkd 7y ago
Ha yes, or equivalent to 'password'. Raises the point that humans interacting with machines will always display similar behaviours.
- salutonmundo 7y ago
  Puts me in mind of Surely You're Joking Mr Feynman...
  - m463 7y ago
    I found that chapter really fun and I should try that... But then I think -- he was cracking safes in a military top-secret nuclear research facility!
jperry 7y ago
>The museum had previously enlisted the help of experts to crack the code, tried default combinations, and had contacted former hotel employees to see if they could help. It doesn't sound like it was the default, just a "password1" situation.
- pferde 7y ago
  Ah, I missed that bit, thanks!
- darkpuma 7y ago
  Or maybe they just hired shitty locksmiths. Shitty locksmiths are often easier to find than real locksmiths.
Animats 7y ago
Definitely sounds like a default. When you turn in a container with a classic combination lock in the DoD world, you set the combination to 10-20-30-40. The next person issued the container opens it and sets it to a new combination.
stcredzero 7y ago
The moral equivalent of "admin,password" happens all the time with physical locks. With physical goods, the key is often sold with a default bitting. (Which is the data embodied in the key equivalent to the password.) That's because just ordering the default is often cheaper, and the contractor will often just opt for the cheapest option. It wouldn't surprise me if this also happened with combination locks. https://www.youtube.com/watch?v=a9b9IYqsb_U https://www.youtube.com/watch?v=a9b9IYqsb_U

by pferde 7y ago

chrisseaton 7y ago

> A combination "20 - 40 - 60" on a dial that goes from 1 to 60... Sounds like an equivalent of a factory-default admin/admin login credentials. The article explains that it was a common combination for people to use on this type of safe - "Typical combination lock, three times clockwise - 20 - two times counterclockwise - 40 - once clockwise - 60, tried the handle and it went".

taneq 7y ago
"admin", ""? Nope. "admin", "admin"? Nope. "admin", "passwd"? Yep!
- larkeith 7y ago
  For maximum security, use username "password" with password "admin".
  - taneq 7y ago
    "I pulled a sneaky on ya"
jrochkind1 7y ago
So that's a quote from the museum visitor who opened it. I don't think he knew "common combinations on this type of safe". I think he was saying what was typical was the mechanism, three times clockwise [some number], two times counter-clockwise [some number], etc. Not the numbers. We of course wouldn't have heard about it if it wasn't succesful. The real odds are "how many safes are there like this that people are trying all over the world, and what's the chance that someone at ONE of them would succeed." :)

jmkd 7y ago

Ha yes, or equivalent to 'password'. Raises the point that humans interacting with machines will always display similar behaviours.

salutonmundo 7y ago
Puts me in mind of Surely You're Joking Mr Feynman...
- m463 7y ago
  I found that chapter really fun and I should try that... But then I think -- he was cracking safes in a military top-secret nuclear research facility!

jperry 7y ago

>The museum had previously enlisted the help of experts to crack the code, tried default combinations, and had contacted former hotel employees to see if they could help. It doesn't sound like it was the default, just a "password1" situation.

pferde 7y ago
Ah, I missed that bit, thanks!
darkpuma 7y ago
Or maybe they just hired shitty locksmiths. Shitty locksmiths are often easier to find than real locksmiths.

Animats 7y ago

Definitely sounds like a default. When you turn in a container with a classic combination lock in the DoD world, you set the combination to 10-20-30-40. The next person issued the container opens it and sets it to a new combination.

stcredzero 7y ago

The moral equivalent of "admin,password" happens all the time with physical locks. With physical goods, the key is often sold with a default bitting. (Which is the data embodied in the key equivalent to the password.) That's because just ordering the default is often cheaper, and the contractor will often just opt for the cheapest option. It wouldn't surprise me if this also happened with combination locks. https://www.youtube.com/watch?v=a9b9IYqsb_U https://www.youtube.com/watch?v=a9b9IYqsb_U