8 ms·

You have to realise that LPL has a very specific set of skills. Skills he has acquired over a very long career. Skills that make hom a nightmare for people like

You have to realise that LPL has a very specific set of skills. Skills he has acquired over a very long career. Skills that make hom a nightmare for people like masterlock. I had a locksmith out a couple of years ago, and was very disappointed when he simply got out a drill rather than starting with 'click out of one'. LPL makes things look easy, I'm sure they aren't.

OkayPhysicist 5y ago
I encourage you to try out locksport as a hobby. Pretty much anyone can learn to pop open a masterlock padlock in 30 seconds or so with maybe a couple hours practice. Don't get me wrong, he makes even really, really hard to pick locks look easy, but that doesn't negate the fact that a lot of locks are just actually easy.
delusional 5y ago
You have to excuse that I didn't watch the video, so i might be missing some context. LPL's career isn't lockpicking is it? I was under the impression that it was just a hobby that turned into a youtube channel. I seem to recall him saying that he just picks locks all the time, and that's why he's good. I think he said that when he watches movies he takes a 30 locks and then he just sits there and picks them while watching.
- Quequau 5y ago
  It wasn't (he used to be lawyer) but he's won lock picking contests, apparently has a gargantuan collection of locks some of which he habitually practises on, and these days runs a company that sells lock picking tools (though I have no idea if that's his only gig). Anyway, if you watch all / most of his videos the near constant refrain running through them isn't "with finely honed skills and the right hard to find speciality tools it's easy to open this lock" (though he does do that). Instead it's: "it's easy to open this lock with no or few skills, no or little practice, with trivially found, improvised, or purchased tools, using exploits that have been known in the lock manufacturing and locksmithing industries for decades or centuries". That in turn is his point in this keynote. These exploits have been known in the lock manufacturing and locksmithing industries for decades or centuries and yet many, perhaps most of the locks that people can buy in stores, still have those flaws (which are easy and inexpensive to eliminate in the design and construction process).
  - donatzsky 5y ago
    > (though I have no idea if that's his only gig). Pretty sure it's not. From what I've gathered, watching his videos, he's also doing consulting/training for companies on physical security.
xondono 5y ago
> I had a locksmith out a couple of years ago, and was very disappointed when he simply got out a drill rather than starting with 'click out of one'. That’s a common occurrence because of the incentives. The locksmith wants to spend as little time as possible (average time), and doesn’t pay a premium for destroying the lock, since most people don’t confront them on that. LPL is amazing, but any decent locksmith could get at least near enough him in competence. It’s not that it’s so hard that very little people can do it, it’s that is very niche for most people to learn.
- TravelPiglet 5y ago
  Damaging the lock in the process of picking it is also an outcome that isn’t shown in the videos. LPL damages locks as well.
- celticninja 5y ago
  I bet most locksmiths are the drill and replace type and could not pick a lock reliably anyway. Locksmiths are taught how to dismantle and remove a lock these days rather than how a lock works and therefore how to beat it.
  - xondono 5y ago
    After thinking about this, I realized it makes a lot of sense given what LPL is saying. After all, if you spent a fortune in some lock and the locksmith can open it in 5 seconds flat, you’ll feel ripped off. It’s possible that a lot locksmiths believe the locks to be safe, and they think they’re saving time by going the drill route. Not to mention that if the locksmith is selling you the lock, he will want to avoid damaging their reputation.
Quequau 5y ago
I feel like this comment comes up every time LPL is discussed outside of his context and I think it discounts the hundreds of low / no skill attacks he has demonstrated which apply to many, probably most, of the locks with recognisable name brands that are for sale in brick & mortar stores. It took me 30 minutes to make and use a tool that he demonstrated using on a lock similar to one I own and most of that time was spent rummaging around my place trying find stuff. Lastly, I think you got taken advantage of by a locksmith out to sell more locks and keys.
- notatoad 5y ago
  The biggest part of the LPL skillset is his knowledge about all the low-skill attacks that exist, and which locks they work on. Low-skill attacks are only effective if you know about them, and remember which locks each exploit applies to. The only low-skill attack that seems to have any widespread effectiveness (and would therefore be worth trying on every lock) is raking, and that is pretty easily defeated by any lockmaker who cares.
  - Quequau 5y ago
    I believe that "low skilled attack" also includes the ability to search the internet and watch a video. There are literally thousands of videos on YouTube with demonstrations of low skilled attacks using improvised tools. For example I made a shim and opened a lock I own in less than 30 minutes after watching one of his videos that featured a similar lock. I had never opened a lock without a key before that day, don't have much use of two fingers on one hand, and my toolbox fits in a kitchen drawer. For your list of common low skill attacks which have widespread effectiveness I would also include shimming, hammering, and cutting. Also in the case of locks with electronics associated with them, strong magnets.
  - sdmike1 5y ago
    He is also a very skilled SPPer which he will frequently demonstrate. He mentioned in the video the reason he uses so many low skill attacks is because they work so well on locks people *care* about.
celticninja 5y ago
The locksmith drills your lock because it takes no skill and allows them to sell (or forces you to buy) a new lock and set of keys at whatever weird time of day it happens to be. The price is almost certainly going to be higher out of normal hours. Plus if he picks the lock in 30 seconds you may not pay such a high fee.
- RyJones 5y ago
  I locked myself out one night and called a service. The guy showed up and asked if I wanted a show, or the door open. I said open the door please. He did in about ten seconds and I gladly paid full fare for the work. Spoiler: he leaned on the door to hold the latch in place, then used a plastic shim to trip it open.
- nirui 5y ago
  I would probably (mentally) look down on the locksmith if he/she just going to drill it out without trying anything else first. I own a power drill too and I know how to use it to break a lock myself with zero knowledge on how lock works (for some weak locks, even a flat head screwdriver is enough to get it done). On the other hand, if the locksmith clicked my lock out in just 30 seconds, I would probably ask him/her to sell me a better (and sometimes more expensive) lock based on his/her professional opinion.
  - loloquwowndueo 5y ago
    But how are you going to get your power drill if you’re locked outside? :)
    - accountofme 5y ago
      The hardware store?
    - eatbitseveryday 5y ago
      Garage door opener glued to the outside that uses a PIN?
lathiat 5y ago
Time to watch this one “Locksmith says my videos are BS… Loses $75 (Maybe)” https://youtu.be/NSuaUok-wTY https://youtu.be/NSuaUok-wTY Also if you actually watch this keynote half the problem isn’t locks you can actually pick but stuff you can just open with very basic tools that don’t even require the skill he has. Like combs, rakes, hammers, slithers of metal, etc.
josefx 5y ago
Going by a presentation from a professional pen tester lock picking is usually far down on their list because there are easier ways to open many doors without picking the lock. https://www.youtube.com/watch?v=rnmcRTnTNC8 https://www.youtube.com/watch?v=rnmcRTnTNC8 Someone who wants to get in is probably already on his way out while LPL is only halfway through with the lock.
- JshWright 5y ago
  A big part of what LPL does is exploit those non-destructive bypasses.
tylermenezes 5y ago
Locks are worse than you think. I'm not skilled, I don't practice, but I've been able to get my parents back in their house within 5 minutes both times they've locked themselves out. You call out masterlock but they're particularly bad. I lost the key to one and kept using it for a year because unlocking it was as simple as just putting the pick in while turning.
lrvick 5y ago
Honestly, when it comes to most US locks, they really are a joke. I learned to pick my parents safe and door locks by 8, and have taught dozens of children to pick virtually every lock you can find in a hardware store. As a security engineer the first thing I teach peers isn't even software, but lock picking. Peoples minds really open up when you show them how to open every lock in their own office in under an hour of training. "Is security on almost everything we trust every day really this shit?!" "Yes"
- techdragon 5y ago
  Thank you for this insight. I will forever advise anyone interested in getting started with computer security to learn lock picking first. Having done both In the other order id never thought of how insightful it is for fully realise the fragility of the illusion of safety as it exists in the real world as a better grounding for anyone about to learn the fragility of everything in the more complex and more abstract digital world.

OkayPhysicist 5y ago

I encourage you to try out locksport as a hobby. Pretty much anyone can learn to pop open a masterlock padlock in 30 seconds or so with maybe a couple hours practice. Don't get me wrong, he makes even really, really hard to pick locks look easy, but that doesn't negate the fact that a lot of locks are just actually easy.

delusional 5y ago

You have to excuse that I didn't watch the video, so i might be missing some context. LPL's career isn't lockpicking is it? I was under the impression that it was just a hobby that turned into a youtube channel. I seem to recall him saying that he just picks locks all the time, and that's why he's good. I think he said that when he watches movies he takes a 30 locks and then he just sits there and picks them while watching.

Quequau 5y ago
It wasn't (he used to be lawyer) but he's won lock picking contests, apparently has a gargantuan collection of locks some of which he habitually practises on, and these days runs a company that sells lock picking tools (though I have no idea if that's his only gig). Anyway, if you watch all / most of his videos the near constant refrain running through them isn't "with finely honed skills and the right hard to find speciality tools it's easy to open this lock" (though he does do that). Instead it's: "it's easy to open this lock with no or few skills, no or little practice, with trivially found, improvised, or purchased tools, using exploits that have been known in the lock manufacturing and locksmithing industries for decades or centuries". That in turn is his point in this keynote. These exploits have been known in the lock manufacturing and locksmithing industries for decades or centuries and yet many, perhaps most of the locks that people can buy in stores, still have those flaws (which are easy and inexpensive to eliminate in the design and construction process).
- donatzsky 5y ago
  > (though I have no idea if that's his only gig). Pretty sure it's not. From what I've gathered, watching his videos, he's also doing consulting/training for companies on physical security.

xondono 5y ago

> I had a locksmith out a couple of years ago, and was very disappointed when he simply got out a drill rather than starting with 'click out of one'. That’s a common occurrence because of the incentives. The locksmith wants to spend as little time as possible (average time), and doesn’t pay a premium for destroying the lock, since most people don’t confront them on that. LPL is amazing, but any decent locksmith could get at least near enough him in competence. It’s not that it’s so hard that very little people can do it, it’s that is very niche for most people to learn.

TravelPiglet 5y ago
Damaging the lock in the process of picking it is also an outcome that isn’t shown in the videos. LPL damages locks as well.
celticninja 5y ago
I bet most locksmiths are the drill and replace type and could not pick a lock reliably anyway. Locksmiths are taught how to dismantle and remove a lock these days rather than how a lock works and therefore how to beat it.
- xondono 5y ago
  After thinking about this, I realized it makes a lot of sense given what LPL is saying. After all, if you spent a fortune in some lock and the locksmith can open it in 5 seconds flat, you’ll feel ripped off. It’s possible that a lot locksmiths believe the locks to be safe, and they think they’re saving time by going the drill route. Not to mention that if the locksmith is selling you the lock, he will want to avoid damaging their reputation.

Quequau 5y ago

I feel like this comment comes up every time LPL is discussed outside of his context and I think it discounts the hundreds of low / no skill attacks he has demonstrated which apply to many, probably most, of the locks with recognisable name brands that are for sale in brick & mortar stores. It took me 30 minutes to make and use a tool that he demonstrated using on a lock similar to one I own and most of that time was spent rummaging around my place trying find stuff. Lastly, I think you got taken advantage of by a locksmith out to sell more locks and keys.

notatoad 5y ago
The biggest part of the LPL skillset is his knowledge about all the low-skill attacks that exist, and which locks they work on. Low-skill attacks are only effective if you know about them, and remember which locks each exploit applies to. The only low-skill attack that seems to have any widespread effectiveness (and would therefore be worth trying on every lock) is raking, and that is pretty easily defeated by any lockmaker who cares.
- Quequau 5y ago
  I believe that "low skilled attack" also includes the ability to search the internet and watch a video. There are literally thousands of videos on YouTube with demonstrations of low skilled attacks using improvised tools. For example I made a shim and opened a lock I own in less than 30 minutes after watching one of his videos that featured a similar lock. I had never opened a lock without a key before that day, don't have much use of two fingers on one hand, and my toolbox fits in a kitchen drawer. For your list of common low skill attacks which have widespread effectiveness I would also include shimming, hammering, and cutting. Also in the case of locks with electronics associated with them, strong magnets.
- sdmike1 5y ago
  He is also a very skilled SPPer which he will frequently demonstrate. He mentioned in the video the reason he uses so many low skill attacks is because they work so well on locks people *care* about.

celticninja 5y ago

The locksmith drills your lock because it takes no skill and allows them to sell (or forces you to buy) a new lock and set of keys at whatever weird time of day it happens to be. The price is almost certainly going to be higher out of normal hours. Plus if he picks the lock in 30 seconds you may not pay such a high fee.

RyJones 5y ago
I locked myself out one night and called a service. The guy showed up and asked if I wanted a show, or the door open. I said open the door please. He did in about ten seconds and I gladly paid full fare for the work. Spoiler: he leaned on the door to hold the latch in place, then used a plastic shim to trip it open.
nirui 5y ago
I would probably (mentally) look down on the locksmith if he/she just going to drill it out without trying anything else first. I own a power drill too and I know how to use it to break a lock myself with zero knowledge on how lock works (for some weak locks, even a flat head screwdriver is enough to get it done). On the other hand, if the locksmith clicked my lock out in just 30 seconds, I would probably ask him/her to sell me a better (and sometimes more expensive) lock based on his/her professional opinion.
- loloquwowndueo 5y ago
  But how are you going to get your power drill if you’re locked outside? :)
  - accountofme 5y ago
    The hardware store?
  - eatbitseveryday 5y ago
    Garage door opener glued to the outside that uses a PIN?

lathiat 5y ago

Time to watch this one “Locksmith says my videos are BS… Loses $75 (Maybe)” https://youtu.be/NSuaUok-wTY https://youtu.be/NSuaUok-wTY Also if you actually watch this keynote half the problem isn’t locks you can actually pick but stuff you can just open with very basic tools that don’t even require the skill he has. Like combs, rakes, hammers, slithers of metal, etc.

josefx 5y ago

Going by a presentation from a professional pen tester lock picking is usually far down on their list because there are easier ways to open many doors without picking the lock. https://www.youtube.com/watch?v=rnmcRTnTNC8 https://www.youtube.com/watch?v=rnmcRTnTNC8 Someone who wants to get in is probably already on his way out while LPL is only halfway through with the lock.

JshWright 5y ago
A big part of what LPL does is exploit those non-destructive bypasses.

tylermenezes 5y ago

Locks are worse than you think. I'm not skilled, I don't practice, but I've been able to get my parents back in their house within 5 minutes both times they've locked themselves out. You call out masterlock but they're particularly bad. I lost the key to one and kept using it for a year because unlocking it was as simple as just putting the pick in while turning.

lrvick 5y ago

Honestly, when it comes to most US locks, they really are a joke. I learned to pick my parents safe and door locks by 8, and have taught dozens of children to pick virtually every lock you can find in a hardware store. As a security engineer the first thing I teach peers isn't even software, but lock picking. Peoples minds really open up when you show them how to open every lock in their own office in under an hour of training. "Is security on almost everything we trust every day really this shit?!" "Yes"

techdragon 5y ago
Thank you for this insight. I will forever advise anyone interested in getting started with computer security to learn lock picking first. Having done both In the other order id never thought of how insightful it is for fully realise the fragility of the illusion of safety as it exists in the real world as a better grounding for anyone about to learn the fragility of everything in the more complex and more abstract digital world.