For those in the safe community, the name Matt Blaze may not be front and centre but he does have credentials in information security. He turned his computer attention of safe locks a while back and wrote a paper I found most interesting.
Matt Blaze @ crypto.com
Buried in this page are two papers of interest to lock and safe technicians.
One is on safecracking or what we call a manipulation. Another is about masterkeying mechanical locks. For one, he documents the Informed Oracle Attack to escalate authority. (Please use text search in his page to find the papers links directly. If I link to the papers directly, they will download as PDF files instantly.)
His work is not really news in so many ways but it does represent presenting it to a wider audience. How many? Well, the papers were published in 2004. When I first found them, I looked to see if a course was offered in computer security at various colleges and universities. LOTS OF EM. It is reasonable to think these papers have floated past tens of thousands or more of undergraduate students. We are not talking semi-literate and semi-numerate prison convicts. I am talking people who can make sense of the content and for a few hundred dollars find a group two lock to play with and see it works. Once more, security by obscurity fails.
--- --- --- --- ---
The contents of this post are released for non-profit or educational use in whole or in part provided this statement and the attribution below are kept attached.
Laux Myth ... Thoughts From a Locksmith
By MartinB, Found @ http://lauxmyth.blogspot.com/
Wednesday, April 21, 2010
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment