Re: Master-Keyed Lock Vulnerability

["sockz loves you" <sockz () email com>]

WOW!!! OMFG!!!!
THANK GOD THE SECURITY INDUSTRY IS HERE IN TIME TO SAVE THE DAY ~!!!
OMFG~!~!!

and you're all only what?  4?  5 years behind?
none of this is new.

----- Original Message -----
From: "Richard M. Smith" <rms () computerbytesman com>
Date: Thu, 23 Jan 2003 13:20:24 -0500 
To: <full-disclosure () lists netsys com>
Subject: [Full-disclosure] Master-Keyed Lock Vulnerability

> http://www.crypto.com/masterkey.html
>  
> Master-Keyed Lock Vulnerability 
>
> Matt Blaze 
> AT&T Labs -- Research 
>
> 16 January 2003, Revised 21 January 2003 
>
> The threat
>
> In a recent research paper ( http://www.crypto.com/papers/mk.pdf), we
> describe weaknesses in most master-keyed lock systems, such as those
> used by offices, schools, and businesses as well as by some residential
> facilities (particularly apartment complexes, dormitories, and
> condominiums). These weaknesses allow anyone with access to the key to a
> single lock to create easily the "master" key that opens every lock in
> the entire system. Creating such a key requires no special skill, leaves
> behind no evidence, and does not require engaging in recognizably
> suspicious behavior. The only materials required are a metal file and a
> small number of blank keys, which are often easy to obtain. 
>
> Needless to say, the ability for any keyholder to obtain system-wide
> access represents a serious potential threat to the security of
> master-keyed installations. Individuals and institutions that depend on
> such locks to protect their safety and property should be aware of these
> risks and consider alternatives to eliminate or reduce their exposure to
> this threat. 
>
> .....
>  
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

-- 
_______________________________________________
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup

Meet Singles
http://corp.mail.com/lavalife

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html