full-disclosure - Master-Keyed Lock Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: sockz at email.com (sockz loves you)
Subject: Master-Keyed Lock Vulnerability

WOW!!! OMFG!!!!
THANK GOD THE SECURITY INDUSTRY IS HERE IN TIME TO SAVE THE DAY ~!!!
OMFG~!~!!

and you're all only what?  4?  5 years behind?
none of this is new.

----- Original Message -----
From: "Richard M. Smith" <rms@...puterbytesman.com>
Date: Thu, 23 Jan 2003 13:20:24 -0500 
To: <full-disclosure@...ts.netsys.com>
Subject: [Full-Disclosure] Master-Keyed Lock Vulnerability

> http://www.crypto.com/masterkey.html
>  
> Master-Keyed Lock Vulnerability 
> 
> Matt Blaze 
> AT&T Labs -- Research 
> 
> 16 January 2003, Revised 21 January 2003 
> 
> The threat
> 
> In a recent research paper ( http://www.crypto.com/papers/mk.pdf), we
> describe weaknesses in most master-keyed lock systems, such as those
> used by offices, schools, and businesses as well as by some residential
> facilities (particularly apartment complexes, dormitories, and
> condominiums). These weaknesses allow anyone with access to the key to a
> single lock to create easily the "master" key that opens every lock in
> the entire system. Creating such a key requires no special skill, leaves
> behind no evidence, and does not require engaging in recognizably
> suspicious behavior. The only materials required are a metal file and a
> small number of blank keys, which are often easy to obtain. 
> 
> Needless to say, the ability for any keyholder to obtain system-wide
> access represents a serious potential threat to the security of
> master-keyed installations. Individuals and institutions that depend on
> such locks to protect their safety and property should be aware of these
> risks and consider alternatives to eliminate or reduce their exposure to
> this threat. 
> 
> .....
>  
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

-- 
_______________________________________________
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup

Meet Singles
http://corp.mail.com/lavalife