Researchers reveal that millions of secure Kwikset smartkey locks can be opened with simple toolsMadison Ruppert Despite the security claims made about the smartkey locks, researchers demonstrated the ability to bypass the locks with a screwdriver and a paper clip and will present the technique at the DefCon hacker conference today. DefCon is the same conference in Las Vegas where security researcher Barnaby Jack was going to demonstrate how a pacemaker could be hacked in order to kill someone. Jack was found dead in late July. DefCon is also used by the National Security Agency as a way to recruit hackers, with Gen. Keith Alexander making appearances. The researchers, noted lock hackers Marc Weber Tobias and Toby Bluzmanis, demonstrated the troubling technique for Wired, which captured it on video. Tobias and Bluzmanis arent new faces at DefCon. In years past, theyve demonstrated how to defeat what were thought to be high-security electronic locks like the ones used at the White House and other government offices along with electro-mechanical locks, deadbolts and widely-distributed electronic safes. Yet the findings of the researchers to be presented this year are some of the most devastating yet. The Kwikset smartkey locks, introduced in 2008, are the best-selling locks theyve tested so far. The locks, which sell for $20-40, are so appealing because they can be reprogrammed at any time, allowing locks to be changed without having to actually change locks or call a locksmith. Its very clever because the consumer can instantly reprogram the key, but its also insecure, Tobias said. Theres a lot of positives for Kwikset, but the problem is they can be opened in 15 seconds with a screwdriver and a paper clip. Its not a pin-tumbler lock so that it doesnt have the inherent physical strength to block the plug from turning when you do certain things. There is a significant false sense of security that goes along with the locks, based at least partially upon the Grade 1 security certification for residential use awarded by the Builders Hardware Manufacturers Association (BHMA). Wired notes that the locks are advertised by Kwikset as being invulnerable to being hacked with wires, screwdrivers, or anything else inserted in the keyway, something which is clearly not true. Tobias filed a formal complaint with the BHMA two years ago over the rating, but he said they ignored it. Part of the certification demands that the lock be able to withstand 300 pounds-force-inch of torque, though the researchers demonstrated the ability to use only slightly more than 100 pounds-force-inch to bypass the lock. While Kwikset wouldnt respond to Wireds attempts to get a comment, Tobias was told on recorded phone calls to their technical support that the locks were impervious to screwdrivers or wires, and that a screwdriver wouldnt even fit in the keyway. Theres no tool that you can just put in the cylinder and pop it open, a technician named Satima said to Tobias. You cant put any type of wire or anything like that. Another technician claimed that it is impossible to open the locks without the key, adding that sticking anything foreign inside of the keyway is just going to make it that much harder to open up. If it was that easy to pick a Kwikset lock, they would be having us doing recalls, [but] theres nothing like that. Its business as usual, they said. Unfortunately, as the researchers have shown, it is that easy to pick one of their locks. If you have one of these locks, its high time to get a new one. Id love to hear your opinion, take a look at your story tips and even your original writing if you would like to get it published. I am also available for interviews on radio, television or any other format. Please email me at Admin@EndtheLie.com This article first appeared at End the Lie. Madison Ruppert is the Editor and Owner-Operator of the alternative news and analysis databaseEnd The Lie and has no affiliation with any NGO, political party, economic school, or other organization/cause. He is available for podcast and radio interviews. Madison also now has his own radio show on UCYTV Monday nights 7 PM 9 PM PT/10 PM 12 AM ET. Show page link here: http://UCY.TV/EndtheLie. If you have questions, comments, or corrections feel free to contact him at admin@EndtheLie.com linkwithin_text=Related Articles: 