Download - Dolla Dolla Bump Key
![Page 1: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/1.jpg)
![Page 2: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/2.jpg)
Chris Sistrunk, PE
Electrical EngineerICS/SCADA– Mandiant, Entergy– Project Robus (ICS Protocol Fuzzing)
Physical Security– Substation Security Team– Fun & education
![Page 3: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/3.jpg)
Disclaimer
The information in this presentation is intended for educational purposes. I am a security professional, but I am not a legal expert. Please be aware of the laws in your area that may pertain to bump keys.
![Page 4: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/4.jpg)
+ +
=No-questions-asked, $2 Bump-key-o-matic
![Page 5: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/5.jpg)
Key Kiosks
![Page 6: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/6.jpg)
minuteKey
Does notaccept cash!
Window forviewing
Scans onlykey shaft
Emails receipt
![Page 7: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/7.jpg)
FastKey
Does acceptcash!
Scans entirekey
Prints receipt(no email)
![Page 8: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/8.jpg)
KeyMeapproved keyiPhone App
• Take pic of key• Store keys in the CLOUD• Displays key type + code• Mail orderOnly 5 Kiosks in NY• Requires fingerprint for
key from cloud• Duplicates keys as well
![Page 9: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/9.jpg)
KeyMe - Prior Art7/25/2014http://www.wired.com/2014/07/keyme-let-me-break-in/
“I spent about 30 seconds in the stairwell scanning his keys with software that would let me reproduce them with no specialized skills whatsoever. The iPhone app I used wasn’t intended for anything so nefarious: KeyMe was designed to let anyone photograph their keys and upload them to the company’s servers. From there, they can be 3-D printed and mail-ordered in a variety of novelty shapes, from a bottle opener to Kanye West’s head. Or they can be cut from blanks at one of KeyMe’s five kiosks in the New York City area.”
![Page 10: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/10.jpg)
Kiosk Key Types
• Schlage SC1• Kwikset KW1• Master M1• Weiser WR5• Mailbox NA14• Other keys may vary• KeyMe has biggest selection
![Page 11: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/11.jpg)
![Page 12: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/12.jpg)
![Page 13: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/13.jpg)
![Page 14: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/14.jpg)
![Page 15: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/15.jpg)
![Page 16: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/16.jpg)
![Page 17: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/17.jpg)
![Page 18: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/18.jpg)
Will it copy a bump key?
Let’s try bump keys:• Machine-made brass• Hand-filed brass• Hand-made plastic• Printer paper• Paper plate• Brass key with large paper cover• Brass key with small paper cover
![Page 19: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/19.jpg)
![Page 20: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/20.jpg)
![Page 21: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/21.jpg)
![Page 22: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/22.jpg)
![Page 23: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/23.jpg)
![Page 24: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/24.jpg)
![Page 25: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/25.jpg)
![Page 26: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/26.jpg)
![Page 27: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/27.jpg)
![Page 28: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/28.jpg)
![Page 29: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/29.jpg)
![Page 30: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/30.jpg)
Success!
![Page 31: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/31.jpg)
Detail
Machine-made brass Hand-filed brass Hand-filed plastic
![Page 32: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/32.jpg)
Detail
![Page 33: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/33.jpg)
Failure is always an option!
![Page 34: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/34.jpg)
Results
Bump key type Kiosk Copy? Works?Machine-made brass Hand-filed brass Hand-made plastic Printer paper n/aPaper plate n/aBrass with large paper cover n/aBrass with small paper cover
![Page 35: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/35.jpg)
Conclusions
FastKey Kiosk copies bump keys!– Original “key” doesn’t have to be a key– Cheaper than buying bump keys online– Must align key carefully in the scanner– Tries to copy the key as close as possible– May correct errors in original key– Has trouble duplicating small teeth on end of keys
A crappy bump key may still work!
![Page 36: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/36.jpg)
Further Study
• Will kiosks copy 3D printed keys?• What other materials will the kiosk copy?• Key Kiosk vulnerabilities?– Windows?– Cell radio
• Is the KeyMe iPhone app secure?I recommend coordinated disclosure.
![Page 37: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/37.jpg)
Someone might get your key n00dz
CENSORED
![Page 38: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/38.jpg)
Whoopsie
http://vendingadventures.blogspot.com/2013/05/fast-key.html
![Page 39: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/39.jpg)
Questions/Ideas?
![Page 40: Dolla Dolla Bump Key](https://reader035.vdocuments.net/reader035/viewer/2022081413/546b19c8af7959221d8b6935/html5/thumbnails/40.jpg)
Related YouTube Videos
https://www.youtube.com/watch?v=O6UqrQwTbgYhttps://www.youtube.com/watch?v=Fu74iwq224whttps://www.youtube.com/watch?v=TrDlyTAIByghttps://www.youtube.com/watch?v=kAYTKwPG6a0