Blog 6: A "Combination" of Issues

Image courtesy of Anoop Krishman at FreeDigitalPhotos.net

In my effort to increase security awareness and obtain a cultural acceptance, I wanted to bring a focus on combination locks, for physical security, and how easily they can be "cracked."

I remember being in high school and securing all of my items inside of my locker. As long as I could remember the three digits in the combination, I would be able to retrieve those items, while keeping others out. This locker provided a sense of security and a feeling of protection for the items residing within. In fact, I remember storing personal belongings, such as my really cool Sony Walkman I got for Christmas in the 80's. Lucky for me, I always remembered the correct numbers, which allowed me to have my books readily available for class...not that that helped me any as I couldn't hear the teacher over the Def Leppard music blaring on my Walkman (just kidding).

Anyways, back to the combination locks. Even though they are considered a physical security device that can assist in protecting items behind closed doors, there are ways to discover the code. If the code is discovered, the lock can be opened. If the lock can be opened, my Sony Walkman can be taken. If my Walkman was taken, Def Leppard would not sing to me in class!  Of course, I am still just kidding...I think!

So, how would someone be able to accomplish this? The first thing you need to do to "crack" a combination lock is to discover the third number in the code. To do this, you simply lift up on the clasp and rotate the dial in a specific way to find the "gap." It takes a little time to learn the technique of identifying the gaps within the numbers, as this is actually the hardest part.

Once you have identified the "gap", it becomes your third number of the combination. With this number, you simply fill in the Combination Lock Cracking Form listed below by following the instructions, which will have you write that number in the cell labeled #3. I created this form in 2015 to allow students to practice some lock cracking techniques in a course called Hacker High. Now just continue to follow the written algorithm to reveal all of the possible combinations.

Once you have all of the combinations written down, you attempt each one. You should have the combination revealed within 15 minutes. In fact, my record is just under 2 minutes for a lock I demonstrated for a class I was teaching. You will find that some are easier than others, but they all can eventually be opened utilizing this technique.

Have fun and use this knowledge for good, not for Walkman stealing evilness!

Thank you for reading! Until next time, remember that you don't have to become a victim of a threat to become aware of a threat!