WOW!!! OMFG!!!! THANK GOD THE SECURITY INDUSTRY IS HERE IN TIME TO SAVE THE DAY ~!!! OMFG~!~!!
and you're all only what? 4? 5 years behind? none of this is new. ----- Original Message ----- From: "Richard M. Smith" <[EMAIL PROTECTED]> Date: Thu, 23 Jan 2003 13:20:24 -0500 To: <[EMAIL PROTECTED]> Subject: [Full-Disclosure] Master-Keyed Lock Vulnerability > http://www.crypto.com/masterkey.html > > Master-Keyed Lock Vulnerability > > Matt Blaze > AT&T Labs -- Research > > 16 January 2003, Revised 21 January 2003 > > The threat > > In a recent research paper ( http://www.crypto.com/papers/mk.pdf), we > describe weaknesses in most master-keyed lock systems, such as those > used by offices, schools, and businesses as well as by some residential > facilities (particularly apartment complexes, dormitories, and > condominiums). These weaknesses allow anyone with access to the key to a > single lock to create easily the "master" key that opens every lock in > the entire system. Creating such a key requires no special skill, leaves > behind no evidence, and does not require engaging in recognizably > suspicious behavior. The only materials required are a metal file and a > small number of blank keys, which are often easy to obtain. > > Needless to say, the ability for any keyholder to obtain system-wide > access represents a serious potential threat to the security of > master-keyed installations. Individuals and institutions that depend on > such locks to protect their safety and property should be aware of these > risks and consider alternatives to eliminate or reduce their exposure to > this threat. > > ..... > > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.netsys.com/full-disclosure-charter.html -- _______________________________________________ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup Meet Singles http://corp.mail.com/lavalife _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
