emhart

You literally asked someone to describe how they would have bumped it previously and I gave you a reasonable answer that included a scenario in which you haven't purchased the machine, but instead purchased a blank cut by the machine for LESS than what Shapeways are charging for your key.

Not to mention that you seem to be ignoring the second paragraph entirely.

And, honestly, this seems like a silly argument to be having. I actually think the boys did great work on this, and I really appreciate that you mention the possibility of forensic evidence (in the practice of which Germany is a leader) left by these keys. I just think that some people commenting on this thread are a bit frustrated by some of the hyperbole, and your insistence that there is no hyperbole is continuing to derail whatever point you are attempting to make.

Well, except for this line:

"As a result, all anyone needs to open many locks previously considered “unbumpable” ..."

You are implying that this has made the impossible, possible. I think that may be valarauca's point of contention.

EZ Entrie machines[0], first of all, as they've been around for a decade or so and are purpose built to mill one-off high security blanks out of brass, so they're significantly more effective than their plastic counterparts. They are admittedly expensive, but when I briefly had access to one the gentleman running it was cutting me fresh blanks for a Euro a piece. They also have rather jaunty bows with smiley faces inscribed in them.

Additionally, people have been bumping things with just about anything that can fit into a keyway, it doesn't particularly matter if it conforms to the exact shape of the key, so long as it can still interact with the pins directly. So, bent sheet metal with teeth cut into them, flexible grocery loyalty cards, etc. have all been used by folks in the locksport community to bump locks they didn't have proper blanks for. I can't deny the SK6 (and many Ikon locks, they are vicious) didn't have a particularly murderous keyway, but the possibility of carrying out a percussive attack wasn't nil.

[0] http://www.qtactical.com/easy-entrie-key-machine/

Do you remember when this was? Multiple rows of pins have been around for ... well, since 1848 at least, but in modern locks, Kaba & Sargent (later bought by Kaba) have been using multiple rows for many decades.

Doesn't actually prevent bumping, though! Additionally, the "angle between the rows" is interesting in thinking what exactly he might have said. Sargent, again, with the Keso introduced the idea of somewhat variable spacing of the pins in the Keso.

Additionally, if we're talking angles, there was the Medeco Biaxial (often confused for the original Medeco lock) which introduced the idea of "fore", "center" and "aft" positioning of the cuts in the key/position of the chiseled tips of the pins.

The former, Sargent, can still be readily bumped as even though you won't always know if a pin will be present, you know every possible location of the pins and can adjust accordingly. With Medeco, it's significantly harder, though they caused themselves problems with a heavily restricted code book so that the mere visual observation of the first two pins in the lock could give you a very good idea of the positing of the other elements and allow you to make a few possible bump keys to attack them. They've since fixed that problem.

Two very different problems, though both are locks. In the case of a car you don't always get to choose the security of the community it lives in. Its portability, price and effective lifespan dictate different standards of security.

In the US the average length of car ownership is at an all time high of 6 years. You can reasonably expect the locks to outlive your interest in the vehicle. Whereas (and this is all quick googling to get to a point, so anyone feel free to correct my figures) the average ownership of a home is 20 years. Now, while locks can certainly survive that long, it's a good idea to replace them once in a while.

Additionally, in the rental market where turnover is significantly higher, there are often laws that require the regular changing of the locks from tenant to tenant.

And - another factor - insurance standards related to security on cars are much more robust than insurance related to security on buildings. You can occasionally find a break for having a second lock, or deadbolt, etc. but your returns on insurance breaks diminish completely as you invest in higher end physical security.

All of this is to say - door locks are a commoditized after-market product that are influenced by geography. They are made to be replaced/maintained by the user and there will always be a thriving budget marketplace for them. Your car locks, on the other hand, are never meant to be worked on by the user, are rarely replaced and have almost no competitive after-market.

Hope that helps lay out some of the differences between the two.

(and I could go on. Lot of other stuff around OEM, cost of production, ability to sell on security, etc. etc.)

That app/service has existed for years, first Shloosl (now keysduplicated), then KeyMe and I believe the proprietors frequent HN, so I expect you may see them pop up to offer an informed opinion on this article.

https://keysduplicated.com/ https://www.key.me/

Jos Weyers has repeatedly brought plain sense to hyperbolic reporting. His statement at the end is bang on:

“The sky isn’t falling, but the world changes and now people can make stuff,” says Weyers. “Lock manufacturers know how to make a lock bump-resistant. And they had better.”

Always very pleased to see his name pop up when this sort of thing makes news, as he never seems to offer a quote that can be used to stoke unreasonable fear.

Most of my life we've had an outsized problem with heroin and other opiates in Vermont. Recently this has developed into an odd symbiotic relationship with New York State, where Heroin is exchanged for guns across the border.

I recently left the state, but only a year ago I was living in Saint Albans when a warrant sweep rounded up dozens of my neighbors, including one who had been moving thousands of grams of heroin monthly.

Throughout 2013 there were ongoing sweeps in 3 major counties, all focused on narcotics only. Dozens were arrested each time. We're a small state with a terrible economy. As glad as I am that Shumlin is taking this step (and he's made it clear for a while now that he's happy to ignore the political consequences of this action) this has been a very long time coming. I remember first hearing about the heroin problem in my state 20 years ago, when I was in middle school and there was a report of someone overdosing in a park adjacent to a summit on combating opiate addiction.

Vice did a good story on all of this last year: http://www.vice.com/read/the-brown-mountain-state

I'm a historian? Maybe? I've taken to calling myself a security anthropologist lately. I study the history of security, talk about it, write about it, think about it endlessly.

I love this community. I've had amazing conversations in the comments and taken a few of those to email or twitter as well. I know that I would eventually see most of what I read here elsewhere, but this is the only place on the internet where I read the comments.

Going from movie to comic, how did you feel about the difference in ending?

I was frustrated by that specific change in the film, as in the comic it is building and building and building and then absolutely shocking at the end.

And another that ended not long ago: https://www.kickstarter.com/projects/partyrobotics/bartendro...

Man, I thought that getting a "yes" back would lead to a Eureka moment for some awesome use case...but the best I've got is just how cool it would be to show off, haha. Amazing work!

Could you potentially still use the card in a camera, while it was running linux?

Bah, sorry. Accidental downvote!

It gets much stronger

EDIT: Though the vitriol does go off the rails a bit toward the end...

I've been freelancing off and on for about 5 years, and had a horrible time with this sort of thing early on. What I eventually learned was to manage expectations right at the outset. Establish that if you want to get paid for research, phone consults, whatever, that your client is on the clock. Often your first freelance clients won't have worked with a freelancer before, and may never again, so they are as unversed in this, probably more so, than you are.

With a recent client, I knew I was going to need an hour or so just to get caught up with their modifications to the platform (ecommerce ish) so I stated that up front, and actually asked for that hour no questions asked and then would provide a quote after I understood everything. They were more than happy to provide that and it gave me the room I needed to provide a very accurate quote for the whole project.

For your current situation? What I have done with a non-paying customer in the past is to walk away, but shoot a message regarding the work I'd completed, stating explicitly that I would not be licensing any of it to them without payment. To be honest? I had no idea how to even follow up on that, or if it had any legal weight whatsoever. I just made something up in my frustration, but in the end I got about 50% of what I had been promised and wrote a reasonable sounding granting of license to my work. Your mileage will obviously vary, but hopefully this will at least provide another idea.

That's what finally happened, thankfully. His fiance stepped in and acted as a silent wall to the president's ongoing requests. Thankfully he finally got the message and relented.

EDIT: Hah! Just parsed your message correctly =P no violence ensued haha

I wish this were extraordinary. President of our company showed up in the hospital room of the Sr. Developer he fired who had terminal cancer in order to ask him for documentation on various projects. Showed up multiple times in fact.

I actually really do wish that maybe this is extraordinary and that next time around I'll wind up under more human leadership.

I applaud that honesty. Congrats on the acquisition!

LayerOne is one of my favorite conferences every year, and that talk was one of the best I've ever seen. The depth, clarity and cleverness contrasted nicely with the ever increasing intoxication.

I love this idea! I virtually attend a lot of auctions that only provide still images of items from flattering angles, I'd get good use out of this for previewing items alone. I think you'd need to build in some sort of instruction from the viewer to the cammer. As per my example, perhaps I could offer someone a buck for a 3 minute pan over lots 124, 283, and 284 (vague example getting weirdly specific).

Thanks! Both great insights, and and the self-polinating/asexual reproduction bits seem like they'll occupy the rest of my afternoon in a wikipedia-hole.

Perhaps Russian authorities realized the shock value of helping Snowden had worn off and thought it was about time to leverage their position as asylum-granter to pressure him into lobbing the softball?

Would love to read a detailed analysis of the article. I'm presently a front-end dev for a gardener's supply company, so my curiosity is piqued.

Will do.

Haha, definitely don't need a beer, but appreciate that follow through. Maybe my interests are too niche and it couldn't find results w/in the last 24hrs? I'll try a couple more times, then hit the contact form with whatever info I can offer.

EDIT: Just tried that search and a few others and all returned quite quickly. My initial search actually just hung forever, so I eventually closed the tab. Not sure how to reproduce, but hopefully just a fluke? I know no Dev ever wants to chalk something up to a fluke though...

It appears the next beer is on you: http://imgur.com/YcqwAI1

Crossed the 60 second mark just now.

I can speak from immediate experience that it is frequently not that easy. There are a lot of places with very few jobs, and plenty of people tied down geographically for other reasons. I'm not saying you can't change your employment situation, but we shouldn't hand wave that away as easy. As I said, it can be a hard problem to solve, that doesn't mean the solution can't be straightforward.

Having the "wrong CEO" is a hard problem to solve as an employee.

Wow. Any photos?