<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
Hi Eddan-<br>
<br>
So was Ace asserting some kind of copyright or other IP control over
the correlations between the key codes and the locks? That's
funny: like copyrighting the names & numbers in the phone
book;-)<br>
<br>
What kind of lawful right would Ace have had to control those
codes? I don't see any.<br>
<br>
Classic case of "security by obscurity" in the face of the data
being openly available to anyone who just looks. That plus Ace not
having adequate steps in place to verify the identity of people
asking for duplicate keys ("security by laziness";-). (As if any
burglar is going to order keys and wait a week to get them, when
smashing a window provides instant gratification?)<br>
<br>
Meanwhile, it's since been demonstrated that Ace locks and other
tubular locks of same size, are tremendously easy to pick with a
tool anyone can make from a Bic pen housing. <br>
<br>
To my mind the main value of learning to pick locks is to become
more aware of one's own security environment: particularly the
degree to which we very often depend on crappy locks, and then, with
the newly-acquired situational awareness about locks, the degree to
which we very often leave open all manner of other security holes in
our physical surroundings. Nothing says "replace your front door
lock now!" like being able to pick it with two paper clips in less
than a minute. And then you look at the big window right next to
the front door... and the un-shredded bills you put in the recycle
bin with your name & account numbers all over them... and the
valuables in the back seat of your car... etc. <br>
<br>
Next is the ability to get into places one has auth to be in: such
as when one locks oneself out of one's own house or car (or in my
case, PBX room on client site after hours, blush...). <br>
<br>
Equally is the ability to do likewise for friends (have done that a
handful of times).<br>
<br>
And from that, the generalization to our entire subculture, of the
degree of security awareness we should have all the time. <br>
<br>
Picking locks is like being able to disassemble, clean, and
reassemble a firearm: that skill does not make a law-abiding person
start contemplating committing murders. But it might make one start
to think more about personal safety on the streets at night. <br>
<br>
Lastly, I'll fess up to something. I think it's cool as hell when
people who ordinarily hack around with software, start hacking
around with _mechanical_ stuff. I'm bigtime in favor of people
learning how to hack around with _mechanical_ stuff. "Physical
layer" as new playground. To this list add your home appliances
(the ones with motors in 'em) and rotary dial phones, but that's
another topic for another day. <br>
<br>
TTYs-<br>
<br>
-G.<br>
<br>
<br>
=====<br>
<br>
<br>
<div class="moz-cite-prefix">On 13-02-28-Thu 10:35 AM, Eddan Katz
wrote:<br>
</div>
<blockquote cite="mid:512FA384.6050105@clear.net" type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<div class="moz-cite-prefix">Chicago Lock v. Fanberg is the case I
was telling you about last night, J.D. - <a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://scholar.google.com/scholar_case?case=17605115413487325945">http://scholar.google.com/scholar_case?case=17605115413487325945</a>.<br>
Author of lock-picking manuals gets sued by the manufacturer of
the locks. Chicago Lock loses on its trade secret
misappropriation claim. Here's an excerpt from the facts of the
case - <br>
<br>
<meta charset="utf-8">
<blockquote>
<p style="position: relative; color: rgb(34, 34, 34);
font-family: Arial, sans-serif; font-size: 15px; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 22px; orphans: 2;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width:
0px; background-color: rgb(255, 255, 255); ">Appellant
Victor Fanberg, the son of locksmith Morris Fanberg and a
locksmith in his own right, has published a number of
locksmith manuals for conventional locks. Realizing that no
compilation had been made of tubular lock key codes, in 1975
Fanberg advertised in a locksmith journal,<span
class="Apple-converted-space"> </span><i>Locksmith Ledger,</i><span
class="Apple-converted-space"> </span>requesting that
individual locksmiths transmit to him serial number-key code
correlations in their possession in exchange for a copy of a
complete compilation when finished. A number of locksmiths
complied, and in late 1976 Fanberg and his father began to
sell a two-volume publication of tubular lock codes,
including those of Ace locks, entitled "A-Advanced
Locksmith's Tubular Lock Codes." In 1976 and 1977 Fanberg
advertised in the manuals in the<span
class="Apple-converted-space"> </span><i>Locksmith Ledger</i><span
class="Apple-converted-space"> </span>for $49.95 and
indicated that it would be supplemented as new correlations
became known.<span class="Apple-converted-space"> </span><i>See</i><span
class="Apple-converted-space"> </span>Excerpt at 95-98.
About 350 manuals had been sold at the time of trial. The
District Court found that Fanberg "had lost or surrendered
control over persons who could purchase the books,"<span
class="Apple-converted-space"> </span><i>id.</i><span
class="Apple-converted-space"> </span>at 98, meaning that
nonlocksmiths could acquire the code manuals.</p>
<p style="position: relative; color: rgb(34, 34, 34);
font-family: Arial, sans-serif; font-size: 15px; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 22px; orphans: 2;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width:
0px; background-color: rgb(255, 255, 255); ">The books
contain correlations which would allow a person equipped
with a tubular key grinding machine to make duplicate keys
for any listed Ace lock if the serial number of the lock was
known. On some models, the serial numbers appear on the
exterior of the lock face. Thus, Fanberg's manuals would
make it considerably easier<a moz-do-not-send="true"
class="gsl_pagenum" style="color: rgb(170, 170, 170);
text-decoration: none; font-weight: normal; font-size:
13px; background-color: white; position: absolute; left:
-55px; ">4</a><a moz-do-not-send="true"
class="gsl_pagenum2" style="color: rgb(170, 170, 170);
text-decoration: none; font-weight: normal; font-size:
13px; ">*403</a><span class="Apple-converted-space"> </span>(and
less expensive) for a person to obtain (legitimately or
illegitimately) duplicate keys to Ace locks without going
through the Company's screening process. This is what caused
consternation to the Company and some of its customers. At
no time did Fanberg seek, or the Company grant, permission
to compile and sell the key codes. Nor did the individual
locksmiths seek authorization from the Company or their
customers before transmitting their key code data to
Fanberg.</p>
</blockquote>
<br>
<br>
On 2/27/13 11:20 PM, J.D. Zamfirescu wrote:<br>
</div>
<blockquote
cite="mid:CAO5ydeFtYLjsFEiW+XeoL0JtAbkJGyWtLathx7HyZydhOmmt8w@mail.gmail.com"
type="cite">
<div dir="ltr">more:
<div><br>
</div>
<div><a moz-do-not-send="true"
href="http://www.insidebayarea.com/breaking-news/ci_22683660/oakland-mayor-jean-quan-apologizes-promoting-lock-picking">http://www.insidebayarea.com/breaking-news/ci_22683660/oakland-mayor-jean-quan-apologizes-promoting-lock-picking</a><br>
</div>
</div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">On Wed, Feb 27, 2013 at 10:15 PM,
Matthew Senate <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:mattsenate@gmail.com" target="_blank">mattsenate@gmail.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">It's awesome, free press!<br>
</div>
<div class="HOEnZb">
<div class="h5">
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">On Wed, Feb 27, 2013 at
9:40 PM, rusty lindgren <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:rustylindgren@gmail.com"
target="_blank">rustylindgren@gmail.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0
0 .8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div>Oh dear gawd. This is possibly the most
moronic piece of "journalism" I have ever
seen. </div>
<div><br>
Are they unaware of the fact that you can go
to a lock-picking school(actually it teaches
you way more), and that this is just a cheaper
version of that? (see: <a
moz-do-not-send="true"
href="http://www.lock411.com/training.html"
target="_blank">http://www.lock411.com/training.html</a>).
</div>
<div><br>
</div>
<div> Also, virtually no crime in Oakland
involves skilled lock-picking, because it's a
waste of time. </div>
<div><br>
</div>
<div>Don't worry though, you can train in deadly
martial arts, go to the shooting range, and
buy ninja swords just about anywhere in
Oakland, but picking a Masterlock is
"appalling". </div>
<div><br>
</div>
<div>-Rusty<br>
<br>
</div>
<br>
<div class="gmail_quote">
<div>On Wed, Feb 27, 2013 at 7:31 PM, Anca
Mosoiu <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:anca@techliminal.com"
target="_blank">anca@techliminal.com</a>></span>
wrote:<br>
</div>
<blockquote class="gmail_quote"
style="margin:0 0 0 .8ex;border-left:1px
#ccc solid;padding-left:1ex">
<div>
<div>Hi everyone,
<div><br>
</div>
<div>Heads up. <span></span>Looks like
some folks aren't too happy that
people are learning how to pick
locks this weekend.</div>
<div><br>
</div>
<div><span
style="font-family:'.HelveticaNeueUI';white-space:nowrap"><a
moz-do-not-send="true"
href="http://abclocal.go.com/kgo/story?section=news/local/east_bay&id=9010047"
target="_blank">http://abclocal.go.com/kgo/story?section=news/local/east_bay&id=9010047</a></span><br>
</div>
<div><br>
</div>
<div>Here is Oakland Local's response:</div>
<div><br>
</div>
<div><span
style="font-family:'.HelveticaNeueUI';white-space:nowrap"><a
moz-do-not-send="true"
href="http://m.oaklandlocal.com/article/oaklands-mayor-quan-apologizes-mentioning-weekend-lockpicking-class-really"
target="_blank">http://m.oaklandlocal.com/article/oaklands-mayor-quan-apologizes-mentioning-weekend-lockpicking-class-really</a></span><span><font
color="#888888"><br>
</font></span></div>
<span><font color="#888888">
<div><br>
</div>
<div>Anca</div>
<br>
<br>
-- <br>
-=-=-=-
<div>Anca Mosoiu | Tech Liminal</div>
<div><a moz-do-not-send="true"
href="mailto:anca@techliminal.com"
target="_blank">anca@techliminal.com</a></div>
<div>M: <a moz-do-not-send="true"
href="tel:%28510%29%20220-6660"
value="+15102206660"
target="_blank">(510) 220-6660</a></div>
<div><a moz-do-not-send="true"
href="http://techliminal.com"
target="_blank">http://techliminal.com</a>
| T: @techliminal | F: <a
moz-do-not-send="true"
href="http://facebook.com/techliminal"
target="_blank">facebook.com/techliminal</a></div>
<br>
</font></span><br>
</div>
</div>
<div>_______________________________________________<br>
sudo-discuss mailing list<br>
<a moz-do-not-send="true"
href="mailto:sudo-discuss@lists.sudoroom.org"
target="_blank">sudo-discuss@lists.sudoroom.org</a><br>
<a moz-do-not-send="true"
href="http://lists.sudoroom.org/listinfo/sudo-discuss"
target="_blank">http://lists.sudoroom.org/listinfo/sudo-discuss</a><br>
<br>
</div>
</blockquote>
</div>
<span><font color="#888888"><br>
<br clear="all">
<div><br>
</div>
-- <br>
<font><span>Cheers,</span></font>
<div><br>
</div>
<div>Rusty Lindgren<br>
<font size="4"><font
style="font-family:verdana,sans-serif;color:rgb(0,51,0)"><b
style="background-color:rgb(0,0,0)"><span
style="background-color:rgb(0,51,0);font-family:arial
black,sans-serif"><span
style="background-color:rgb(0,51,0)"></span></span><span
style="background-color:rgb(255,255,0)"></span></b></font><br
style="font-family:arial
black,sans-serif">
<span style="font-family:arial
black,sans-serif"></span></font><br>
<br>
<br>
</div>
</font></span><br>
_______________________________________________<br>
sudo-discuss mailing list<br>
<a moz-do-not-send="true"
href="mailto:sudo-discuss@lists.sudoroom.org"
target="_blank">sudo-discuss@lists.sudoroom.org</a><br>
<a moz-do-not-send="true"
href="http://lists.sudoroom.org/listinfo/sudo-discuss"
target="_blank">http://lists.sudoroom.org/listinfo/sudo-discuss</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
<br>
_______________________________________________<br>
sudo-discuss mailing list<br>
<a moz-do-not-send="true"
href="mailto:sudo-discuss@lists.sudoroom.org">sudo-discuss@lists.sudoroom.org</a><br>
<a moz-do-not-send="true"
href="http://lists.sudoroom.org/listinfo/sudo-discuss"
target="_blank">http://lists.sudoroom.org/listinfo/sudo-discuss</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
sudo-discuss mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:sudo-discuss@lists.sudoroom.org">sudo-discuss@lists.sudoroom.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.sudoroom.org/listinfo/sudo-discuss">http://lists.sudoroom.org/listinfo/sudo-discuss</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
sudo-discuss mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sudo-discuss@lists.sudoroom.org">sudo-discuss@lists.sudoroom.org</a>
<a class="moz-txt-link-freetext" href="http://lists.sudoroom.org/listinfo/sudo-discuss">http://lists.sudoroom.org/listinfo/sudo-discuss</a>
</pre>
</blockquote>
<br>
</body>
</html>