zipper bypass

ITS Tactical demonstrates how a ballpoint pen can open a zippered suitcase without leaving a trace, bypassing its lock, and suggests countermeasures.

Deviant Ollam, head of a physical penetration testing team, presents tactics for getting into buildings, from bypassing door levers with a wire to defeating bank doors. He argues that physical security is often surprisingly weak.

The Lock Picking Lawyer tests the supposedly unpickable lock designs built by the Stuff Made Here channel. He looks for bypasses and weaknesses in the novel anti-picking mechanisms.

Deviant Ollam shows that most physical attacks on doors bypass the lock, with photo and video examples of how doors, frames and hardware get defeated. It is a physical security talk from Shakacon.

A LockPickingLawyer video showing that a padlock sold as an Amazon's Choice high-security product can be opened trivially, with no picking needed.

Deviant Ollam's two-hour conference talk explains how elevators work, from the pit and buffers to the car top, controller logic and access-control features. It shows how this knowledge can be used for optimization and for bypassing building security.

Deviant Ollam and Howard Payne give an in-depth DEF CON 22 explanation of how elevators work, from the pit to the penthouse. It covers their control modes and how pen testers use elevators to bypass building security.

A HOPE X talk giving an in-depth explanation of how elevators work, from their history in hacker culture to using their control systems to bypass building security. It covers features and abilities of elevators that most people never see.

Engineer Stuff Made Here builds two new supposedly unpickable locks with different designs and sends them to the Lock Picking Lawyer to see whether they can be defeated. The video covers the novel anti-picking mechanisms.

Karla Burnett presents real phishing campaigns run against a Bay Area tech company, including conversion rates and how existing protections were bypassed. She argues for evidence-based techniques to prevent credential phishing, not just mitigate it.

Jayson E. Street's DEF CON 19 talk shows photos from real security engagements where he was already inside client facilities, illustrating how social engineering and physical intrusion can cause huge losses. For each attack he also explains what defenses would have stopped him.

A DEF CON 19 talk by datagram introducing tamper-evident devices. It reviews how seals and similar products are designed and shows that they are often easily defeated, drawing on the DEF CON tamper-evident contest.

Matt Cutts of Google explains what cloaking is: serving different content to search engine crawlers than to users. He covers why it violates Google's webmaster guidelines.

The video argues that machine-learning-based aimbots, which read the screen and drive the controls externally, could make cheating in FPS games undetectable. It explains how conventional aimbots work, how the new approach differs, and speculates on possible detection.

LockPickingLawyer examines a challenge involving a tamper-sealed Abus lock and shows how the tamper seal can be defeated.