DEF CON 22 - Deviant Ollam & Howard Payne - Elevator Hacking - From the Pit to the Penthouse

แชร์
ฝัง
  • เผยแพร่เมื่อ 5 ม.ค. 2015
  • Elevator Hacking - From the Pit to the Penthouse
    Deviant Ollam The CORE Group
    Howard Payne The CORE Group
    Throughout the history of hacker culture, elevators have played a key role. From the mystique of students at MIT taking late-night rides upon car tops (don't do that, please!) to the work of modern pen testers who use elevators to bypass building security systems (it's easier than you think!) these devices are often misunderstood and their full range of features and abilities go unexplored. This talk will be an in-depth explanation of how elevators work... allowing for greater understanding, system optimizing, and the subversion of security in many facilities. Those who attend will learn why an elevator is virtually no different than an unlocked staircase as far as building security is concerned!
    While paying the bills as a security auditor and penetration testing consultant with his company, The CORE Group, Deviant Ollam is also member of the Board of Directors of the US division of TOOOL, The Open Organisation Of Lockpickers. Deviant runs the Lockpicking Village with TOOOL at HOPE, DEFCON, ShmooCon, etc, and he has conducted physical security training sessions for Black Hat, DeepSec, ToorCon, HackCon, ShakaCon, HackInTheBox, ekoparty, AusCERT, GovCERT, CONFidence, the United States Military Academy at West Point, and the United States Naval Academy at Annapolis. His favorite Amendments to the US Constitution are, in no particular order, the 1st, 2nd, 9th, & 10th.
    Twitter: @deviantollam, @TCGsec
    Howard Payne is an elevator consultant from New York specializing in code compliance and accident investigations. He has logged over 9,000 hours examining car-tops, motor rooms, and hoistways in cases ranging from minor injuries to highly-publicized fatalities, and has contributed to forensic investigations that have been recognized by local, State, and Federal courts. Howard has appeared on national broadcast television making elevators do things they never should. When he's not riding up and down high-rise hoistways, he moonlights as a drum and bass DJ and semi-professional gambler. His favorite direction is Up and his favorite elevator feature is riot mode.
    Twitter: @SgtHowardPayne
  • วิทยาศาสตร์และเทคโนโลยี

ความคิดเห็น • 507

  • @CBaggers
    @CBaggers 5 ปีที่แล้ว +264

    This is the only tech talk I've ever seen where multiple presenters shared the floor and it wasnt an awkward, hokey, stilted mess. Well done to these guys, and for the excellent content

    • @ShahabSheikhzadeh
      @ShahabSheikhzadeh 3 ปีที่แล้ว +10

      this is what happens when you rehearse many, many times :)

    • @MiguelisNoisy
      @MiguelisNoisy ปีที่แล้ว +6

      34:19

  • @supremebeme
    @supremebeme 5 ปีที่แล้ว +358

    "we have seven minutes, and we're going to use all seven minutes"

    • @pickle7056
      @pickle7056 5 ปีที่แล้ว +10

      There's a sex joke in there somewhere...

  • @maneatingcheeze
    @maneatingcheeze 5 ปีที่แล้ว +362

    The big thing I learned from this talk is that only professionals should work the shaft.

    • @atanaciogarza7176
      @atanaciogarza7176 4 ปีที่แล้ว +13

      underrated post. LMFAO

    • @deathless12345678
      @deathless12345678 4 ปีที่แล้ว +10

      We work it well. Up and down all day long.

    • @Jules-pr9kn
      @Jules-pr9kn 4 ปีที่แล้ว +9

      you're at 69 likes so I'm not allowed to like it sorry

  • @mayhem661616
    @mayhem661616 4 ปีที่แล้ว +131

    There was a case last year in California. A murderer on life sentence escaped by making a copy of the wardens master key. He got a really close look because the wardens key was in a photo on a pamphlet given to prisoners on their way into lock up.

  • @calamaria9221
    @calamaria9221 5 ปีที่แล้ว +488

    The Defcon guys really need to stop interrupting talks in the middle of them. Also lmao "I hope I didn't get you off time" when they didn't care anyway and then comes 7 minutes early to get them off the stage early.

    • @soyebpatel2994
      @soyebpatel2994 9 หลายเดือนก่อน

      😅😅😊😅w😊😊😮😮😮.😂😢a😮😊😅😅 8 x 😂😂🎉😂🎉

    • @RandomUser2401
      @RandomUser2401 8 หลายเดือนก่อน +12

      fr. what buss do these guys have being on the stage. let the flippin speakers alone.

    • @ViKODiN_
      @ViKODiN_ 8 หลายเดือนก่อน +8

      Thought the same thing myself. Why not do the shots after or in the beginning instead of totally ambushing the speakers (who were killing it) 😂😂. And then he kinda has this condescending approach at the end, and the inflection he uses when trying to lure them w alcohol shots that they probably don’t give two shxts about anyways, speaking to them like pets or subhuman. Just weird behavior 😅😂

    • @Cfomodz
      @Cfomodz 5 หลายเดือนก่อน +3

      I understand what you’re saying, and it was a bit cringe to hear them call him a new speaker, and then later refer to them as new speaker”s” when he already said he wasn’t…. And also… is & was kind of famous in this community, so… 🤷‍♂️
      but annnnyway, if you’ve never been to DEFCON in person or didn’t go to anything but talks/have only watched talks online then you likely aren’t familiar with goons being goons and doing goony stuff, but that was kind of unsurprising goon behavior if we’re being real, and they are most all actually really cool, but they are hackers/nerds in positions of authority and you can tell they’re a bit awkward and uncomfortable because that’s the type of person most of us are.
      I recognize this comment is 4y old, but it’s getting a ton of likes and more recent replies, so I just wanted to say this in fairness to them and the interruption.
      When stuff like this happens live it’s a lot less jarring as well. I don’t know if it’s on YT but I think it was DC 17 when the fire marshal showed up and 🐻 had to clear the main hall of the Riviera for like an hour. That was indeed disruptive, but stuff like this is mostly taken in stride and I would venture to say happens at every con.

  • @UselessDuckCompany
    @UselessDuckCompany 7 ปีที่แล้ว +1570

    this talk was fascinating. I found the interruptions to be a bit annoying though.

    • @damstachizz
      @damstachizz 7 ปีที่แล้ว +293

      The interruptions were extremely fucking annoying, the guys are up there to talk let them talk

    • @jimenezdecosta8478
      @jimenezdecosta8478 7 ปีที่แล้ว +68

      It was the last talk of the day, i can understand they do something funny at the end.

    • @jeremyhonner6469
      @jeremyhonner6469 7 ปีที่แล้ว +148

      u see much defcon? every new talker has to take a shot, its been tradition for ages.

    • @xl000
      @xl000 6 ปีที่แล้ว +234

      that bro attitude... Alcohol is not something everyone enjoys

    • @Abracadanie1
      @Abracadanie1 6 ปีที่แล้ว +40

      There is another video which is a longer version of this talk on youtube, same guys, just a different Venue and two hours in stead of one.

  • @levo75
    @levo75 5 ปีที่แล้ว +834

    As an elevator mechanic: very good talk!
    Also: follow their advice on not entering the shaft if you don't know what you're doing, you will die.

    • @Charliepinman
      @Charliepinman 5 ปีที่แล้ว +32

      Ill take that advice!

    • @tadferd4340
      @tadferd4340 5 ปีที่แล้ว +67

      That to me says that there needs to be safer hoistway designs to keep elevator techs safe. Everyone deserves the safest possible workplace. Some jobs are inherently unsafe but elevator maintenance shouldn't be one.

    • @SF-dy6hn
      @SF-dy6hn 5 ปีที่แล้ว +31

      @@tadferd4340 meh kinda like saying we need safer electricity. if you know what the fuck you are doing study the specific building schematics go to school for it and use proper precaution you'll be fine. it would probably require a dickload of research that your average goofball thinks he knows, but doesn't. with computers you are given a certain amount of leeway that the physical world just doesn't offer.

    • @tadferd4340
      @tadferd4340 5 ปีที่แล้ว +22

      @@SF-dy6hn I disagree. You can design safer working environments, or create other engineering solutions. This is often the best solution. Humans are very good at making mistakes, even when properly trained.
      In other cases, no amount of training will help protect you. Using electricity as an example. Racking circuit breakers is dangerous business. Why rack in person when you can do it remotely? People will say cost but we need to stop putting monetary cost before cost of life.

    • @volundrfrey896
      @volundrfrey896 5 ปีที่แล้ว

      That sounds like a challenge to me

  • @lousassel7809
    @lousassel7809 4 ปีที่แล้ว +110

    I spent an hour learning about elevators and was entertained the entire time. I think my 'tism is flaring up

    • @ofyourbluesky
      @ofyourbluesky 3 ปีที่แล้ว +5

      You and me both, bud

    • @Jonathan.Boring
      @Jonathan.Boring 3 ปีที่แล้ว +7

      @@ofyourbluesky I’ve watched this talk over three times. Me three bud

    • @thesomewhatfantasticmrfox
      @thesomewhatfantasticmrfox 3 หลายเดือนก่อน

      Y'all just like me for real.
      Thinking about something, then trolling across the internet for some strange info you merely thought about six hours ago.

    • @119793
      @119793 2 หลายเดือนก่อน

      yeah i don’t think any normal people are on the Hour Long Elevator Video to be fair i think we’re all tism here

  • @sixstringedthing
    @sixstringedthing 5 ปีที่แล้ว +211

    90% of "elevator based security" relies on Joe Public looking at the keyswitches on the COP or a slightly-ajar push panel and thinking to themselves...
    "that looks important... better not touch it or I might get in trouble".
    The number of times I've opened emergency phone panels and found priority/maintenance/fire service keys just right there in the switches, waiting to be turned...

    • @Cfomodz
      @Cfomodz 5 หลายเดือนก่อน

      Easy, just put “Do not turn key” 🤣 on it

  • @caelan5301
    @caelan5301 2 ปีที่แล้ว +37

    Back when I was in high school, any time me and my friends wanted to skip class, we would go to the elevator (it had a lock but one of us figured out that we could stick some paper in and make it open) and my buddy had some knowledge about all this, and we would get it in independent service mode and just hide in the elevator until the period ended. I've got fond memories playing smash with my friends in the elevator.

    • @RaW_Chaos
      @RaW_Chaos ปีที่แล้ว +13

      nice, skipping class and smashing with the homies in an elevator, very classy

    • @electricimpulsetoprogramming
      @electricimpulsetoprogramming ปีที่แล้ว +1

      @@RaW_Chaos LMAOOOOOOOOOOOOO

    • @-Ncrypt
      @-Ncrypt 9 หลายเดือนก่อน +1

      @@RaW_Chaosthis deserves so much more than 7 likes 😢

  • @johnantonopoulous6381
    @johnantonopoulous6381 7 ปีที่แล้ว +453

    I work in a hospital and have been in the elevator when med flight landed and holy crap that thing moves fast when they hit the ER Call button.

    • @SondreGrneng
      @SondreGrneng 3 ปีที่แล้ว +24

      ​@Trantor The Troll To be fair, if someone is going to the ER, chances are, they need to be there 5 minutes ago. Especially if he's coming in from the air.

  • @StephenOwen
    @StephenOwen 6 ปีที่แล้ว +173

    Great job soldiering on through the interruptions!

    • @kordru
      @kordru 4 ปีที่แล้ว +2

      Very good at it too!

    • @cravenmoorehead5657
      @cravenmoorehead5657 3 ปีที่แล้ว +2

      I wish that guy would shut the fuck up jesus!

  • @Volvith
    @Volvith 5 ปีที่แล้ว +84

    About 13 minutes into this talk, i understood why this had to be the last talk at the last day of DEFCON.
    ... Rule #1: Don't trust people to know what they're doing, people are idiots. You can invent better idiot proofing for anything, but the world will just invent a better idiot.

  • @rchaffer
    @rchaffer 7 ปีที่แล้ว +327

    These DEFCON talks are rediculously fascinating! Stop killing my productivity!

    • @sbalogh53
      @sbalogh53 6 ปีที่แล้ว +9

      I should have been in bed 5 hours ago. It is now 5:40am. FML!

    • @YoUtUbEhAnDlEsArEgReAt
      @YoUtUbEhAnDlEsArEgReAt 5 ปีที่แล้ว +5

      ridiculously*

    • @haass...9065
      @haass...9065 ปีที่แล้ว +1

      @@sbalogh53 same!!

    • @DeetexSeraphine
      @DeetexSeraphine 7 หลายเดือนก่อน

      Never (this week) has a comment made by another read so truthful

  • @uzaiyaro
    @uzaiyaro 6 ปีที่แล้ว +286

    Anti nuisance mode works a little differently in quite a few lifts in Australia. If you press all the floor buttons, they *will* be registered, and the lift will make two stops. If it detects that no one has entered or exited for two stops, it deletes the rest of the calls and becomes idle/ready again, because the controller can reasonably assume that there is no one in it. I thought that implementation was quite clever, because it is possible that many legitimate calls may be punched in at the same time, for example a ton of people get on at one floor, you're standing next to the panel and you're kind enough to ask, "what floor do you guys need?" 4, 6, 8, 9, 10, 14, etc etc.

    • @DataumCats
      @DataumCats 5 ปีที่แล้ว +19

      it can work that out by knowing it weight.
      Threeish people got on the car but 7 floors got pressed? yea nah. Car empty and any floor is pressed? yea nah.
      15 people get on and 10 floors are pressed? Just fine.

    • @shepd3
      @shepd3 5 ปีที่แล้ว +29

      @@DataumCats So fat people get to tamper a little bit more? Being overweight has it's advantages!

    • @aolson1111
      @aolson1111 4 ปีที่แล้ว +21

      @@DataumCats And skinny people won't be able to make it to their floor.

    • @amyx231
      @amyx231 4 ปีที่แล้ว +8

      A Olson Summer camp group enters elevator. They each have rooms on a different floor of the hotel. Multiple floors pressed.
      Elevator: nope, this one obese person doesn’t need 10 floors.

    • @CaptainBlagbird
      @CaptainBlagbird ปีที่แล้ว +2

      @@aolson1111 Thus skinny people get skinnier by having to walk a few floors most of the time. xD

  • @michaelodonoghue7464
    @michaelodonoghue7464 4 ปีที่แล้ว +10

    I was working Security in a Building and whilst travelling in the elevator with the Security Manager asked how often Security Tested the Emergency Phones.
    His response was that that was covered by the Lift Maintenance Contract.
    Yes the Circuits were Tested by Lift Maintenance for Operability, but not for Destination of Call.
    A Week late a Man got trapped in an Elevator for 12 Hours.
    His Emergency Phone although working was routed to an Answering Service in an Unattended Department.
    Four Hours after the Man had been rescued from the Elevator, the Security Centre got a Panic Phone Call from the Head of a Department who had just listened to 6 Phone Call from a panicked individual trapped in an Elevator.
    Next day, Security Personnel were Instructed to Test Emergency Phones Regularly (Daily).

  • @licustoms
    @licustoms 5 ปีที่แล้ว +38

    A family member whom has passed away leaving me with all of their stuff was an elevator repair and installer for a very long time. This was really fascinating to see... and now I know what some of the special tools are that I have. Much appreciated! I have no idea what to do with them but for now I will keep them.

  • @Al-.-ex
    @Al-.-ex 11 หลายเดือนก่อน +9

    Love the very sensible, mature & *emphasised* safety part at the end. Felt like I could trust these guys a lot more with how much they drilled safety into your head the whole way through.

  • @pyro4life64
    @pyro4life64 4 ปีที่แล้ว +14

    This has to be the most interesting elevator video on here, even as a 20 plus year elevator mechanic I found this video very well done.

    • @Huntracony
      @Huntracony 4 ปีที่แล้ว

      Out of curiosity, did you learn anything from it?

  • @jformaldehydem
    @jformaldehydem 5 ปีที่แล้ว +7

    I can confirm that holding the door closed button on an elevator did work on one specific location for me, for at least a year. It was at the library at the university I studied at, and I rarely abused my newfound powers...rarely...But I have never seen it work since. And I don't know how people think it works, but it was clearly a bug in the operating software, that has since been patched (I mean, I DID graduate 16 years ago). The elevator would stop as normal, which was your signal to hit the button, and you'd hear the actuators rapidly cycle to open and then closed, and the elevator would continue on its journey. I can only imagine how crazy this would drive the people on the other side, especially since I assume it would register that the call had been answered and would reset the call flag.

    • @ErebuBat
      @ErebuBat 5 ปีที่แล้ว

      jformaldehydem that sounds like the relay logic issues they mentioned.

  • @GaryCameron780
    @GaryCameron780 8 ปีที่แล้ว +346

    Pressing the buttons for all the floors in a 34 storey freight elevator will tie it up for 45 minutes. A work mate thought this would be a good idea and nearly got canned. (Said building only has one freight elevator)

    • @hemi4722
      @hemi4722 7 ปีที่แล้ว +14

      Gary Cameron haha that's awesome

    • @SirFrag32
      @SirFrag32 6 ปีที่แล้ว +42

      Every time I've tried this the system realizes what you're doing after a few floors and clears the panel heh

    • @xyzshantaram
      @xyzshantaram 6 ปีที่แล้ว +9

      Pressing the button again will deactivate that destination.

    • @mrlithium69
      @mrlithium69 5 ปีที่แล้ว +30

      not always

    • @AdeptPaladin
      @AdeptPaladin 5 ปีที่แล้ว +34

      Then his building should use the anti nuisance function that elevators have in order to prevent such asshattery

  • @amyshaw893
    @amyshaw893 5 ปีที่แล้ว +38

    that show with the guy cutting the elevator cable is called the secret life of machines

    • @stevewalston7089
      @stevewalston7089 5 ปีที่แล้ว +3

      Thanks! Watched the program years ago but could not remember the name. Most excellent series.

  • @SaintNobody
    @SaintNobody 8 ปีที่แล้ว +109

    My favorite elevator control? No buttons, but a camera.
    On the top floor of the building, "Control," says they don't know you and asks for your chit number. You go to the top and prove you're supposed to be there. Then, they give you a chit. Four hours later, they recognize you and you just tell them where you want to go and they move you.
    Second favorite elevator control: Medeco key leading to floor with a surveillance killzone. You identify yourself, even though they know you, then use your OTHER medeco key to obtain access.
    If you're doings anything like this, bring your written orders to avoid detention.

    • @peregrinusoblivione4967
      @peregrinusoblivione4967 5 ปีที่แล้ว +1

      Very cool.

    • @roswalt1
      @roswalt1 4 ปีที่แล้ว +8

      Definitely don't try this in a building that handles government medical claims. You will not have a good day unless you have your "get out of jail" pen test contract with you.

    • @konzetsu6068
      @konzetsu6068 4 ปีที่แล้ว +1

      Been to a condo in London, 6 cars, no call buttons, every elevator call going up was made from the reception desk.

  • @poohbear01x48
    @poohbear01x48 5 ปีที่แล้ว +8

    I live in Phoenix and before the news about the keys dropped, it was essentially common knowledge what the fire access code for all gated communities was. Phoenix fire has a security issue for sure.

  • @cdnbacon2001
    @cdnbacon2001 5 ปีที่แล้ว +9

    4am and i watched the whole thing. not sure how i got here but as an electrician and former security guard (7 years) i was fascinated.

  • @davinaz6885
    @davinaz6885 3 ปีที่แล้ว +4

    Its great that the baby theft elevator mode exists. It's also the saddest thing at the same time

  • @CoolMoD521
    @CoolMoD521 4 ปีที่แล้ว +5

    I can't believe I watched an hour long video about elevators.

  • @linolium4814
    @linolium4814 5 ปีที่แล้ว +30

    I'm a wheelchair user so elevators are kind of my thing.
    This talk is really interesting and I learnt a lot. :)

    • @matthewhall2399
      @matthewhall2399 3 ปีที่แล้ว

      Learned*

    • @linolium4814
      @linolium4814 3 ปีที่แล้ว +4

      @@matthewhall2399 Sorry English isn't my first language

    • @Ryan_Thompson
      @Ryan_Thompson 20 วันที่ผ่านมา

      @@linolium4814 "Learnt" is actually correct in British English and places that borrow from that, which covers a lot of English speakers! "Learned" is more common in US-and-friends English. Sorry you had to go two years before learning the other guy is not only an annoying pedant, but an incorrect one at that. 🙂
      (I enjoyed the talk very much, too.)

  • @fdsman
    @fdsman 5 ปีที่แล้ว +30

    The irony about the elevatorkeys bit is that howard owns the site lmao

    • @danielr2194
      @danielr2194 4 ปีที่แล้ว +2

      fdsman LOL, makes it do much better

    • @ironmatic1
      @ironmatic1 ปีที่แล้ว +1

      Are you sure he owns elevatorkeys and not pentestingkeys?

  • @JaredJanhsen
    @JaredJanhsen 4 ปีที่แล้ว +4

    So many high-rise convention hotels need the full-load bypass feature. I've been in a 23 story hotel in Dallas during a mass exodus from an event and waited over AN HOUR in the hall for an elevator I could hop on with my luggage.
    The following year at the same hotel and the same event, I just said "fuck-it" and tried the housekeeping elevator which wasn't behind a single locked door. The real bitch was finding my way out of the staff area to leave.

    • @maritimemisfits3360
      @maritimemisfits3360 4 ปีที่แล้ว

      I would have just used the stairs rather than wait

    • @JaredJanhsen
      @JaredJanhsen 4 ปีที่แล้ว +1

      @@maritimemisfits3360 not when you're on the 22nd floor and have a full desktop PC to bring down with you

    • @maritimemisfits3360
      @maritimemisfits3360 4 ปีที่แล้ว

      @@JaredJanhsen Down is the easy part, desktop pc's don't weigh that much. Any resonably fit person could do the stairs without issue

    • @JaredJanhsen
      @JaredJanhsen 4 ปีที่แล้ว +1

      It wasn't just a desktop. It was a full tower gaming rig plus widescreen monitor plus bag of cables and accessories plus my suitcase packed for eight nights and my snack/beverage cooler.... And the other couple thousand people with the same load out.

  • @DownTownDowns
    @DownTownDowns 4 ปีที่แล้ว +23

    The people interrupting need to do some elevator-surfing.....and hopefully it goes wrong for them

  • @mutatedpixel8042
    @mutatedpixel8042 9 ปีที่แล้ว +33

    Super cool! learned a bunch of stuff I didnt know (including the escalator helicopter!)

  • @MikoWilson
    @MikoWilson 5 ปีที่แล้ว +153

    Defcon dude's interrupting talks is pretty old at this point. It's super cringe. Just stopppp.

  • @robin42
    @robin42 ปีที่แล้ว +1

    One of the best defcon conference I've heard. It was fascinating! Thank you so much

  • @jamiehanrahan4705
    @jamiehanrahan4705 5 ปีที่แล้ว +6

    Just FYI - the hydraulic-operated glass elevator on the El Cortez Hotel reached the "Sky Room" on the 15th storey (counting the ground floor, the origin, as the 1st).

  • @biggerdog2458
    @biggerdog2458 2 ปีที่แล้ว +2

    I appreciate not having to watch any ads on such a long and awesome video!

  • @spazmaticaa7989
    @spazmaticaa7989 5 ปีที่แล้ว +15

    Me: ooh, I interesting video maybe I'll watch 20mins do my chores and come back later.
    Hour later,
    This was awesome...

  • @curtiswaters7415
    @curtiswaters7415 5 ปีที่แล้ว +9

    Just discovered Deviant and his speeches. What an incredible guy.

    • @MmeHyraelle
      @MmeHyraelle 5 ปีที่แล้ว +3

      same and i love him for not being afraid to swear publicly in talks

  • @NapoleonGelignite
    @NapoleonGelignite 5 ปีที่แล้ว +12

    Great to see Tim Hunkin on this. Secret life of machines was a great show.

  • @zephyfoxy
    @zephyfoxy ปีที่แล้ว +4

    "We're going to interrupt this talk to make people do shots and then try to end the talk early"
    I think these organizers had too many shots of their own already...

  • @baileyhollis4086
    @baileyhollis4086 7 ปีที่แล้ว +146

    These guys are setting up for one huge heist...

    • @leavewe
      @leavewe 5 ปีที่แล้ว +18

      *hoist

    • @robertoswalt319
      @robertoswalt319 4 ปีที่แล้ว +15

      Why rob some place when you can get paid to do it legally over and over again?

    • @khhnator
      @khhnator 4 ปีที่แล้ว +1

      well they did warn everyone to not use elevators for security

    • @swine13
      @swine13 3 ปีที่แล้ว

      @@robertoswalt319 agreed - at a certain point these skills will always pay better and more reliably if done for the blue team (so to speak)

  • @TheEzzran
    @TheEzzran 5 ปีที่แล้ว +16

    That elevator at around 42:00 would be easy even without the fire key. Just call it, step inside, then wait for someone else to call it to leave and walk out on the next floor. I mean, not as quick as the other way, but you're in.

    • @elguapo1690
      @elguapo1690 5 ปีที่แล้ว +6

      Holy shit. That would have scared the management a lot more than this guy with his keys.

    • @rudolphfulmer1710
      @rudolphfulmer1710 5 ปีที่แล้ว +12

      Except the person getting off the elevator would have called it in to security since they only used that back elevator as an exit. It technically could be done but it increases the likelihood of detection exponentially unnecessarily.

  • @smrts
    @smrts 5 ปีที่แล้ว +10

    4:46 "the highest I've ever seen is eight stories" I work a convention in green bay the Hyatt attached to the Ki Convention center is 8 or 9 stories(can't remember for sure off hand) they have a piston elevator and it is the slowest thing ever.

    • @firesurfer
      @firesurfer 5 ปีที่แล้ว +2

      Macy's Herald sq freight elevators go up to 8 or 9th floor. It's hydraulic and can lift entire 40 foot trailers. The tractor stays on the ground. At least they used to, they renovated the store and I don't see the loading docks anymore.

  • @theenterpriselab9401
    @theenterpriselab9401 7 ปีที่แล้ว +10

    my favorite defcon talk

  • @nitricpumps
    @nitricpumps 5 ปีที่แล้ว +11

    I never thought elevators could be so interesting

  • @jasonmyneni8605
    @jasonmyneni8605 3 ปีที่แล้ว +5

    I’ve been kicked off an elevator while it’s on code blue mode. I also have a code blue key and it’s really cool. However, if someone uses and a code isn’t in progress in the computer, it will activate the code system so doctors (and everyone else who has a key, like me,) can’t drive them around at their will.

  • @Finneyyy
    @Finneyyy 6 ปีที่แล้ว +4

    One of the most informative talks I've ever watched.

  • @nicholas_scott
    @nicholas_scott 5 ปีที่แล้ว +2

    A trick I've seen on some elevators is if you try to open the door on any particular floor, it will cause wherever the elevator is, to stop and open its doors, briefly.... then close and continue on. Its a terrible design flaw.

  • @furydeath
    @furydeath 7 ปีที่แล้ว +47

    43:39 that's a mighty black box xD

    • @kevinward6077
      @kevinward6077 7 ปีที่แล้ว +2

      furydeath

    • @TheSuckerOfTheWorld
      @TheSuckerOfTheWorld 7 ปีที่แล้ว +3

      You probably couldn't see through it on the actual talk, but here we can! The bitting is 0-3-2-3-4-8

    • @NetRolller3D
      @NetRolller3D 7 ปีที่แล้ว +1

      Or you can just read it off the key itself, as that's not blacked out.

  • @dasstackenblochen9250
    @dasstackenblochen9250 5 ปีที่แล้ว +7

    I've seen Euro-profile cylinders used in many eleveator keyswitches (even dimple cores and stuff like that), however, the switch panels are always kinda thin -- so destructive access would remain very simple.

  • @ogey_elise
    @ogey_elise 6 หลายเดือนก่อน +2

    Deviant and Howard are both GOATed.

  • @TheOReport1994
    @TheOReport1994 5 ปีที่แล้ว +4

    Started with the Pen testing and now I'm here XD Bloody brilliant!

    • @pickle7056
      @pickle7056 5 ปีที่แล้ว

      I've been stuck in a loop for 3 days! Send help! :o

  • @lohphat
    @lohphat 8 ปีที่แล้ว +37

    "Rope" doesn't only mean jute/nylon. When first invented, cables were called wire or steel rope.

  • @PlatinumTurk3y
    @PlatinumTurk3y 5 ปีที่แล้ว +8

    Now i have a bit less Hollywood induced crash anxiety whenever I use an elevator

  • @legion162
    @legion162 4 ปีที่แล้ว +1

    I thought this was going to be boring af, but watched it all and was pretty interested. Thanks.

  • @noone2you622
    @noone2you622 7 ปีที่แล้ว

    One of my favorite talks!

  • @chaos.corner
    @chaos.corner 7 ปีที่แล้ว +1

    Excellent talk. Thanks. I find this kind of thing fascinating.

  • @skilllmatic
    @skilllmatic 7 ปีที่แล้ว

    awesome talk and awesome guys. this is now one of my favorites!

  • @dondemarco007
    @dondemarco007 5 ปีที่แล้ว

    One of the best talks I've seen

  • @testsubjectism
    @testsubjectism 7 ปีที่แล้ว +85

    Did anyone else see that you could see the numbers behind the black bars? seems like a ironic oversight

    • @danmana
      @danmana 7 ปีที่แล้ว +3

      made me look

    • @joshuaraydunaway
      @joshuaraydunaway 5 ปีที่แล้ว +26

      its only on the first slide of state-specific keys

    • @polyjohn3425
      @polyjohn3425 5 ปีที่แล้ว +58

      They're just blacked out as a courtesy gesture. The whole point of a lot of this is security, and relying on the secrecy of key bitting as a security measure is atrocious practice. And considering they showed those slides after explaining exactly how they got those numbers and how easy it was, hiding the bit numbers is barely useful. Anyone who wants to figure them out can figure them out quite easily, that's kinda the point of the talk.

  • @FurryWrecker911
    @FurryWrecker911 5 ปีที่แล้ว +1

    I woke up today to 3D model and draw. Just chill on a Sunday. I did that with this playing in the background and learned so much about elevators that I was not expecting.

  • @marksmadhousemetaphysicalm2938
    @marksmadhousemetaphysicalm2938 25 วันที่ผ่านมา

    Working as an emergency/trauma nurse we used our badges all the time if the helicopter came to the roof pad…it gave us one of the elevators right to the roof and locked it out and allowed us to take a patient to the OR directly, SICU, or Cath Lab, or ED on the bottom floor…we’d get in a bunch of trouble for misusing our badges but they worked on more than just that one bank of elevators since many of us were on the code team and covered other parts of the hospital and satellite facilities. Doesn’t mean late at night we didn’t speed things up for ourselves occasionally…especially end of shift…

  • @kalasnikoch
    @kalasnikoch 4 ปีที่แล้ว +2

    I really should be sleeping but here i am learning about elevators.

  • @Nalianna
    @Nalianna 7 ปีที่แล้ว +12

    Entertaining, AND safety conscious? awesome!

  • @magin9228
    @magin9228 4 ปีที่แล้ว +3

    if an elevator ever told me to get out, i'd stay in just out of curiosity.

    • @Huntracony
      @Huntracony 4 ปีที่แล้ว +4

      Elevator: There's a fire! Leave the building immediately!
      You: Hmm, I wonder what happens if I stayed.

  • @ninjaofslo
    @ninjaofslo 5 ปีที่แล้ว +4

    Hehe. Love it. Fire alarm tech. elevator keys will absolutely sell me the set. I work with recalls and unless it’s the FEOK1 I have ran into tons of buildings that never have the key

  • @HonestAuntyElle
    @HonestAuntyElle 5 ปีที่แล้ว +1

    Close door hack has worked on exactly 1 elevator that I've tried in Adelaide Australia, I don't remember what type, but it had a custom animation on the digital display, that showed differently

  • @LuciferStarr
    @LuciferStarr 5 ปีที่แล้ว +3

    8:34 It's from "The Secret Life of Machines" which was a quirky, but fascinating program in the 1980s. I don't think they'd get away with a lot of their demos nowadays.

    • @Graham_Langley
      @Graham_Langley 4 ปีที่แล้ว +2

      Chap on the lift was Tim Hunkin.

  • @rudidower
    @rudidower 5 ปีที่แล้ว

    Those old 70's safety ads are really scary. They used to be on late night in the UK.

  • @Parassassin
    @Parassassin 5 ปีที่แล้ว

    Please don’t haxor my laptop! Amazing lecture, could watch these guys all day!

  • @GrymsArchive
    @GrymsArchive 5 ปีที่แล้ว +1

    @8:32 To give credit where it's due: Those 2 Gents are Tim Hunkin and Rex Garrod from the 80's Tv Series *The Secret Life of Machines* A Damn fine watch!

  • @flecom5309
    @flecom5309 8 ปีที่แล้ว +80

    I'd love more info about that failed mechanical test... link to original video?

    • @Fifury161
      @Fifury161 7 ปีที่แล้ว +6

      The clip is from a (1993!) TV series made for Channel 4 and subsequently shown on the Discovery Channel. Called The Secret Life Of Machines. The series was written by Tim Hunkin, and presented by Tim Hunkin and Rex Garrod. Eighteen programmes were made.
      Here's a direct link to the video on the site: www.exploratorium.edu/ronh/SLOM/0302-The_Lift.html

    • @FLECOM
      @FLECOM 7 ปีที่แล้ว +18

      the video of the motor flying off it's mounts? no it's not, I have watched the secret life of machines many times and for sure that isn't from there.. plus it looks like a cell phone video, pretty sure that wasn't around in 1993 ;)

    • @Fifury161
      @Fifury161 7 ปีที่แล้ว +3

      I was referring to the opening video clip... It's Tim Hunkin and the link I provided is the correct one...

    • @----.__
      @----.__ 7 ปีที่แล้ว +24

      Frank wasn't referring to the opening clip, neither is Flecom. You're off your rails.

    • @CGoody564
      @CGoody564 5 ปีที่แล้ว +5

      @@Fifury161 you obviously wrote this before the end. The video being referred to is obviously not that.

  • @jamisusijarvi646
    @jamisusijarvi646 6 ปีที่แล้ว +3

    Come to Finland, Otis and Kone (Kone is from Finland) are very common, but locks that we use here are very often Abloy locks

    • @wheatley6544
      @wheatley6544 5 ปีที่แล้ว

      So, are you saying that security in Finland is tighter, or is it just a different set of keys that are needed?

  • @evana4622
    @evana4622 10 หลายเดือนก่อน

    Awesome video. Great presentation

  • @TheRealUnconnected
    @TheRealUnconnected 4 ปีที่แล้ว +4

    Elevators (lifts if you speak english) are remarkably strong. Many of my coworkers get freaked out by lifts. I went to school in an office building for 10 years. We had the oldest still running and original lift (it was otis brand) in service in the city, and man did we abuse the shit out of it and it never killed anyone. It was a very large lift (the largest i've ever seen actually) with room for around 20 adults or 30students with capacity of around 1.8t. We would get on at the top floor and all jump at once to get that little zero g feeling (it accelerated downwards very quickly for an elevator), it handled like a tonne of students all hitting it at once and wouldn't stop. We would do 'washing machines' inside the lift, where everyone moves about back and forth with the objective of slamming the lift into the shaft walls, never failed. While i did get stuck in it a couple of times, it was never because of abuse. The building was made in the early 70s and the lift remained in service until around 2008.

    • @deathless12345678
      @deathless12345678 4 ปีที่แล้ว +1

      Old Otis were tanks. Beautiful machines. Did a demo on one, not because of its performance, but its code compliance. Just too old. Early 60s if I remember right

  • @jpe1
    @jpe1 5 ปีที่แล้ว +300

    Sabbath Mode: "It's kind of like hacking God [...] I found a loophole in scripture so I'm smarter than you!"
    pretty much sums up the Jewish faith:)

    • @DJzSith
      @DJzSith 5 ปีที่แล้ว +21

      That was the funniest thing I learned all thay. Never though about solving sabbath day problems before. I can now see a nice market for autonomous cars.

    • @sixstringedthing
      @sixstringedthing 5 ปีที่แล้ว +19

      See the wiki article on "Eruv" for the ultimate way to "legal loophole" your way out of inconvenient holy commandments.

    • @iglidor
      @iglidor 5 ปีที่แล้ว +21

      Tyrone: There is a lot of apliances with sabbath mode. For example electric heaters that can be voice activated. Or even saw oven that is "certified" that you can use it on sabbath days so that you switching switches somehow do not count on that device since it is consecrated or whatever. Quite funny example of how people are walking circles around their own scriptures. But as long as it remains harmless, who actualy cares.

    • @unflexian
      @unflexian 5 ปีที่แล้ว +19

      @@DJzSith Wether autonomous cars are sabbath worthy or not is a legitimate political issue in israel.

    • @jpe1
      @jpe1 5 ปีที่แล้ว +18

      iglidor my Bosch oven has sabbath mode which means that it will automatically set and maintain the oven temp to 85°C (190°F) for the sabbath. My Libeher refrigerator has sabbath mode which means that on the sabbath opening the door does not turn the light on, and the compressor will run at random times rather than as a direct consequence of the interior warming up because the door was opened.

  • @Sichelschurke
    @Sichelschurke 11 หลายเดือนก่อน +2

    Haha had to see this first and then continue the Darknet Diaries Podcast.

  • @joelmulder
    @joelmulder 5 ปีที่แล้ว

    This is amazingly fascinating!

  • @tylorbray
    @tylorbray 7 ปีที่แล้ว

    My favorite talk.

  • @NoahD123
    @NoahD123 8 ปีที่แล้ว +3

    good talk

  • @DethKount
    @DethKount 5 ปีที่แล้ว +1

    Surprisingly interesting

  • @arielotx
    @arielotx ปีที่แล้ว

    i watches this talked a lot of time , great time on something i didnt know a lot.

  • @pedoublenizzle
    @pedoublenizzle 5 ปีที่แล้ว +1

    +1 for the elevator clip from Secret Life of Machines

  • @SensibleMax
    @SensibleMax 4 ปีที่แล้ว

    Just what I needed at 2 AM

  • @symik3
    @symik3 7 ปีที่แล้ว

    Really nice talk.

  • @KanaalMTS
    @KanaalMTS 5 ปีที่แล้ว +18

    28:10 Schindler's Lift?

  • @TheDct88
    @TheDct88 8 ปีที่แล้ว +124

    i love the name schindlers ... schindlers lifts lol

    • @eddiebernays514
      @eddiebernays514 8 ปีที่แล้ว +4

      the elevator in my old apartment building was a Schindler and I always thought of Schindler's list lol

    • @Nanorisk
      @Nanorisk 7 ปีที่แล้ว

      I guess you guys mean "Schneider", right? It does look like Schindler a bit.

    • @beyondbeyond1965
      @beyondbeyond1965 7 ปีที่แล้ว +7

      +Nanorisk Look again 28:16 schindler.com

    • @GegoXaren
      @GegoXaren 7 ปีที่แล้ว +6

      "lift" is the standard English word for what in American English is called "elevator".

    • @morphman86
      @morphman86 5 ปีที่แล้ว +4

      Most of Europe uses the British English word though, and Schindler is a very popular brand here. Schindler and Otis are the two biggest in Europe.
      So on most tags you'll see written "Schindler's Lift LLC." or regional variants.

  • @Chaosfury50
    @Chaosfury50 5 ปีที่แล้ว +14

    Sometimes when a bunch of people get in the elevator I like to say "Now I know you're all wondering why I've gathered you here today"
    Or another favorite elevator past time of mine is when at a hotel or casino and the top floors are labeled such as pool (roof) or club or penthouse and someone is asking people what floor to press, I'll go last and gently clear my throat and since it's quiet I'll say penthouse in a whisper as if I'm embarrassed by it amongst the poor

    • @ScoobyShotU
      @ScoobyShotU 5 ปีที่แล้ว +2

      They typically require keys in nice hotels or casinos especially.. bad joke

  • @retnikt1666
    @retnikt1666 6 ปีที่แล้ว +32

    37:40 to skip new speaker ceremony.

  • @amyx231
    @amyx231 4 ปีที่แล้ว +1

    Friday: This elevator is needed for other reasons. Please exit. Except you Peter.
    Peter Parker: Oh okay. ???
    Mr. Stark has entered the building.

  • @JonathanBoring
    @JonathanBoring 4 ปีที่แล้ว

    That was worth every minute

  • @danielaslan512
    @danielaslan512 4 ปีที่แล้ว

    If there is any pentest left would love one. GOOD LUCK getting the issue fixed

  • @SynapticStatic
    @SynapticStatic 4 ปีที่แล้ว +1

    9:00 is from the secret life of machines. Great series if a bit old now.

  • @HalfGramDabs
    @HalfGramDabs 7 ปีที่แล้ว +10

    why are these guys so dedicated to fuckin keys ahaha

    • @HalfGramDabs
      @HalfGramDabs 7 ปีที่แล้ว

      but it was intresting watched all of it

    • @4dirt2racer0
      @4dirt2racer0 7 ปีที่แล้ว +4

      everybodies got different passions, n i dont think its as much the keys as what they represent, having that keychain means they have access in buildings on a whole other level that was kinda the point of this whole talk, security, they can literally go anywhere in the world, go to any floor, which means any room, penthouse, appt..

    • @HalfGramDabs
      @HalfGramDabs 7 ปีที่แล้ว

      Travis Miller Shit ur right they probably the ones who ran up on Kim Kardashian for all that jewlery and that $5 million ring a few months ago. Damn they are the plug for anyone whos trying to run up on a celebrity.

    • @Nanorisk
      @Nanorisk 7 ปีที่แล้ว +5

      They are penetration testers, who breaks into stuff and places for a living. Keys and locks are part of their trade, so yeah.

    • @MirekHeikkila
      @MirekHeikkila 7 ปีที่แล้ว

      cause 'bling'!

  • @LiamKarlMitchell
    @LiamKarlMitchell 5 ปีที่แล้ว

    Great talk thanks :)

  • @granskare
    @granskare 4 ปีที่แล้ว +2

    when I was in Berlin in the 50's...it was a single person lift that constantly moved

    • @emka333
      @emka333 4 ปีที่แล้ว +4

      You mean a Paternoster? Germany still has some of them today.

  • @pythagorasgonzalez7137
    @pythagorasgonzalez7137 9 หลายเดือนก่อน

    This was dope

  • @JarrodAllenSmith
    @JarrodAllenSmith 7 ปีที่แล้ว +11

    43:45 you can totally read the redacted numbers

  • @Microtonal_Cats
    @Microtonal_Cats 4 ปีที่แล้ว +1

    Good talk.
    I like that the audio quality on these has improved over the years...from horrible to passable.
    It's not rocket science. Plus, BAD AUDIO IS A HATE CRIME! #BAIAHC

  • @nutbag
    @nutbag 3 ปีที่แล้ว

    "Pen testing" eh? I prefer the Jetstream RT. Writes smoothly, seldom skips and there will be blood if you steal mine.
    I ke(y)ed, I ke(y)ed! The first that you learned in the biz, and easiest Jargon to decode still stumped me, so I had to google. I missed it in the picture you put up as you said it! Herpaderp.
    Penetration testing, so now I have the old standby- TWSS!
    I am a devote but a novice and always curious penetration artist. I found you in the bottomless rabbit hole of my TH-cam suggested videos. Love your stuff. Is Deviant a nickname? Sounds like one that could fit me as well. Congrats and of course I've subscribed.