The Search for the Perfect Door - Deviant Ollam

Shakacon LLC · 1.4M views · 2016 · 50:50

Open on YouTube

Security & hackingtalk

Why Hacker News recommends it

HN recommends it as an interesting talk on how weak real-world door security is, and cites it for the stories of bad doors.

What it is

Deviant Ollam shows that most physical attacks on doors bypass the lock, with photo and video examples of how doors, frames and hardware get defeated. It is a physical security talk from Shakacon.

Recommended by 2 HN commenters across 3 different months, 2017 to 2023.

What Hacker News said

Recommends lathiat · 2017-09 · on “Evan Doorbell's Classic Phreaking Tapes”

I realise the thread is phone phreaking related and that was kind of the point of your post; but in the spirit of the talk below to think more outside the box... There's a pretty good chance in many cases you can just open the external box with some easy to get (and relatively standard) key. And hit a button. Related: [LINK] This is a good related talk - goes outside the box on all the ways you can often get into commercial buildings without picking (or even in many cases, interacting with) the lock "The Search for the Perfect Door" by Deviant Ollam [this video] Also good: [LINK] [Howard Payne & Deviant Ollam - This Key is Your Key, This Key is My Key] [LINK] [DEF CON 22 - Deviant Ollam & Howard

Recommends winrid · 2018-10 · on “Ask HN: What are some of the best technical talks you've heard?”

I hope this isn't too much of a stretch. Heard it recently and thought it was really interesting. [this video]

Recommends lathiat · 2018-12 · on “Ask HN: Best talks of 2018?”

Deviant Ollam - The Hotel Room Gourmet [LINK] Also not 2018 but his elevator with Howard Payne talk: [LINK] (1h version) [LINK] (2h version) And the search for the perfect door: [this video]

Cites goialoq · 2017-10 · on “Socially Engineering Myself into High Security Facilities”

Someone leaves their computer unlocked when they walk away -> network access. door locks: locks are bad, and doors are awful [this video]

Cites OmarAssadi · 2023-10 · on “How to mitigate the Hetzner/Linode XMPP.ru MitM interception incident”

Assuming this was done at the government's request, I assume Hetzner is more than willing to comply with a court order mandating they allow them to monitor and physically size a machine. And outside of nation-state requests, even ignoring the fact that someone could probably pay-off an employee, I think ease would depend a lot on the datacenter and target; judging by the awesome and hilarious story behind the Fremont Cabal accidentally becoming an internet exchange by essentially having some dude barely secretly slipping unauthorized cables into the raceways [1], I figure there are a lot of places where if your target is simply renting a couple rack units or single rack rather than an entire