Of course I know that security by obscurity is a bad idea. Hence I applaud the lock picking lawyer for his wonderful YouTube channel. But this latest video really makes me wonder: is this is a step too far?
Why? It's not like key impressions are new technology, or even that hard to reason about. Lock-picking is a legitimate business and hobby. This is also a physical-layer attack. You have to have access to the key for a duration. If you have physical access to the key it's not like you couldn't just take it to Lowes and have it duplicated, or just take a picture of the tooth arrangement and file it out yourself.
2 comments
[ 3.7 ms ] story [ 13.4 ms ] thread