I keep seeing mention of how great this lock is, but all mentions go back to this same couple of videos. Makes me really suspicious of astroturfing, frankly.
IIRC, also wondered how this particular design prevents against bumping; none of its protections really seem aimed at that usecase. Not to mention the relative frailty of the key, and the general problem of an easily visible (and thus reproducible) secret.
Think if you believe you're able to pick it, then buy one, pick it, post the video to YouTube with ADs enabled - and you'll easily make back the cost of buying the lock.
As for bumping and the key strength, given those topics are covered in the second video, you're comment to me at best feels naive.
Lastly, no system is prefect. Even if the metal the lock is made of was unbreakable and as a result you could 't destroy the lock to bypass it, you could still build a robot that inserts a metal key to turn the lock and dynamically assembles and inserts every possible bidding for each pin.
Feel free to post a lock you like, locks to me are more about simplicity vs security - not some overly complex system will never be used in mass production.
I submit that your statement relies on an unfounded premise (at least from my scan of this thread) that wonderous works for the company.
Also, by your standard, if wonderous doesn't work for said company, he's still complying with your "standard." Yet, you're still making an implicit accusation.
The purpose of my initial comment was to address the potshot accusation of astroturfing after, IMHO, wonderous had responded in good faith.
New ideas are always good, nothing advances without trying new stuff. I'm sad I missed out that they had gone into production, I thought I was on the list for that. Or maby I just missed it.
The main issue with this system is the stainless steel keys I think (required to have enough strength so they don't bend up). High security keys always cost more, but cutting SS keys has to be murder on the key duplicator (and $20 per key is quite a price and reflects the challenge of working with SS). And it's more expensive for Bowley, so lower profit margin compared to their competitors even at scale.
However I'm sure the quality is good for that price. I am curious though, are their any anti-drill pins in the cylinder? Or, if the entire cylinder is Stainless then that is practically the same thing.
>> "The entire lock is made out of hardened stainless steel the same as the key. Unlike most locks which have a single hardened anti drill pin in a brass plug. That being said its not made of diamond and can be drilled like any other lock with the right bit and enough time. The purpose of a high security lock is to block manipulation attacks forcing a destructive attack. Its very hard to stop a destructive attack because then your whole house becomes the weak point. The door, the windows, etc."
> Think if you believe you're able to pick it, then buy one, pick it, post the video to YouTube with ADs enabled - and you'll easily make back the cost of buying the lock.
What if he thinks that someone will be able to pick it? Someone who picks locks for a living, perhaps?
I love the MCS, but they are not super difficult to brute-force sadly.
Their main security feature is that keys were "impossible" to duplicate. However the SSDev'ers were able to decode and build make-up keys on-the-fly several years ago now. But that still leaves picking the lock a challenge which has not yet been a public development.
Read Feynman's book "Surely your joking Dr. Feynman", he's got an entire chapter on safe cracking.
Yep, I remember in high school, in fact it was in Pasadena not far from Cal Tech, I don't remember who, but somehow I learned from somebody how to open the high-school lockers by 'feel', in a fairly short-time I could open any locker quicker than my own knowing the combo.
Locks are fairly amazing when you think about it the locksmiths and the criminals all know how to crack any lock, yet the people in the middle think they're secure.
Years later as a landlord I got to know my locksmith fairly well, one day by offhand he told me that the master-key ( So I could have one key to rule them all ) I was using could open 1/2 the units in the city.
Your telling comes across as an indictment of the security industry.
I think it's a testament to human progress. We've never been as safe as we are today.
Maybe time to just leave the lock away then. It's pretty common in Scandinavia, and, at least for me as a tourist, had quite an impact on the societies' mood.
Decades ago, as part of the CalTech freshman experience (Page House), I was required to buy a set of lock picks, learn their use and pick three designated locks within a time limit. Penalty for failure was being tossed in the showers by sophomores.
This was handy for getting around the Institute after hours (steam tunnels).
You would probably be sad to know that the steam tunnels are no longer accessible to students at will and South Masters are passing out of the living memory of students (the last time they could be used was in 2010-11)
(2) I don't intend to be pedantic – and perhaps I'm mistaking hyperbole for fact – but how could you are opening a combination lock with an secret unbeknownst to you more quickly than your a combination lock with a secret known to you? Unless, you're shimming the new lock and avoiding dialing the correct combination altogether, in which case you would solve them all locks in the same span of time, this is unlikely. However, you said you're opening the lock by 'feel,' so I assume that's not the case.
With respect to #2 -- "more quickly" could be a bit much, but there are quite a few combination locks (of the sort commonly found on cheap-ass high-school lockers) wherein getting within 2-3 digits of each digit in the combination is sufficient to open them.
Given that, I could easily see how "feeling" that you'd hit the right digit (give or take) might be faster than focussing on visually actually hitting the right digits.
when i was in high school, the school issued old master combination padlocks to everybody and they had a very obvious audible and tactile "thunk" when the dial hit the right number, if you pulled down on them the right amount while spinning the dial.
and yes, it actually was quicker to open them by feel than by looking at the numbers on the dial.
I saw a good number of folks that were able to seemingly jiggle the locker, maybe with a kick near the bottom, and it opened. Much quicker than entering in the 3 numbers on the dial and then lifting the handle.
I came to work early once and forgot my keys. I decided to just sit on the ground and go through commits [pathetic]. A newer dev, recently hired came by next. I explained the situation. He then grabbed a weird small set of tools out of his bag. After about 3 minutes he opened the door. I was totally horrified. I am not sure if i was more upset he had the tools on him, the tools WERE LEGAL, or how easy it was to steal all our cool hipster monitors. He went on to explain how he couldn't get into various types of locks and which locks he was training on -- like some type of club or sport.
Why should a toolkit be illegal, and why should you not carry your tools with you? Picking a lock is usually the slowest way in, if you are trying to increase security, paying a premium for a better lock while retaining windows and unreinforced walls is a poor decision.
It is highly amusing how many keycard readers amount to "close this circuit between two wires hidden behind drywall". Or when they expose USB ports, or screw heads, or are protecting a glass door.
One of my favorites in a NY office design was the keycard passes through a door in a wall that was only a foot higher than the door, with plenty of open space above that (about 5-6'). Security theater isn't just the provenance of the TSA.
Key card entry. Motion detector to open the doors on the other side. Open to the air above the doorway. I could throw anything over the door and it would unlock for me.
In the UK posession of a lockpicking kit in public is very much illegal, unless you have a professional reason to carry one. Same with a knife - unless you are literally bringing one back from the store to your home, you can be arrested for having one.
Unsurprising, the UK is a mass surveillance, dystopian state. Every packet sent over the internet is captured, and the UK has the highest security camera density in the world. Assad would kill to be able to so conveniently collect even half the data that the GCHQ collects on a daily basis.
Nevermind the nanny state about porn, both viewing and creation, or drugs. Makes Washington State or Colorado look like lawless states in comparison, and yet they still have a ton of nanny state rules that help no one.
Any knife? You can't carry a pocket knife in the UK? That's ridiculous. Knives were nearly the first tool proto-man ever made, and they're still the most useful general purpose tool you can have.
> Section 139 of the Criminal Justice Act 1988 prohibits having with you, in a public place of any article which has a blade or is sharply pointed, (including a folding pocket knife if the cutting edge of its blade exceeds 7.62cm/3 inches) (Archbold 24-125).
A 3-inch blade length restriction is reasonable. For instance, it was illegal until 2014 in my state to carry a blade longer than 4 inches. (There is now no limit.) During the majority of my life that it was illegal to have a longer blade, most people I knew still carried pocket knives that were legal to carry.
3 inches is no more reasonable than 70 mph as a speed limit. But if you accept that some limit should exist, it has to have some value, even if all the choices are equally arbitrary
If any speed limit and any knife length is equally arbitrary, then a nation-wide speed limit of 1 mph and a legal knife length of 100 inches should be perfectly acceptable to everyone. Yet it's quite likely many people would object to both.
I don't see that cabaalis said that any limit is equally arbitrary, and I doubt s/he thinks that.
Some limits are more reasonable than others. Saying "you can have knives but the blade must be no more than 5mm long" would be stupid; so would saying "you can drive a car but no faster than 1mph". (Because in either case you might as well, and should in preference, just say "you may not"). Likewise for a limit of 10m or 500mph (because then you might as well, and should in preference, just not bother with the limits).
If you're going to have a limit on the length of a knife blade, presumably for the sake of a small reduction in knife crime, you want a limit long enough that some (non-criminally) useful knives are shorter and short enough that the restriction, if it reduces the number of long knives in circulation, would actually do something to impede crime.
It seems plausible that a 3-inch limit would do that. Maybe a 4-inch limit too. The exact choice of limit isn't completely arbitrary: some choices are better than others. But really, the only answer to "why 3 inches rather than 4?" is "that's where we happened to make the tradeoff".
I'm guessing (not least because the above all seems kinda obvious) that your actual objection is to having any limit at all. (Perhaps on the grounds of some more general libertarian principle?) That's a reasonable objection, but I don't think "why 3 inches rather than 4?" is a good way to make it.
I wasn't trying to make an objection. I was just trying to understand what the argument was for making the limit 3".
As for the "criminally useful" argument, I struggle to imagine what crimes could be committed with a 4" knife that couldn't be committed with a 3" knife.
You say it's plausible to you that a 3" or 4" limit would reduce knife crime. What makes you think that?
It seems plausible to me -- I don't claim any more than that, and I am no expert on this stuff -- that:
1. If possession (in public places) of knives above (say) 3" is illegal, fewer people will go about carrying knives above (say) 3". It probably won't make any difference to someone planning to get into a knife fight, of course.
2. If fewer people are casually carrying big knives, then there will be fewer opportunities for conflicts to escalate to fights involving big knives. For instance, a bar fight is less likely to end up fatal if fewer people in it are carrying serious knives. A burglary is less likely to end up fatal if the burglar isn't. Some muggers may choose to make do with musclepower rather than knives (so they're less likely to get into serious trouble if a policeman thinks they look suspicious). Etc.
3. Fights involving big knives are less dangerous than fights involving smaller knives, e.g. because a bigger knife is more likely to end up doing serious damage to internal organs. (If an expert fighter is specifically trying to do you serious harm, I'm sure they can do it with a small knife. Or a toothpick. But in cases where the goal is "establish dominance" or "get away safely from the house I just burgled" or "make my victim sorry he didn't just hand over his wallet" and there isn't serious intent to kill, I expect smaller knives to do less harm on average.)
Astute readers will notice that I'm now talking about knife fights rather than knife crime. My guess is that premeditated crime-with-knives probably wouldn't be much affected by this sort of ban. So, though I'm sure all the things I'm hoping would be reduced would technically be knife crimes (i.e., crimes committed using a knife), I think my use of that term was unhelpful. Sorry about that.
Well, same arguments as with guns, really. Smartly, UK police has figured out that a policeman can't shoot anyone by mistake if they don't have a gun - so UK policemen don't carry them at all. If you reduce a number of people carrying long knives, you reduce the number of people stabbed with long knives. Obviously, just like with guns - people who want to have a knife and use it to commit crime, are still going to.
So, the law is actually more specific [1] than just three inches - it's obviously been written with the intent of permitting traditional swiss army knives, while banning essentially everything else. (Including leatherman tools due to their locking blades - and most kitchen knives, which don't fold)
I suspect someone measured their boyhood swiss army knife blade, determined that it was about 2.5 inches, and rounded up to the next whole number.
The language is a little ambiguous. It seems it's meant to suggest that having a folding pocket knife with a blade less than 3 inches is allowed, but that is not actually said, only implied by contrast to the explicit statement that folding blades longer than 3" are prohibited. In a regulatory environment like the current UK, I don't like those kinds of rights being only ambiguously implied.
The guidelines go on to say that butter knives with no cutting edge and no points are considered prohibited blades under the law, which is ridiculous, and that folding pocket knives with blades less than 3" are not considered folding if they lock open (because they are not "immediately foldable"), and are therefore prohibited. Which is, again, ridiculous, and also undoubtedly leads to many unnecessary injuries as unlocking blades close on the fingers of their users.
Not true, you can carry lockpicks whenever you want. Buying, owning and possessing them is not a problem. It only becomes a problem if the cops find them on you and they had reasonable grounds to think you were going to use them. This is the same for a crowbar, a screwdriver or a brick. The lockpicks themselves are fine.
This seems to be true in my experience. I was stopped in a subway station with a legal folding pocket knife (no assisted opening, blade length <4"). One of the undercover cops took the knife and repeatedly tried to get it to open due to gravity alone but couldn't. While he was doing this, the other one was questioning me: what do you use the knife for? (opening boxes at work) what do you do for work? ("computer guy").
They gave it back to me and told me it's best if I keep it inside my pocket instead of clipped to it.
Even though that ended OK for me, there are a bunch of ways it could have gone worse. If either cop was an asshole, or having a bad day, or if I had darker skin, or was wearing a hoodie, etc. I once read about someone getting locked up overnight despite his knife being legal because he had it clipped to his pocket - the visible clip was deemed by the police in that instance to constitute "brandishing a weapon". Not sure if that's true, but probably best not to take chances.
You can't be arrested for suspicion alone, and bump keys aren't illegal according to California statute, and I didn't find anything about local statues either. So unless they have a warrant out for them, those people are going to walk free. (IANAL)
Also... cars don't use pins, so they wouldn't have been using a bump key for a car, but possibly a jiggler or a blank for impressioning.
I'd really like to see the evidence for this. As I mentioned in another comment, from what I've read, possession of lockpicking tools are legal virtually everywhere in the USA, as long as one is not intending to commit a crime with them.
It says it right there on the site! Did you read it??
"Illinois infers from the possession of a key designed for lock bumping an intent to commit a felony." Mississippi says a concealed pick set is prima facie evidence of intent. Similar for Ohio, Nevada, and Virginia. Tennessee code might actually make them illegal outright.
Given all the FUD around picks in the US, I like to refer people to the toool page, they've done a great job of distilling down what's legal and where.
Doesn't intent to commit a crime have to be shown?
From what I've read, possession of lockpicking tools are legal virtually everywhere in the USA, as long as one is not intending to commit a crime with them.
If I am mistaken on this point, I would love to be corrected. IANAL.
That's because lockpicking is often done in sport. It's a challenge and each one is a new but similar puzzle. There are a number of professionals who enjoy the challenge of breaking into locks. It's also a good opportunity to teach people just how bad most locks are [0] [1]. You also learn that Masterlocks shouldn't even be called "locks" and that locks only prevent opportunist thieves [2]. Also, you do want professionals who are able to open your lock if you ever lose your key. They have to practice somehow! :)
Similar to the white/grey/blackhat hackers I suppose. You can use the skill to educate, reduce harm, and do good. Or you can use it solely for profit or ruining lives.
If you spend much time around locksporters, you'll find that they'll take virtually any excuse to show someone how to pick locks. Generally to elicit this exact reaction.
Also, it's very possible that he didn't if he was training. I had two colleagues who once decided not to use keys for a month to enhance their picking skills.
I never learned "real" lockpicking, but I'm puzzled at how trivial it is to bypass some lock systems. For instance, the Kensington laptop lock, which was purchased in bulk for all the laptops of a large utility I worked for some years back.
I once misplaced my key, and managed to pick the lock with a small strip of plastic used to bind boxes of printer paper. The longest part of the endeavor was finding a pair of scissors to cut the plastic to the right size.
The lock/cable in question retails for about $40. Assuming we paid half that, we still dumped thousands of dollars on presenting only an image of security.
I think his point is: it takes little skill (because I figured out how to do it on the fly) and little equipment (ziptie). Implicitly: anyone with any interest in grabbing laptops could spend 5 minutes on youtube and 5 minutes prepping a ziptie, and maybe 20 minutes practicing, and be as capable of walking around grabbing laptops as he was before the security locks were purchased.
This expands to the general case purpose of locks. They're not to guarantee security, but rather to raise the threshold. Much like DRM, they're all about preventing easy mass theft.
I don't know how useful they are in a typical restricted access company environment. They make more sense at places like tradeshows where they may not stop a serious thief but probably are good enough to deter sticky fingers while someone's back is turned.
I've spoken to a private investigator in 2015 who told me that bump keys made lockpicking disappointingly easy. Their downside for a criminal is that the application is rather loud, compared to the classic pin-by-pin lockpicking.
That was the state for 2015, things might have changed.
Bump keys make lockpicking disappointingly easy for locks that are easy to pick. They take something that's a nice challenge for a beginner and make it easy for anyone.
However, a good lock that's difficult to pick for anyone, with or without bump keys or comprehensive experience, is pretty easy to come by. That said, the hard thing is often knowing the difference: expensive and heavy are not necessarily good hints.
From around the 35 minute mark in the "What The Bump" talk, security researcher, TOOOL founder and President Barry Wels said:
"It [bumping] also works on these high security locks: multiple rows with dimples, keys that look really dangerous thinking if I have these on my door I'm really safe. The thing is, they open just as easy as the other locks, as far as we've seen. The only problem is getting bump keys. We really had some help from some of the state of the art Dutch locksmiths, with very advanced tools to make these keys. But once you have these keys, they're just as easy to open as the other locks. One of the statements which is my favorite is: I think you can teach this to a monkey to open locks like this. I'm still looking for somebody with a monkey to actually shoot some video. If you know somebody with a monkey that we could train to do this, that would be fun.
"It also works with locks with moving parts in it. The ball offers no protection because you take the original key, it has all the information already in it. The ball is always in the same position or there are two different spacings of the ball. It all works the same, because there are a lot of locks with protective measurements that are standard for all the locks. So once you have a key that is cut to the deepest, these mechanisms are still in place. The ball is still there, for instance, and it will still open.
"We opened some some pin-in-pin locks. The brand name is Mul-T-Lock. They were not happy that we opened them, and they were not happy that they were being mentioned in a white paper, and they more or less demanded a public test to show that it wouldn't work. So when the guy was at our place I explained to him how the technique actually worked, because he had no clue. So then he demanded a closed test where the results were kept secret. I said I'm willing to do that. He also put a time limit of four days or something ridiculous like that. So I said I'm willing to do that but it will be on a commercial basis because I can not use the information for my website, you want to keep it private. When I told him my price just to keep it friendly -- I wasn't asking a lot of money -- he ran away and never seen again. I do hear he's still very angry. But if Mul-T-Lock wants a serious test, they can always contact me directly, but not through this Dutch sub-dealer of them.
"We opened some impossible locks. By impossible, I mean I opened some locks, and you can see it on the other video, it's available online if you go to the toool.nl website. I opened some locks that I would never open without damaging it ever, because the mechanism is so well designed. There's only one flaw, which is that the part that makes it secure stays the same in all the keys, and only the variation pins change. I'm talking now about the Assa Twin lock. It's a lock with two rows of pins, and the secure row of pins is always the same in a certain region, which makes it very vulnerable for this attack. Talking about the Assa Twin, another reason that I thought I would never be able to open a lock like that is that it was so well engineered, the tolerances are so small, if the pin is half of a millimeter or a tenth of a millimeter too high or two low, the whole lock does not work any more.
"This is also something that we found, that the tighter the lock is made, the more engineering is put in to the lock, the better this technique works. If the key that slides in to the lock wiggles too much because the key has got a lot of space in between, the energy transferred is a little bit lost. If the pins in the chamber have a lot of tolerance and are not straight in the house, but a little angled or a little bit left-right, the energy is not transferred ideally. So the more expensive and the more engineering is put in to a lock, we found most of our favorite locks opened within a few blows because they are so well designed that they are perfect impact energy transmitters that allow smooth transmission of this energy."[1]
That said, since the technique of bumping made a big splash in the mainstream media, lock manufacturers have experimented with and released locks with "anti-bump" features. Those locks might not be as susceptible as the locks that were the subject of Wels' talk. On the other hand, there are and will continue to be plenty of locks in use that don't have any anti-bump features at all.
His opener about the monkeys refers to "these high security locks", but the description that follows seems to describe locks that are big and heavy and look intimidating, but don't actually deliver any challenging security. This is, in my experience, quite common.
He does then go on to describe bumping more challenging locks, but I'm not convinced these would be as easy. Especially for a monkey...
I didn't hear him mention the size or weight of the locks they tested anywhere. Please point out where he says that.
If you are skeptical of their results, I urge you to try the technique yourself on some locks you consider to be worthy of the challenge and publish your results.
He doesn't mention size or weight, but I was extrapolating from this line:
> that look really dangerous thinking if I have these on my door I'm really safe. The thing is, they open just as easy as the other locks
which makes it sound like he's describing locks that seem secure, rather than locks that are secure (e.g. because of their look, advertising, weight, size, colour, whatever).
I could be misreading him. I'm not contradicting the text, just interpreting it. If he genuinely means that very secure locks can be opened by a monkey/beginner with a bump key then I'd take his word for it. I'm just not sure that that is what he's saying.
My takeaway from his talk was a wide range of locks were vulnerable to bumping, including locks that were highly resistant to other attacks, including "some locks that I would never open without damaging it ever" and "most of our favorite locks" (ie. otherwise truly excellent locks).
So to claim that locks that are difficult to pick are necessarily difficult to bump runs counter to the findings expressed in this talk. In fact, the findings are quite the opposite, as many locks that are difficult to pick because of the tight tolerances and high quality engineering are actually easier to bump than locks which are easy to pick.
Most of these locks could be scrubbed with a rake too (which can work over a large range of lock models). Most locks being easy to pick is nothing new.
I think if it's the amount of metal that is inaccessible to the outside. Something like the Haven lock that is bolted to the floor, makes a lot of sense.
That of course requires a way of opening that is digital.
I'll think of the pros of digital locks:
+ The proliferation of protocols makes master keys almost impossible.
+ Faster update cycles when encryption gets cracked.
+ Keys that are handed out to household members or visitors with potential losses can be easily retracted.
+ The above separation of concerns. The way to keep someone out should be separate from the way to ask for permission to enter.
+ The easier integration with other security layers such as face recognition, voice recognition, etc.
Against forced entry, standard cylinder locks are inherently weak, because they're just not big enough. It's often possible to force the cylinder to turn, shearing off the pins. Especially if the pins are brass. Locks need to be much larger than usual to resist forced entry. Here's a classic mechanical prison door lock.[1] It's a straightforward lever lock, but it's far larger.
There used to be a thing for "detector" lever locks; if you push a lever too far, it trips the detector, and you have to put in a key and turn it the wrong way to reset before you can try again. Those were once claimed to be unpickable. They're not, but it slows things down a lot.
That prison lock is huuge! And when you think about the fact that this is made to protect against brute force applied by people with essentially no tools, you realise how puny ordinary locks are against a determined intruder.
Then again, windows are also ridiculously weak when you think of it like this.
Locks are sometimes symbolic - "Don't go here!". If somebody does break a lock, then the insurance folks will take that as evidence of forced entry and pay damages (if something was stolen). Some symbolic locks are even make of plastic - like circuit panel tags and locks.
There are good door and window locks, but they're more common in areas with worse problems than the US. Israel has some good door locking systems, from Mul-T-Lock and Superlock. The doors look like ordinary residential doors, but they're steel doors in welded steel frames with bolts that extend into the frame at top, bottom, and both sides.
I, on the other hand, got kicked out of algebra class because someone stole my book from my locker. The school tried to tell me that it was obviously my fault because the locker wouldn't have been able to be opened had I only closed it correctly.
I was able to stay late after school, as I was close friends with one of my teachers. He would stay until 19:00 most days grading work and talking... now that I think of it, I could have pulled some great stunts.
Maybe randomizing the contents of a selection of not so random lockers... (purely for educational purposes, of course)
There was no need to pick locker locks in my school, since you could just stick a screwdriver in the small gap between locker door and frame and leverage the door over the frame (with no damage done). After I lost my locker key I used a screw driver for some years to open it; not even the paint was scratched :)
Yes. It's just lock-picking art. I was expecting stories like the organizers finding the party "reversed" (=while organizers are in the main room, most attendants found their way into the backstage) or the parking emptied of all its cars after the first hour of the conference. Defcon seems funnier ;) https://www.reddit.com/r/Defcon/comments/4x47ss/share_your_f...
On the same note, even having picks in some locations may legally be an issue; for example, here's info on laws on a state by state basis in the US:
http://toool.us/laws.html
If you're that concerned though, likely best not even to attend conferences that would be selling picks, since it's easy to track where people go and use network analysis to ID the likely intent of that cluster of people, use public info, info leaked by someone else there, etc.
Standard answer to "if you have nothing to hide..."; someone, somewhere, can assume the worst from that information, and sometimes that person is legally empowered to make your life miserable based on their conclusion. So the logical choice is often to take measures to protect your privacy even when it shouldn't be necessary.
If you feel like tapping a bump key with a hammer is to much effort, you could attach the bump key to a vibrating toothbrush; aka a "SonicBump":
https://m.youtube.com/watch?v=rDlZbQ20aLI
We appreciate your concern for quality of discussion on HN, but accusing other users of astroturfing without evidence is not allowed. You're welcome to send concerns to hn@ycombinator.com if you want us to investigate, but not to bring this up in the threads. It poisons the discourse and that cost exceeds any benefit by a long shot.
Demo animation: https://m.youtube.com/watch?v=jgekjfwphGc
Here's great analysis of the lock with an attempt to pick it and an breakdown of the design after taking it apart: https://m.youtube.com/watch?v=b96pmWSArr4
----
EDIT: In case you want buy a Bowley Lock, they're now available for sale to the public here:
http://www.bowleylockcompany.com/store/c1/Featured_Products....