reader comments

175

For your information, the serial number is engraved at the bottom of the lock or on the back of the lock for the DY1525 or DYA400K. A) My lock does not have a serial number: To provide enhanced long-term security, Master Lock has discontinued imprinting a serial number on the lock body on combination locks sold through retail locations. Search Products from Master LockĀ®. To give you the best experience possible, this site uses cookies. Please review our privacy policy for more details and to change your cookie preferences. By closing this notice or continuing to browse this site, you are agreeing to our use of cookies.

with 96 posters participating

There's a vulnerability in Master Lock branded padlocks that allows anyone to learn the combination in eight or fewer tries, a process that requires less than two minutes and a minimal amount of skill to carry out.

The exploit involves lifting up a locked shackle with one hand while turning the combination dial counterclockwise starting at the number 0 with the other. Before the dial reaches 11, there will be three points where the dial will resist being turned anymore. One of them will be ignored as it is exactly between two whole numbers on the dial. The remaining two locations represent locked positions. Next, an attacker again lifts the locked shackle, this time with less force, while turning the dial clockwise. At some point before a full revolution is completed, the dial will resist being turned. (An attacker can still turn through it but will physically feel the resistance.) This location represents the resistance location. The two locked positions and the one resistance position are then recorded on a Web page that streamlines the exploit.

This video is unavailable. Masterlock Combination Padlock - Crack Open in 40 seconds without Combination. Easy and Quick plovet. (86) Master Lock Corporation.

Master Lock Combination Recovery

The page responds with the first digit of the combination and two possible digits for the last digit. By testing which of the possible last digits has more 'give,' an attacker can quickly figure out which one is correct. By eliminating the false digit from the Web form, the page will automatically populate the eight possible numbers for the second digit of the combination.

Now that the attacker knows the first and last digits and knows the second digit is one of eight possible numbers, the hack is a simple matter of trying each possible combination until the correct one opens the lock. The following video provides a simple tutorial.

The technique was devised by Samy Kamkar, a serial hacker who has created everything from stealthy keystroke-pilfering USB chargers to DIY stalker apps that mined Google Streetview. In 2005, he unleashed the Samy worm, a cross-site scripting exploit that knocked MySpace out of commission when it added more than one million MySpace friends to Kamkar's account.

Kamkar told Ars his Master Lock exploit started with a well-known vulnerability that allows Master Lock combinations to be cracked in 100 or fewer tries. He then physically broke open a combination lock and noticed the resistance he observed was caused by two lock parts that touched in a way that revealed important clues about the combination. (He likened the Master Lock design to a side channel in cryptographic devices that can be exploited to obtain the secret key.) Kamkar then made a third observation that was instrumental to his Master Lock exploit: the first and third digit of the combination, when divided by four, always return the same remainder. By combining the insights from all three weaknesses he devised the attack laid out in the video.

It's by no means the only way to break the security of a popular padlock. It comes a few years after Master Lock engineers developed new padlocks that resisted a popular form of attacks using shims made from soft drink cans. Kamkar said he has tried his exploit on more than a dozen Master Lock combination locks, and so far it has worked on all of them. In the coming weeks, he plans to unveil more details, including an Arduino-based robot that streamlines the exploit.

Post updated to change 'any' in the headline to 'many.'

Watch Ars staffers put the hack to the test.

Master Lock Serial Number Lookup Free

Showing slide {CURRENT_SLIDE} of {TOTAL_SLIDES} - Make an Offer

Master Lock Serial Number List

  • Small Little Tiny Old Antique Vintage Box Keys Home Decor Steampunk Key Pendant
    +$10.14 shipping
    Make Offer - Small Little Tiny Old Antique Vintage Box Keys Home Decor Steampunk Key Pendant
  • Small Tiny Little Old Antique Vintage Keys Rustic Lock Box Door Key Charm Caddy
    +$10.14 shipping
    Make Offer - Small Tiny Little Old Antique Vintage Keys Rustic Lock Box Door Key Charm Caddy
  • Small Tiny Little Old Antique Vintage Keys Rustic Lock Box Door Key Charm Caddy
    +$10.14 shipping
    Make Offer - Small Tiny Little Old Antique Vintage Keys Rustic Lock Box Door Key Charm Caddy
  • Antique Vintage Style Wrought Iron Trunk Pirate Chest Lock Key Padlock Crossbone
    +$24.00 shipping
    Make Offer - Antique Vintage Style Wrought Iron Trunk Pirate Chest Lock Key Padlock Crossbone
  • Small Tiny Little Old Antique Vintage Keys Rustic Lock Box Door Key Charm Caddy
    +$10.14 shipping
    Make Offer - Small Tiny Little Old Antique Vintage Keys Rustic Lock Box Door Key Charm Caddy
  • Small Little Tiny Old Antique Vintage Box Keys Home Decor Steampunk Key Pendant
    +$10.14 shipping
    Make Offer - Small Little Tiny Old Antique Vintage Box Keys Home Decor Steampunk Key Pendant
  • Small Old Antique Vintage Keys MILNERS LIVERPOOL Rustic Lock Box Safe Door Key
    +$10.14 shipping
    Make Offer - Small Old Antique Vintage Keys MILNERS LIVERPOOL Rustic Lock Box Safe Door Key
  • $7,300.00
    Make Offer - Original Viking era padlock, 10th - 11th century
  • Old Antique Vintage HOOVER Keys Rustic Home Decor Collectable Key Tools Vacuum?
    +$10.14 shipping
    Make Offer - Old Antique Vintage HOOVER Keys Rustic Home Decor Collectable Key Tools Vacuum?
  • 2 LARGE ANTIQUE 17-19TH CENTURY ENGLISH CASTLE DOOR CHURCH JAIL KEYS
    +$72.96 shipping
    Make Offer - 2 LARGE ANTIQUE 17-19TH CENTURY ENGLISH CASTLE DOOR CHURCH JAIL KEYS
  • Small Tiny Little Old Antique Vintage Keys Rustic Lock Box Door Key Flat ETAS?
    +$10.14 shipping
    Make Offer - Small Tiny Little Old Antique Vintage Keys Rustic Lock Box Door Key Flat ETAS?
  • 1 x Old Antique Vintage Key DIY UNCUT BLANKs Ward Hollow Barrel Keys MANY SIZES
    +$9.95 shipping
    Make Offer - 1 x Old Antique Vintage Key DIY UNCUT BLANKs Ward Hollow Barrel Keys MANY SIZES