Bicycle Locks and Bic Pens

[fultzie]

I'm not sure how many of you have seen this trick already, but there have been a flurry of posts to my club's e-mail list, and other message boards. Apparently you can break standard U-Locks with a basic Bic Barrel pen (the cheap type)... this includes Kryptonite Locks and other similar designs that use a round key.

I know the trick also works with the Target version U-lock, which i have... to check yours, just compare the diameter of a Bic barrel pen to the key for your bike lock.

Keep those wheels safe if they're outside!! My cruiser sleeps out in front of the dorms, but Fred and Lucy (road and mtn bike) are safely propped against my bookshelves...

Check out the video of how to break a U-Lock with a Bic Pen...


Printed in the New York Times

The Pen Is Mightier Than the Lock

September 17, 2004
By LYDIA POLGREEN

The cunning bicycle thieves of New York City always seem to
be one step ahead of lockmakers. Design a more
sophisticated lock and the thieves make a better pick. Make
a sturdier chain and they get bigger bolt cutters. And if
all else fails, they just dig up the parking meter or stop
sign to unshackle the bike from it. But to open some of the
toughest locks on the market, a thief needs only to flick
his Bic pen.

Many cyclists erupted in disbelief and anger this week
after videos were posted on the Internet showing how a few
seconds of work could pick many of the most expensive and
common U-shaped locks, including several models made by
Kryptonite, the most recognized brand.

Mashing the empty barrel of a ballpoint pen into the
cylindrical keyhole and turning it clockwise does the trick
that has struck fear into the hearts of bicycle owners,
especially those in New York, where thousands of bikes are
stolen each year.

"There was murmuring on various Web sites, and so I decided
to go home and pick up a pen and see it if works," said
Benjamin Running, a graphic designer who lives in downtown
Brooklyn. "Sure enough, within 30 seconds I had broken into
my $90 lock. I was in awe. My jaw literally dropped to the
floor. It was so easy."

And many Internet users had the same reaction this week
when they saw the homemade video he posted on his blog of
his Kryptonite NY Chain popping open.

The problem could have wider consequences. Lock experts
said the fault was with a particular type of cylindrical
lock that is used not just in bike locks but in vending
machines, cable locks for laptop computers, alarm system
panels and countless other places.

Not all such locks are vulnerable, because some are built
with more sophistication. Older Kryptonite locks made
before 2002 appear to be less susceptible, according to
bike shops that have tried to use the technique on them.

But this type of mechanism is used on most of the bicycle
locks that are used by millions of people around the
country, not just those made by Kryptonite (although the
company said yesterday that a new and better model was on
the way).

As the news spread, bicycle shops across the nation pulled
the locks off their shelves and cyclists left their bikes
at home, wondering if anything could keep their wheels
safe.

"You would think for $80 for a bike lock it would be
secure," said Marc Weber Tobias, an investigative lawyer
and security expert, whose Web site, security.org, has
posted warnings about the flaws of cylindrical locks like
the ones used in U-locks. "But this doesn't surprise me at
all."

The trick works because the pen has the right diameter and
is rigid enough to hold its general shape but pliable
enough to mold into a sort of key that opens the lock. Mr.
Tobias said the vulnerability of such locks was well known
in security circles.

"These are cheaply manufactured locks with serious design
flaws," he said. "You can't possibly think your bike is
safe with one of these locks."

The uproar appears to have started on Sunday, when Chris
Brennan, a cyclist in San Francisco, posted an urgent
message on the bikeforums.net bulletin board after he was
able to pop open his lock with a pen.

Like many people, he had been skeptical, but doubts were
quickly dispelled when users like Mr. Running started
posting digital video clips of the trick. By yesterday,
125,000 people had downloaded it from, his site,
thirdrate.com, he said. Meanwhile, nearly 170,000 had seen
Mr. Brennan's posting, starting a full-fledged panic.

"We are especially concerned because we thought these were
the best," said Noah Budnick, projects director at
Transportation Alternatives, an advocacy group representing
bicyclists in New York City. "Our members get a discount on
these locks. What is really shocking is the casualness with
which someone could steal a bike with one of these locks on
it."

Kryptonite, which is based in Canton, Mass., and was bought
by Ingersoll-Rand in 2001, is named for the only material
that can defeat Superman. The company has been making locks
since the 1970's and is recognized by most bicycle shops as
the leading lockmaker.

It is so confident in the security of its locks that if a
bicycle is stolen by someone who broke the lock, Kryptonite
will pay up to $3,500 to replace the bike, depending on the
model of lock, though there are several caveats to the
policy. Bike shops in New York City overwhelmingly
recommend the company's locks, particularly the four locks
that are designed specifically for New York riders.

In a statement sent by e-mail yesterday, the company said
that it was aware of the problem and was moving quickly to
get locks featuring a different mechanism to bike shops and
that it was designing a program to let users of compromised
locks to upgrade to new ones.

Donna M. Tocci, a spokeswoman for the company, stressed
that locks made by other manufacturers shared the same
vulnerabilities.

Cyclists across the city marveled at how easy it was to
crack their locks. With a little practice, opening a
Kryptonite with a Bic barrel takes as little time as using
a key, said Arone Dyer, a mechanic at Bicycle Habitat in
SoHo. She produced the white plastic barrel of a Bic pen
from her pocket along with a Kryptonite brand lock and
provided a demonstration. In less than five seconds, the
shackle popped and slid open.

"It is that easy," Ms. Dyer said.

The NY Chain lock, the
product most shops recommend for city cyclists, consists of
a heavy chain and small U-shaped lock. It weighs about six
pounds, so heavy that many riders wear it slung around
their waists. The chain is made of squared links of
hardened steel that is impossible to cut by hand, so that
part of the lock is still sound.

Bike shops are recommending that customers replace the
small U-lock with a sturdy padlock, like the ones that
bodegas use to secure their roll-down gates. These padlocks
cost less than $20 at most hardware stores.

In addition, Kryptonite has a line of locks that feature
flat keys; Transportation Alternatives recommended that its
members buy one of those.

The group's Mr. Budnick said that most bike thefts could be
prevented if only office buildings allowed people to bring
their bicycles indoors, but few do. A bill requiring
buildings to allow bikes inside was introduced by City
Councilman David Yassky but has been stuck in the Housing
and Buildings Committee.

Will Wood, whose Spokes and Strings shop in Williamsburg
caters to the commuter market, said he was warning anyone
who would listen.

"I feel like a Cassandra, but for years I have said to my
customers, 'This is the industry standard, and this will
keep your bike safe,' " Mr. Wood said. "Now I tell everyone
who comes in, 'Tell your friends before the thieves tell
theirs.' ''

http://www.nytimes.com/2004/09/17/ny...0bacc397a2a496


---------------------------------

[Adventure Girl]

I saw this the other day and posted this thread. I have actually tried it and it does work. What disturbs me is that Kryptonite has known about this for several years. I saw a link to a message board from as far back as 1992. Someone who wants your bike badly enough can get through ANYTHING. But it's alarming that a regular kid with a ballpoint pen (no tools or special skills) can open the lock.

This "trick" supposedly works with other brands of locks, not just Kryptonite. It's locks that have cylindrical keys. Be careful with your bikes out there, ladies.

[smurfalicious]

Man, that is some pooped up squawk! I've been debating buying a lock for Pony, but wasn't sure what to get. Boy oh boy would I be livid if I bought a $30, $40, $50 plus lock and found that out! That kind of money represents a new race worthy tire, or some basic tools, or some tubes, a trail guide, all kinds of stuff a beginner like me needs, and has to piece together slowly. Heck, even my COTA membership! GRRR! Sad thing is too, I know how to pick locks, and from experience Master Lock is way easy, and gets easier over time. So are apartment doors due to the frequency of use. Bike locks never came up in my education though, wish it had. And no, I wasn't my skills for evil, it was just something a friend taught me to do, and I was very, very, very bored, holed up in an overpriced SF bay area apartment with no nearby forests to play in, and no horse to ride.

love and cookies
-smurf

[spazzdog]

I sent an email to the Kryptonite people with the video. This is what I received back:

We understand there are concerns regarding tubular cylinders used in some Kryptonite locks. The tubular cylinder, a standard industry-wide design, has been successfully used for more than 30 years in our products and other security applications without significant issues.

The current Kryptonite locks based on a tubular cylinder design continue to present an effective deterrent to theft. As part of our continuing commitment to produce performance and improved security, Kryptonite has been developing a disc-style cylinder for some years. In 2000, Kryptonite introduced the disc-style cylinder in its premier line of products, the New York series. In 2002, Kryptonite began development of a new disc cylinder system for both its Evolution and KryptoLok product lines, which currently use the tubular cylinder design. These products are scheduled to be introduced in the next few weeks.

We are accelerating the delivery of the new disc cylinder locks and we will communicate directly with our distributors, dealers and consumers within the coming days. The world just got tougher and so did our locks.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Sandy Salvatore
Customer Service Rep.
Kryptonite
An Ingersoll-Rand Business
437 Turnpike Street
Canton, MA 02021
Phone: 800-729-5625 ext. 282
Fax: 781-821-4777
Sandy_salvatore@irco.com

[Cdalekat]

Am I happy (and lucky!) that I purchsed one of the NYC u-locks with a flat key.

I don't leave my baby on the street anyway. I take him inside at work and at the gym.

[Surlygirl]

Hey girls,
Kryptonite posted a new replacement statement today at their web-site so you can register and they will start replacing locks and upgrading sometime in October but you can register now.
www.kryptonitelock.com

[triscuit]

Some stores are doing a discount/trade in program now if you don't want to wait. I replaced my kryptonite lock with an OnGuard lock at an lbs (CityBikes in Washington, DC) a few days ago. If you can show you bought the lock there in the past two years you get the OnGuard lock for $15 or $20 (depending on which one you get). If you did not buy it there, you can get a discount of $15-$20 off a new lock (I picked up a version that cost $45 without the discount, so I got it for $30). I assume it is a deal that OnGuard is offering through many stores, because the poster showing the offer was printed up by OnGuard, not the lbs.