lockpickgeek

Hehe.. no, I do not work for Kryptonite. If I did I probably wouldn't be suggesting replacing the lock that comes with the NY chain with one from a different maker. I have just been a lock geek and a cyclist long enough to have a not-so-reactionary response to this kind of news, and I've seen the results of people using crappy locks many times. In my experience, and in my city, a case-hardened chain with a good lock is the minimum if you want to keep your bike. The Krypto chain is a great one and readily available. But now someone figured out an easy way to pick the lock. I'm not saying that this is not a problem. I think it's a big enough problem that I'm shopping for a new padlock on the way home from work today. I'm just saying that compared to the flaws in everything else on the market, this isn't particularly surprising or unusual, and I don't think it's going to destroy kryptonite or put them out of business as some have been suggesting. I also don't think it's enough to recommend many of the other locks on the market... e.g., I hear all sorts of people asking about the master lock cuff-style lock. I live in New York, and I remember seeing master lock cuffs three times here... Once locking a bike up, and twice broken on the ground. Pretty bad recommendation. So the bic method of picking a lock only takes a simple tool... bike thieves can and will get whatever tools are necessary, and as long as they can get in and out fast they don't care much if it's obvious theft.

Anyway, calling me names won't improve the security of your bike. I only posted because I've had one stolen myself, at a time when I absolutely couldn't afford it, it was a terrible experience, and I want to encourage people to lock their bikes well and not buy some cheap lock in a panic.

If you want to avoid kryptonite, you can probably find another good case-hardened chain and a decent padlock. Non-case-hardened chains (including most hardware store stuff) mush like butter under the jaws of a bolt cutter. I'm not sure who else makes them for the bike market, but I know I've seen a couple out there. They aren't cheap, but neither is replacing your bike.

Nanojath's post about how this works is pretty much correct, though I don't think the malleability of the pen makes that big a difference, as long as it can grab... it's more about just moving the pins back and forth while providing enough twist that you can get a minute amount of rotation when a pin is in the right place... thus the "twist and wiggle" recipe. Picking "normal" locks isn't really any harder except that getting to pins inside a deep narrow slot takes slightly more advanced tools, e.g., a paperclip, with a sideways press against the bottom of the key slot from a pencil point to provide the rotational bias.

Anyway, flame me all you want, but be realistic about what a lock will and won't do for you. Most of them provide sadly little security, and having to add a big chunk of the krypto lineup to that category is nothing earth-shaking. People used to thing U locks were all unbeatable, until someone figured out that they can almost all be popped off with a little leverage. The info got out fast, and .... people still use them, they still sort of work, and from time to time they get broken and a bike is stolen. I just don't see how this is so different.

winston

Sorry, I forgot to mention that this is ATA Cycles in Cambridge, MA.

ephemeralskin

at this point i would prefer ANYTHING to the bictastic kryptokrap i have right now. heres why: I AM NOT AFRAID OF BIKE THIEVES be they fancy unemloyed locksmiths gone bad or sadsack junky street kids desperate for their next fix. what i AM scared of is BIC PEN USERS who dont give a shiit about bicyclists or bike culture and the code of the land that says stealing someones bike makes you lower than a worm. for example, the university college kid be they jock or stoner or whoever. they pass my bike and say 'ha i heard about this on the net. i wonder.....' and just like that my bike is gone.

no right now i am mostly glad i have a fixed gear w/o handbrakes, and clipless pedals w/ rather small platforms. even if they get through my 'kryptodefense technology' with their writing instruments i dare them to make a quick getaway.

by the way nice work fixie forum for being at the forefront of danger and security simulataneously! we rule.

No_longer_A_User

Just came across this thread from MTBR, so I grabbed the 10year old Kryptolok out of the back of my truck and guess what.. took about 30 seconds to open it. Not earth shattering but disapointing anyways.

I just registered to post on this thread..
Really suprised nobody had taken "Brandon" already, same name on MTBR.....

slvoid

I just noticed kryptonite's now offering 4 years of anti-theft protection. Looks like they recently put it up cause I didn't recall seeing it yesterday.
https://www.kryptonitelock.com/images/ATPCoupon.pdf

ScooterBoy

I heard about this via an email from the Bicycle Kitchen in Los Angeles. No word yet on how successful anyone there was in attempting this.

I'm hesitant to try it, as I only have one U-lock and no funds handy to replace it - don't know if I could lock it up again if I succeeded.

As a mototrcycle/scooter rider who uses his Krypto to secure his easily-hotwired ride, I think that yes, this *IS* information that goes beyond bike-forum specific.

BTW - the old aphorism is apropos: "Locks keep honest people honest."

SSenorPedro

Well, I don't know what side of the bed you woke up on, but that lock is a Kryptonite. It uses the same standard locking mech. as most all kryptonite locks. The double-locking shackle was supposed to be more secure.

See my picture with part of the R.E.Load sticker removed.

Oh, and yes, Kryptonite - I am available for interviews at your convenience. B.S.M.E. with internship in the cycling industry and experience in machine design.

salome

I just talked to absntr...

He has a friend who has a new, having been bought very recently, krypto mini lock. He said it appeared that the diameter was a bit smaller on this lock than his *older* mini. I know this doesn't really solve anything because you could just use a smaller pen or create your own pen out of random scrap.

Really I'm checking this thread way too much lately. It makes me think that this is getting a little bit out of control. Of course it's a big deal, but really ... Yeah it would suck if someone stole my bike. I guess I'm going to go back to my huge chain and lock. And yeah it sucks that we have to carry around a chain that weighs as much as a bike (at least my pants will never creep down anymore), but I'd rather do that than have someone swipe one of my bikes. Even my beater fixie, actually especially my beater fixie.

We can't live in a mini u-lock because it fits snuggly in my back pocket bubble forever.

Maybe I'll make a mobile out of all my old u-locks. I'm feeling artsy. At least they won't be thrown away.

absntr

My friend from Australia just e-mailed, it's made it to the other side of the web. So funny, she starts off with, "Hope you haven't seen this yet..."

Oh yes I have. Since Sunday night.

Making news unaesthetic, making news baby.

brunning

those videos have been downloaded twenty-five thousand times in the last 24 hours.

Joe Gardner

Nice... If you need a mirror, let me know, I am sure there are a few guys here with dedicated servers who can help out.

catatonic

I have been hammering this thread on each update, but that's because I use a bike as my main for of transit...and right now, of all my bikes, only one is in servicable shape...if it gets stolen...I have little means outside of the bus or other gas-guzzling menas to get groceries, and do the things I normally do. This would put even more of a financial damper on me than merely replacing the bike...i have to have 100% trust in the lock being of solid design.

now I do understand that NO lock is thief-proof, however I would have expected the lockmakers to have people to probe and pick at their locks, so by now they should have already known about this. Heck, in the software industry often they hire contractors to try to hack into their own software, and then give them a report on how it went, so they can be assured of a reasonable level of security.

Jamming a pen into the lock is not a skilled task, it just takes luck. This is what scares me, 7 pins, many are the same height, prolly only about 100 or so combinations once you account for mechanical slop that is present in most frequently used u-bolts...and well you see why its so bad.

Really this has left me with an upset sotmach all day...I really need to buy new locks, and soon...that way they can't jsut take a bic pen and possibly get my bike.

unaesthetic

Yeah.. news, no doubt. I've been contacted by a bunch of friends who I told this to yesterday and who are now seeing it pop up on all the really popular portal sites (a lot of them linking your video, most linking bikeforums).

I was contacted by one news person so far, but out of respect for Kryptonite and their unfortunate situation; I've decided to give them a couple days to make it up to me before doing any interviews (I was kind of kidding about being interviewed earlier but I guess there is actually interest)...

I'll keep you guys posted. I've still not personally heard back from Krypto even though I've heard a few people have.

Oh, and until then how about you guys direct some of this traffic over to my new website! https://collectornerd.com/ hahaha

Cheers.

supcom

What bothers me is not that the lock can be picked (all locks are pickable) and not that thieves can use other techniques against any lock. The thing that bothers me is that now any kid can take his cheap BIC pen and pick up a new bike on the way home from school. The average person does not have easy access to specialized lockpicking tools but everyone has access to BIC pens.

The number of potential thieves has skyrocketed overnight. I'm glad I use a flat key lock and do not live in New York or any college campus.

eric99

If the video-hosting people are getting hammered, you should try FreeCache. Just change the URL to https://freecache.org/https://thirdrat...isc/krypto.mov and FreeCache will take most of the traffic.

Note that freecache won't take over until it recieves a certain number of requests. Until then it just redirects to the target server.

Update: freecache only caches files over 5MB. So I guess that won't work.

Alternatively, use bittorrent!

MKRG

Burn, baby! BURN!!! HA! HA! I sort of wish I had a fire to dance arouns right now. No, I do not know why.

salome

But having lived in NYC I knew NEVER to trust U-locks. And then I moved out to the sticks ... I mean Chicago and decided I could return to my u-lock because, hell, it's a lot easier and lighter to carry around. I think most riders in NYC who lock their bikes up outside for any period of time will agree that a good quad chain with a really good lock is the only way to go. I was just lamenting over the idea that the NYC philosophy will finally have to be applied everywhere. Yeah, it really does suck that some punk can mosey on by a rack of bikes and be like a kid in a candy store and pick whichever one he/she wants.

To give credit to the krypto people, they were really nice when I called earlier today. I think unaesthetic is doing a really good thing by not going on record with the press yet. Hell even if he mentioned that they (krypto) were being professional the press people would probably edit that out in an instant.

And shed no tears for kryptonite, they still make really good chains which I'm sure there will be a run on shortly.

JWalton215

I have only gotten my dad's kryptolok to go 1/8 of a turn and I can't get it to go back...

CraigH

MTBR

https://forums.mtbr.com/showthread.php?t=48182

https://forums.mtbr.com/showthread.php?t=48142

I heard about this thread from the first post.

Yes, I just registered to post this.

aglioeolio

My jaw dropped when I saw this at first. I tried it on my new New York Chain (5') with EV disk lock. The lock has a round tumbler (unlike the Fahgettaboudit). After a little fiddling I opened it with NO problem. I was so upset I rode right to my local bike shop (Westchester Pro Bike Shop, Westchester Square, Bronx, NY) and showed them my BIC key.

I used the universal BIC key to open up one of the shop's U locks that were on the wall. Needless to say, that opened. The owner and store mechanics were as upset as I was and the customers around me.

As New Yorkers, we'd all known and respected those products and suddenly they were junk. They are Junk. You cannot start an AUDI with a paperclip and you should not be able to open a lock with a pen.

I'll be calling Kryptonite tomorrow and requesting a Fahgettaboudit lock to replace mine. This clearly isn't an issue of defective parts or a poor batch. It's a product that is now worthless. Those joking about getting a new bike had better consider that they themselves are acting fraudulently and (in NY) are stealing from others whose bike are covered by a special insurance policy.

Kryptonite is obligated to do something about this, including a recall and replacement with something that is secure and will be covered by their insurance policy. This could go as far as a class action lawsuit (How many people have read this? How many locks were sold that are now useless?)

Expressing concern for Kryptonite as a company is something most feel initially, however Kryptonite isn't some small company in MA. It's part of Ingersall-Rand, a huge multinational that is obligated to make this right.

If someone else doesn't go to press with this soon I'll be disappointed. For the reaction on the web alone this is something that I'm sure the NYT would love. What about when Ingersoll-Rand has to make due with this problem? I should go and short the stock tomorrow morning. On second thought they are still selling lots of other security products that are more than covering this Kryptonite F-up.

I am a cancer researcher, bike rider, former professional bike mechanic and foremost a pissed off Kryptonite Customer.

I'll be emailing the NYT editorial Staff tonight along with others. I'll be sure to credit this forum with my inspiration.

misterherman

Just forked over $100 I don't have for a Master Lock Street Links (nice and flat regular key), similiar to the Fahgettaboudit (staying away from Kryptonite for now), something like 8 lbs (I guess it can only make me stronger?) And yeah, all locks are defeatable, but someone who's determined and qualified enough to undo this thing will have my bike anyway, I just don't want to give it away to some punk wielding a bic.

spiv

well just got home and tore up 2 or 3 bics, and my hand - guess I need to start working out. the result is that it works - but if you're going to try it make sure you go all the way or you jame the cylinder.

this proves the adage - keep it simple stupid. we're all devising new high tech methods, and the thieves are in the stone age! remember wwIV will be fought with sticks and stones.

salome

Once again I feel like, at least for my own sake of mind, I have to clarify my thoughts...

Kryptonite makes a good chain but without the lock. Toss the lock that comes with the chain and pick up something of better quality, less able to be picked etc.

Call me a mushy sap but I still think the krypto people need to sort their s*** out before we go ballistic. Yeah now in hindsight it seems like a no brainer that something like a bic can be used to pick the lock. BUT none of us have thought of it before, or had it happen to us, and how long have these locks been on the market?

Joe Gardner

15+ years.

Camel

First try 2 minutes. Second try 30 seconds, now less-adding teflon chain lube made the proccess FASTER . Same bic pen.

Yellow EV2000 disc key series KK####.

This bloody blows chunks!