Thursday, January 29, 2009

Locksmiths vs Hackers

Over the past few years there has been an emerging culture of 'locksport' enthusiast. The stereotype that has come out of that is the 'hacker who picks locks better than a locksmith'. There have been a number of articles on this movement in popular internet webzines. One that recently caught my eye was This one: Locksmiths Hate Geeks.

As most rumors do, this has a grain of truth to it. Because of the internet, the fundamentals of lockpicking are more readily available to the general public and people who or interested in subversive topics are likely to be attracted to both 'hacking' and 'lockpicking'. Combine the element of some High IQ filters and add 'competition' to the mix, you end up with a quite interesting group of people who are very proficient at picking (and impressioning too).

Personally, I find the whole topic pretty silly. Being a locksmith has far more to do with being ready to help a customer at a fair price anytime day or night than it has to do with lockpicking. Newsflash to the geeks, comparing locksport to locksmithing is like comparing running fast to playing professional football. Most of you will outgrow the interest. Newsflash to the locksmiths: Hire these geeks, they will probably make good locksmiths.

Geeks usually meet many of the requirements of being a good locksmith: curious, technical in nature, don't want to work in a repetitive mindless job, they like challenges, like learning new things, don't have huge aspirations of owning the corporate world and they are good with numbers and computers.

To be clear, 'hacking' for criminal purposes is against the law and those people should be prosecuted. 'Hacking type' refers to someone with knowledge and skills of finding work arounds for electronic security, they have professional people who work for companies to identify problems in systems and software and serve a valuable purpose like the gentleman described below.

Barry Wels is one of the legends in the 'underground' of lock bypass. I've personally met Barry and exchanged information with him while working on training for a Spanish company we were assisting to get into business. He had some invaluable information on European locks and I shared some feedback on some of the other species of locks that I was encountering down there.

Barry is probably the Diety...or at least a Demi-God of the underground 'locksport' community. I have personally heard people demonize him, particularly for releasing information about 'bump keys' to the public.

The root of the argument is over 'Disclosure'. Disclosure refers to the idea of 'blabbing' about a security flaws when you find them. This is the real division between the geeks and the locksmiths, not 'lockpick envy' as the article above might suggest. The geeks seem to represent Disclosure and locksmiths don't want the information in the wrong hands.

I personally am torn on 'Disclosure', I see validity in both points of view. I don't want anybody disclosing my Pin number on the internet. Yet if Barry and his gang figure out that someone can hack into my bank account or my phone...I want them to identify the problem and make the people responsible for it to FIX IT. The fact is that most companies such as software devs, internet devs and lock companies are often slow to react to 'limited disclosure' efforts. Releasing security flaws to the 'public domain' often causes immediate reactions to fix the problem.

But there is a point when it goes too far. If I found out Barry was coaching individuals who were committing crimes, he should be held accountable. That is the big grey area: If the little teenage girl that is often show bumping open Medeco(r) locks goes out and commits a crime by bumping open some jewelry store lock...is the person who taught her those skills a co-conspirator and going to get in trouble. You would think 'uh, Maybe' but consider: Would a rifle range instructor from the Marine Corps be held responsible for President Kennedy's death?

Even within the 'underground' the term 'responsible disclosure' has begun to circulate more, I don't know if that has been motivated by the hovering possibility of litigation by some manufacturer or if that whole side of the camp is maturing with age, either way it is good to hear that some discretion is gaining popularity.

Back to Barry, Barry is a Genius (yes with a capitol G). Barry has been mischaracterized as a 'hacker' when in fact his real life's work is quite the opposite, he works on real security. His lockpicking and bypass seems to be more of a fascination and passion. Barry also happens to be a world class impressionist.

Barry works for Cryptophone, which their website describes as: GSMK CryptoPhones are the first and only fully trustworthy solution for completely confidential mobile phone calls. That is a pretty big claim, especially for someone who's life is centered around dispelling very similar claims.

To me the most interesting thing about the whole issue is that in his work, Barry embraces the very sword that he swings at various locking devices, they release their source code for review by peers...they dare people (and probably welcome people to try) to 'hack' it. "Here is our claim: It is secure. Here is our data: See if knowing HOW we secure it helps you hack it." No security through obscurity with that. However, I'm sure there are those who would savor a bit of the irony if the technology that secures their secure phone could be hacked and shown on the internet.

Consider this ethical dillema:

I wonder what would happen if Barry himself, discovered a flaw, even post production, of their phone that would trigger a massive recall if 'full disclosure' were made. If only he knew about it, would he 'out' his own product. Any non-disclosure documents/contracts aside...I bet he probably would.

For all the negative comments I've heard about 'those hackers' giving away all the lock secrets, I have to say that the idea of 'disclosure' reeks of integrity. They really have an open architecture approach that can serve a purpose.

The ugly truth is that nothing is truly secure, there will always be a 'bypass' or workaround to some measure. "Social Engineering" will always be a hole for sure.

Yet, the bell is rung, you have to hide things in plain sight it seems. It is true people need better locks on their doors. I personally think that some people in the 'disclosure community' are not really interested in 'helping humanity' by forcing people/manufacturers to improve their security. I think they have found a drum that they can beat and get a bit of attention. But that is their business and it is not for me to judge if it is right or wrong lest judge their motives.

However, I suspect that one of the 'disclosure guys' will one day utter the magic words, "...but if you pay me $$$, no one has to know about the problem." At that point the 'integrity' part is gone and they will join that 'long grey line', it turns into blackmail. I'm sure someone will try it one day, the opportunity is just too obvious for someone NOT to do it.

Security comes down to common sense and budget. Do you want a house that is secure against typical attacks or do want a house that Barry Wels couldn't get into. If you want the latter, you should probably contract Barry to build it for you...it might take 20 years and cost a billion dollars but he could probably do it.



The only Nationwide Trusted Locksmith



A good quality lock that resist 'real world' attacks such as kicking and prying is the Ultimate Lock. It can be fitted with most types of cylinders, the security of the Ultimate lock is not in the keyhole, it's in the construction of the dual locking bolt arrangement and the physics of kick resistance. Check it out at www.theultimatelock.com I have personally installed these devices and have tested them to my satisfaction. We have one on our own training center door.

Wednesday, January 28, 2009

What does 'chip key' mean? How do I know if I have a 'chip key'?






A 'chip key' usually refers to one of two types of keys that have an electronic component to them. The first has a visible chip located on the key and is normally on a General Motors vehicle. This is called a Passkey system or VATS (Vehicle Anti-Theft System). These appeared in 1986 on the Corvette and certain Cadillac models. The second type refers to a key with an RFID (Radio Frequency Identification Device) located in the head of the key, these type are not normally visible unless the bow or head of the key is transparent.

Both of these systems add a layer of security to the vehicle by having the vehicle check the value of the electronic component on the key before allowing the vehicle to be started. Some systems prevent the vehicle from attempting to crank while others prevent the fuel system from working.

If you have the first type, VATS it is obvious because you can see the chip on the key. The other type is more difficult to determine because the RFID is embedded in the plastic head. The only real way to know for sure is to use an electronic device designed to detect the chip. You could destroy the key to see it but that would likely ruin the key and would be costly to replace.

One thing is for certain, you should always have at least three of these keys. Why three and not just two? In many vehicle systems you can program in a new key yourself but have to have at least 2 working master keys for the system to do it. If you get down to 1 working key then you will have to contact a service person such as a locksmith or automotive security specialist to program they key as special diagnostic equipment is needed to complete the task.

Does this really stop thieves? This is a percentage question, from an insurance carriers perspective the 'chip keys' or transponders have have eliminated a great deal of vehicle theft. But no security system can stop a well prepared thief, especially if they own a helicopter and just fly off with the car. Interestingly enough though, even if a vehicle is taken by force such as with a tow truck or helicopter the thief still has to 'restore driveaility' at some point by making the keys or bypassing the security system. Yes, they can do it but it is certainly a deterrent and adds real cost to their thieving operation.

If all keys are lost for a vehicle that has a chip on the key, you usually have two options: The dealer or a locksmith. Because the keys have to be programmed you cannot normally go to a dealer and pick up a key that will work the vehicle. You will usually have to have the vehicle TOWED to the dealer for them to service it. Most locksmiths however will come to the vehicle with all of the necessary machines, transponder key blanks and equipment to cut a key on-site to get you on your way immediately.

If you ever find yourself in need of extra keys, replacement keys or replacement remotes/key fobs such as found on newer vehicles make sure you call a bona fide locksmith. Look for a Pop-A-Lock(r) provider or an ALOA (Associated Locksmiths of America) locksmith. Always ask for the EXACT FINAL PRICE that you will have to pay including service charges, labor or any other 'fees'.

For a list of Pop-A-Lock locations and phone numbers please visit www.popalock.com or visit www.findalocksmith.com for an ALOA member in your area.



ALOA Pictures, Images and Photos

www.popalock.com
www.findalocksmith.com

Tuesday, January 27, 2009

Virginia Locksmith Wars

The State of Virginia passed a very solid locksmith law. One of the best features of the law is that it was to be enforced by the Department of Criminal Justice...yea, people with badges.

Now as a result of who knows what, they are taking a vote to put it under a much less 'enforcement oriented' contractors type board.

This will hurt the locksmiths a little, but will mostly hurt the people of Virginia. This locksmith scamming stuff is completely out of hand and the states need laws with Teeth to fight these con men.

Below is a list of Congresspersons and Senators, if you are a Virginia resident and are concerned about this situation please call one of these guys and at least express your opinion for Teeth in the law!

Residents of Virginia are represented in Congress by 2 Senators and 11 Representatives.
Member Name DC Phone DC FAX
Senator James Webb (D- VA) 202-224-4024 202-228-6363
Senator Mark Warner (D- VA) 202-224-2023 202-224-6295
Representative Robert J. Wittman (R - 01) 202-225-4261 202-225-4382
Representative Glenn Nye, III (D - 02) 202-225-4215 202-225-4218
Representative Robert C. Scott (D - 03) 202-225-8351 202-225-8354
Representative J. Randy Forbes (R - 04) 202-225-6365 202-226-1170
Representative Tom Perriello (D - 05) 202-225-4711 202-225-5681
Representative Bob Goodlatte (R - 06) 202-225-5431 202-225-9681
Representative Eric I. Cantor (R - 07) 202-225-2815 202-225-0011
Representative James P. Moran (D - 08) 202-225-4376 202-225-0017
Representative Rick Boucher (D - 09) 202-225-3861 202-225-0442
Representative Frank R. Wolf (R - 10) 202-225-5136 202-225-0437
Representative Gerry Connolly (D - 11) 202-225-1492 202-225-3071

Monday, January 26, 2009

Locksmith Weekend Training in Brownsville, Tx

Typical Pop-A-Lock Weekend

1. Drove from Louisiana down to Brownsville, tx to do some training with the local franchise guys down there. I packed up a bunch of training locks and materials, tools and machines into my little Scion and headed out on I-10.

2. I stopped in Houston to visit with the local franchisee. He has been very happy with the locksmiths on staff down there and particularly one who has really taken the ball and run with it. I believe he and his nephew post here as well.

3. I got into Brownsville around 1am and checked into the hotel. They had karaoke night going on and the place was packed. A young Hispanic girl was belting out a cool version of Kid Rock's "all summer long" while I was checking in.

4. I met up with Brian, Raymond and Roger. They have all been with Pop-A-Lock since they started in Brownsville back in 1997. They were early so we got started a little early on the class. They have been doing straight teching no locksmiting but are licensed non-the-less.

5. We covered a lot of material, working from a general Res/Comm curriculum focusing on the hands-on practice, especially on dis-assembly when no key is present.

6. The topics were:

a. Texas Law, Technical Integrity and Fair Business practices. (gleaned from Aloa's code of ethics and the North Carolina materials alluding to the same.

b. ADA and Life Safety

c. Verification of Authorization

d. Key Blank Identification

e. Codes and Code Machines

f. Hand Filing and fundamentals of impressioning

g. Professional Opening techniques and picking refresher, picking, Pickgun, Adams Rite Bypass, F-Series bypass tool from Laser security products, Bumping, loiding, other miscellaneous bypass methods.

h. Service of KW Classic, KW Titan/Ultra Max, KW Smart Key, SC A series, Sc F series, Weiser, Weslock, Mortise, Rim, AL series, L series schlage mortise case locks, 1850 and 4700 series Adams Rite, touch pad type exit devices and a discussion of 'removal of deadbolts with no visible screws'.

i. Installation techniques and tools.

j. Dispatch methodologies and technology

k. Integration of LON network providers to daily operations.


7. We finished up very late. All the guys were very interested in the material and showed a lot of motivation during the class. I could tell that Brian was the type with a natural interest in the industry and was very eager to know more and wants more and deeper training.

When we field stripped the AL series schlage down from thumb turn to keyway they get to see EXACTLY how the lock works and always seems to be a highlight of a class.

8. We ate at a little hole in the wall type BBQ place called 'Fat Daddy's', a most appropriate name as I'm sure I would gain 50lbs if I lived nearby. I didn't think there was any way I would be able to finish the giant pile of meat they put on that plate but I got it done! If ever down in Brownsville area it's worth a lunch stop for sure.

9. After class, we spent some time talking shop and future goals of the location. I learn as much from a class as the students do, especially when working with veteran techs. I always get a new perspective on things and pick up tips, tricks and thought processes that I didn't have before.

10. I got back to hotel, caught up on the forums and email and shut it down for the night.

11. I got on the road this morning about 6am. It's about 615 miles and I really don't like to speed so I'll be home mid-afternoon. I've got some heavy weeks coming up, always seems like the first of the year brings new projects, efforts and 'wrap ups' from the previous year. One of the main missions right now is working with the investigators and the attorney's against the scammers. We've got a big technical project in the works and the national accounts program is a source of constant focus/distraction and coordination and work!

Most Valuable Locksmith of the Year: Mike Esposito

Subject: US Lock/Pop-A-Lock Most Valuable Locksmith Award

The franchisor has not historically implemented a system-wide employee of the year award, this is done locally within each market. However, in recognition of truly distinguishing service, this year SFA has identified a franchise employee who has contributed a great deal of personal time, effort and energy in order to improve the Pop-A-Lock system as a whole.

Mike Esposito, Orlando employee number ORL-034 has exemplified the spirit of what our locksmith division seeks to be, a unified force that shares experience and best practices to the benefit of all. Mike's dedication to servicing the franchise customers, contributions to the technical body of knowledge for the entire system, his willingness to assist his fellow locksmiths, the respect that he has garnered for Pop-A-Lock from outside locksmiths and his contributions towards the National/Multi-Regional accounts program has distinguished him from his peers.

Particularly, Mike has contributed several dozen comments and technical feedback articles both to the Times program directly as well as through separate email contact with corporate. This detailed feedback from 'real world' situations has often confirmed or corrected issues in the technical material and is invaluable for shaping our technical practices. If 1% of our locksmiths provided the same amount of accurate data back to corporate for inclusion and distribution, we would have an untouchable level of reference material at our disposal.

In recognition of his efforts and support of the Pop-A-Lock system, he is being awarded with both a certificate of recognition from Pop-A-Lock and a generous gift certificate from our corporate sustaining partner US Lock and a full set of High-Security Picks.

Robert J Reynolds CPL, CPS
Director of Operations

Locksmith Learning

Locksmithing is best learned through apprenticeship. It is one of those trades that you could sit through HOURS and HOURS of lectures on locksmith topics and not really be able to go out and earn a living at it. Most locksmiths are graduates of the school of hard knocks, they learned by doing...and the learning never stops.

There are some wonderful prepatory classes that you can take to get a grasp of the fundamentals. Many people are familiar with the famous Foley-Belsaw home study correspondence course, it even came with training aids and key machine. There are some fine in-house courses from Lockmasters (LSI), North BennetSchool, Cothrons Safe and Lock to name a few. The Associated Locksmiths of America has a 5 and 6 day, Basic Locksmith Course course that presents a very good overview and includes a good bit of hands-on learning during the course. Red Deer College in Alberta has one of the finest courses available anywhere in the world.

It is VERY wise to participate in one of these type of 'Intro' courses if you are getting into the industry, but once you hit the streets...the REAL learning begins. The funny thing is...it never ends. Security is a dynamic concept, it is always changing, the dog is always chasing its tail.

If you are one of the lucky ones who is 'brought in' to the profession by a seasoned locksmith you have lots of advantages over 'going it alone'. In locksmithing there is a true apprentice-master relationship, the dependency is usually glaringly obvious especially over the first year or so. In modern society with mobile phones on all our hips, 'help' is often only a phone call away, I have often pondered how tough it must have been just 20 years ago. An experienced locksmith can save you possibly hours of work, with just a few words to help you get past 'The sticking point'.

The sticking point: A particular aspect of a task that can result in a long process of trial and error, unless some specific secret or trick is known that can quickly resolve the problem.

The terms 'secret' isn't really what many might think, like "The secret opening method or technique'. Sometimes the secret can be a preventative action that helps keep a problem from happening. An example would be the master knowing that a particular safe has a glass relocker, that once shattered will cause the opening to become VERY time consuming. Another simpler example is the use of adhesives or tape to hold a template in place insead of trying to use three hands to do a job.

Key Blank identification is another area that sometimes defies study. A novice locksmith may have to due an inordinate amount of trial and error looking on a keyboard or in a key blank catalog for a match, versus a master that can visually recall not only the exact blank by looking at the bow of the key and the milling but immediately find it on the wall.

Even a relatively short difference in time say a 5 minute task for the apprentice versus a 1 minute task for the master can make a tremendous difference in what the two can accomplish in a day...those 5 minutes of 'flubbing' can really add up.

In addition to the convienience of the cell phone, another powerful tool has become available to the locksmith in the field...other locksmiths. Particularly other locksmiths who have access to the internet througout the day. This inter-locksmith communication started very early on with usergroups and has evolved into massive communities of locksmiths that have embraced the idea of making each others lives just a little bit easier by sharing what they know.

www.clearstar.com was an early front runner in the forums. Each site has it's own distinct personality as well as some pretty distinct personalities from the members. Clearstar is particularly recognized as a hub for Safe and Vault technicians but all fields, specialties and experience levels are represented. Clearstar is one of the few sites that I don't see people scolded for asking the same question even if it has already been answered in previous post. Other industries have forums that will quickly chastise 'newbies' for asking old questions. I've noticed that within Clearstar this is far more tolerated and as a result probably goes a long way to making new members feel 'welcome' and not 'stupid' for not knowing how to effectively search.

www.keypro.com was developed by Jim 'Jameson's' Hetchler and caters to Automotive Specialist but has a good mix of skillsets. Because of some technological featues of the site, questions are often answered VERY quickly. Without a doubt some of the most knowledgeable people on the subject of automotive security congregate there.

www.locksmithcommunity.com is an evolution from the original site www.internetlocksmith.com. It covers a huge variety of subjects on every area of locksmithing. Known for it's now famous (infamous?) Dog Pound, a sort of 'time out' area for members when discussion get a little to heated. Many members use a signature avatar pose with their hands behind their heads. As a member the excellent search feature allows you to instantly search through YEARS of detailed questions, answers and explinations...and probably a few expletives as well. Probably the most colorful of the forums as well as home to some of the most finely tuned expertise in the world of locksmithing.

In addition to the forums, the internet has opened up a world of information through the doors of the lock manufacturers and tool manufactuers homepages. www.kaba-ilco.com has countless scores of technical reference materials on keys, machines locks and tools. What once would have taken rows and rows of shelves in the form of catalogs, manuals and books can now be accessed in a matter of seconds through the internet and ebooks.

However, with all of the technology and all of the helps and assist, sometimes it just comes down to a locksmith, his tool bag and his common sense. Thus far reality has not come up with a substitute for any of those three...oh, and On-star(r) doesn't count either because it doesn't work under a shade tree :)

Sunday, January 25, 2009

Aloa and the PRP

ALOA stands for the Associated Locksmiths of America. They are the largest organization of locksmiths in the United States, with nearly 8000 members.

Aloa employs a set of examinations to determine knowledge level of locksmiths on many different subjects. This program is called the PRP or Proficiency Registry Program.

The PRP results in various designations based on an individuals record of passing the various exam categories.

The designations awarded through PRP are RL (Registered Locksmith), CRL (Certified Registered Locksmith), CPL (Certified Professional Locksmith) and CML (Certified Master Locksmith). The organization SAVTA (Safe and Vault Technology Association) also has two designations CPS (Certified Professional Safe Technician) and CMST (Certified Master Safe Technician).

The following is from the ALOA certification FAQ:

The Registered Locksmith (RL) designation does not require testing. Is this designation a certification?

The Registered Locksmith (RL) designation is recognition of experience or training but because there is not an examination it is not a certification. It has been awarded for various accomplishments such as 10 years of ALOA membership which provided for grandfathering when the program was first initiated in 1985, the taking of 12 ALOA Continuing Education(ACE) classes (since 1992) or equivalent and successfully completing the ALOA Basic Locksmithing Course. It is not a path towards certification. It is an ALOA recognized designation and thus meets the requirements of achieving an ALOA recognized designation for ALOA membership.


Certified Registered Locksmith (CRL)
The first level testing for locksmith certification is Certified Registered Locksmith (CRL). A Certified Registered Locksmith is required to pass the ten mandatory categories and at least two specialized electives of his choice. The mandatory section covers the following topics:

Codes and Code Equipment
Cylinder Servicing
Key Blank Identification
Key Duplication
Key Impressioning
Professional Lock Opening Techniques
Lockset Functions
Lockset Servicing
Basic Master Keying
Cabinet, Furniture and Mailbox Locks


Certified Professional Locksmith (CPL)
The 2nd level of locksmith testing for certification is Certified Professional Locksmith (CPL). To qualify for the designation Certified Professional Locksmith an individual has had to earn the CRL designation and have passed examinations in an additional twelve elective categories.

Certified Master Locksmith (CML)
The last tier of testing of locksmith certification is Certified Master Locksmith (CML). To qualify for the designation of Certified Master Locksmith and individual must have earned the designation of CPL and passed an additional 9 electives from the list below.

So a CML will have passed the 10 Mandatory categories + 2 Electives (CRL Level) + 12 Electives (CPL Level) and 9 Electives (CML Level) for a total of : 22 electives. There are currently 26 electives total so 84.6% of the total electives will have been passed to obtain the CML. Aloa may in the future add electives.

Domestic Automotive
Foreign Automotive
Door Closers
Life Safety Codes
High Security Cylinder Servicing
Special Application Cylinder Servicing
Tubular Key Cylinder Servicing
Basic Electricity
Exit Hardware and Exit Alarms
Keyless Mechanical Locks
Lever Tumbler/Non-Safe Deposit Locks
Motorcycle Locks
Safe Combination Locks
Safe Deposit Locks
Time Locks
Lockset Installation
Advanced Master Keying
Safe Installation
Safe Opening and Servicing
Interchangeable Core Fundamentals
Small Format Interchangeable Core
Large Format Interchangeable Core
Electromechanical Access Control
Related Door Hardware
Alarms
Detention Locking Systems

The intent: The PRP system serves a number of purposes. It has helped to organize locksmith education by identifying specific categories that should be common to all locksmiths, it gives locksmiths a rough measure of their own knowledge so they can identify areas that require further study and ultimately can provide consumers with some information about the knowledge level and test taking ability of a locksmith when making a decision to contract for service.

Controversy: The PRP system has received multiple criticisms from the locksmith community because it is a pencil and paper test with no hands on portion. Some locksmiths have vocalized that the test is not a fair measure of their competency because they don't perform well on written examinations but through the evidence of their longstanding operation as a locksmith they are competent despite not doing well or not participating in the exams.

I have personally heard from test developers working in the code industry that the PRP system and grading procedures should be reviewed by professional psychometricians periodically for revision. I do not know the entire history and development of the PRP from a test development standpoint but I do know that the development of testing is a hard science with many techniques for validating questions, answers and scoring procedures. Testing Measures Standards


Personal Opinion: The PRP is a great start to an otherwise herculean task. No testing system is perfect and the deployment of a hands on portion of the exam would be financially and logistically challenging to say the least. The implementation of task, conditions and standards hands on testing would be most easily accomplished as 'end of class' or 'during class' exams that are performed within the context of an educational event. Adding new dimensions to the designations such as a numbering system indicating completed hands on exams would be possible.

Based on the general lack of recogntion from the general public to the existing PRP, the addition of this modification to the system would not be likely to result in much greater public awareness of the PRP system. However, this type of testing would benefit the locksmith community through improved classes and educational milliues ultimatley resulting in better locksmiths to serve the community.

On licensing: The PRP is used by some states and accepted by most states as evidence of competency for licensing purposes. This changes the nature of the PRP from being a system of professional development and a marketing tool for locksmiths into a legal requirement to operate a locksmith business in states that require it. This aspect of the PRP being used in trade regulation then invites new criticism to take on new standards.

The inclusion of hands on competency portions such as those used by many welding certificaiton systems, becomes more relevant to the intent of state licensing, which is to protect the public good and to attempt to ensure that locksmiths are at least prepared to perform a minimum standard of quality work.

The other side of the argument on the use of the PRP in locksmith licensing comes from veteran locksmiths who despite being in business for a long period of time, cannot pass the state based exams and may not be able to operate in their trade unless they pass some portion of an exam.

In essence, the question becomes: How do you create a fair system for all parties which measures 100% what is required but does not exclude competent indviduals that may not have the test taking skills or particular skills measured by the system, some of which may not be applicable in their business or may not be viewed as critical by fire, life safety or code officials within a state, who may be tasked with trying to regulate the trade.

For example a test of a persons ability to generate or fit a key to vehicle, may have little relevance to a locksmith who only installs commercial and residential hardware and who may in fact not even advertise the service of automotive key generation to the public nor intend to do that task.

Some of the most critical applications such as exit device service and installation, ironically is often exhempted in most states for employees of general contractors who often have little or no training on installation of these systems.

Summary: The ALOA PRP system provides the locksmiths, the public and public officials with a tool to guage the competency of locksmiths, the degree to which that system does that has not been formally studied by a standards organization such as ISO to yield meaninful quantitative data that yields correlations to rate of failure, quality of work or other objective data. However, in the abscence of any system that has met the strictest criteria of test standards, a PRP designation does what it ultimatley purports to do: It indicates that an individual has participated in a systematic testing system and has met the requirements of that testing system.

Jim on things Aloa can do to improve public relations for locksmiths.

A message from Jim about things that he would like to see Aloa do on behalf of locksmiths.

I have spoken to several representatives over the years about this. I wish ALOA would direct more efforts toward the Public. Heck I know what a CML is!!! They don't! (Click here for article on the CML and PRP testing)

More efforts to contact and become a part of all the various groups and clubs, i.e.; Eagles, Rotary, Moose, Lions, etc. When was the last time they asked AAA about putting a package together for their membership about ALOA to send to all the customers?

Have they approached the Roadside service's about what ALOA is and educated them as to what the scammers are doing?

In my opinion there are many other things they can do to get the word out to the public. They don't need to tell us who they are!!!

Saturday, January 24, 2009

The easiest way to pick a lock!

There are a number of videos and post about amateur lockpicking and bumping etc. Let me let you in a secret technique that will open virtually any lock with nearly ZERO effort.

1. Acquire the phone number for a licensed locksmith in your area.
2. Call them.
3. When they get there, step back and let them work.
4. Once the lock is open, pay for the service.
5. Wish the locksmith a good day.

Using this simple 5 step technique you can get virtually any lock opened with little or no effort on your part (except possibly to get the phone number!) To save time finding a phone number you can take one of two approaches below for a 1 shot 1 kill solution.

Dial 1-800-popalock (1-800-767-2563)

or if that is too much to remember

Dial 411 and ask for "Pop A Lock".

www.popalock.com

Pop-A-Lock: General Locksmith Services Commercial

Pop-A-Lock EDU: Free when child locked in car

Funny Yelp reviews for Pop-A-Lock of Austin

http://www.yelp.com/biz/pop-a-lock-car-unlocking-service-austin

Very cool and funny reviews on the Pop-A-Lock of Austin Yelp page about two customer adventures that Pop-A-Lock had a chance to help out with.

Press Release about Key Return Tags

United States of America (Press Release) November 13, 2008 --
Pop-A-Lock, America's Trusted Locksmith, has a long history of community service. Their Emergency Door Unlocking (EDU) program offers free service to anyone who has a child locked in a vehicle or home. Pop-A-Lock has added an additional community service in their Key Return Program.
How it works:
1. Acquire a key return tag either by directly asking for one when you see a Pop-A-Lock technician or visit www.popalock.com to request a tag and PUT IT ON YOUR KEY RING.
2. Once you have your tag, register it at www.popalock.com. Don't worry you will get no Spam from Pop-A-Lock, just an annual reminder to your email to update your mailing address.
3. If you lose your keys and they are found, the keys are dropped into a mail box then returned to your registered address...at no charge.

Anyone who has ever lost their keys can appreciate the aggravation and cost that this will save, particularly for someone who has lost WORK KEYS, KEYS TO SENSITIVE DOCUMENTS OR THEIR HOME AND CAR!In the event that keys are lost and are not returned, you can contact your local Pop-A-Lock either by visiting www.popalock.com, calling 1-800-Pop-A-Lock or simply calling 411 and asking for Pop-A-Lock.

Their locksmiths can change your locks, rekey locks, replace lost car keys, program new chip keys and replace hard to find specialty keys at a very fair rate.

Reviews for Pop-A-Lock in Raleigh, NC

http://www.merchantcircle.com/business/Pop.A.Lock.919-872-9744/review/read?cid=269676

Very nice reviews out in Raleigh, NC

www.popalock.com

What makes a good locksmith?

I have had the opportunity to train and work with hundreds of locksmiths on a day to day basis for several years. Many of them have remained in the profession and many have moved on to other things after discovering that locksmithing wasn't for them.

1. Curiosity: If you have a natural curiosity to know how things work, particularly small fairly complex mechanical things, then you meet the first and most important requirement to be a locksmith.

2. Three Hands: Most locksmithing requires three hands. The lack of a third hand handicaps you but can be overcome by the use of mechanical aptitude to find ways to get around needing the third hand. Vices, balancing acts, using other parts of your body and cleverness are the usual methods of overcoming the 3 hand handicap.

3. Patient to a fault: Locks are composed of small very specific parts and pieces, they have to be disassembled and reassembled in specific order for things to work properly. Unlike a motor or other mechanical devices locks are often made 'infernal' by design to prevent people from tampering with the insides, which could compromise the security of the device. Solving lock problems often requires a great deal of patience in working with the 'parts and pieces', springs are particularly good at complicating an otherwise simple task.

4. Honest to a fault: If you are a locksmith for a few years most physical security measures are little more than a nuisance. If you have a criminal bone in your body...stay out of locksmithing. The phrase "Put you under the jail", was developed for the case of a locksmith going bad. If a judge finds out that you are a locksmith and you broke the special trust that community affords you...yep, that's right...Under the jail you go!

5. Common Sense: Locksmiths often work in the field with a limited set of tools and inventory and have to use common sense to solve a lot of problems. A vehicle that is stranded on a dark street and the keys are lost may require the locksmith to modify a key blank to fit the vehicle if the EXACT keyblank is not available that night.

6. Reliable: There are only a few professions that you really HAVE to be reliable. If a librarian doesn't show up to work...some research may get behind but no one is left 'blowing in the breeze' from the lapse. Police, Fire, Ambulance, Locksmiths...when people call for your help, it is often a RIGHT NOW situation.

7. Tireless: You see those ads that say 24 hour service? Often that is a one man show, if they had calls all day and return home at 11PM and get a call at 2am...yep, that's right Mr. Locksmith gets his self out of bed to come help you. Many people call locksmiths in the middle of the night just to see if they can ask questions...newsflash...they are human beings just like anyone else, after hours service is for real EMERGENCIES not for asking how much to duplicate a moped key.

8. Organized: The back of a locksmith truck has literally thousands of tiny parts and tools. If you are not organized and good at 'putting stuff where it belongs', locksmithing will be a hard job because it will take you so long to get things done because your stuff is out of place and you have to dig, dig, dig to find it. This slows you down, causes aggravation and is also bad for customer service.

9. Good with money: Locksmiths have to handle money in a field condition. There is rarely a cash register to count money etc. You have to make sure you keep your invoices and money, checks, credit card approvals etc in order. You also have to pay taxes on money collected and pay distributors.

10. Driving: You have to be an excellent driver to be a locksmith. I don't mean race car excellent, I mean Safe Driver of the Year award good driver. It is not unusual for a locksmith to put 60K to 100K miles on a vehicle in years time, often in unfamiliar areas in all sorts of weather conditions at all times a day! If you are a careless driver, save yourself the trouble don't jump in a locksmith truck, it will only be a matter of time before you start playing bumper cars!

If you have all of these attributes to one degree or another you may want to consider being a locksmith. It is a very rewarding profession because your main job is helping to keep people safe and secure. There is very distinct sense of pride that comes from being a locksmith when you step in to save someone's day.

For more information on being a locksmith please visit our website at http://www.popalock.com/ It doesn't matter if you are interested in a job or a franchise we can help point you in the right direction.

How do I get action taken against scammer locksmiths in my area?

1. If you are a customer that is being scammed or just got scammed...call the local police to report it. Also if you paid with a credit card, contact your credit card company to complain.

2. If you are not satisfied with the result of the local investigation consider contacting your state legislative representative. This site http://www.congressmerge.com/onlinedb/index.htm will allow you to easily to contact any of your states representatives to let them know what happened to you. Please be sure to include the PHONE NUMBER of the company that scammed you because they may have used a fake name and address to make it harder for you to track them down. With the phone number the offending company can be recontacted.

You can provide them this link: http://www.aloa.org/pdf/pressroom.pdf for a brief introduction to the scammer problem. They will probably be appauled and surprised to find out that this is a widespread problem.

3. Contact you states Attorney General to complain. Not sure how to get in touch with them...http://www.aloa.org/AGMap/AG.htm this page has a quick link to all of the AG sites in the US. Again, try to get the phone number and name of the company.

4. Still not vindicated? Go to your local press and TV stations and explain your problem. They may even produce a sting where they call the scammers out and expose them on local TV.

DO NOT attempt to engage them, many are foreign nationals that will resist deportation by force. Many are former foreign military trained in hand to hand combat so it would not be wise to make a direct physical confrontation with them.

Sample Press Release about Scammer Locksmiths

PRESS RELEASE

For Immediate Release
December 4 , 2006

Consumers Warned of Phony Locksmith Scam

DALLAS, TX - Consumers in the (city) area are warned to beware of individuals posing as locksmith who perform unnecessary work or charge exorbitant un-locking fees. The Associated Locksmiths of America, Inc. (ALOA), an international association of locksmith and physical security professionals, recently issued an official warning for the (city) area.

"This scheme entices locked-out consumers with large Yellow Pages ads that give the impression you are calling a local business," says ALOA's Executive Director, Charles W. Gibson, Jr., "These companies manipulate listings with multiple false addresses and phone numbers to make them seem like a neighborhood businesses. In actuality, the victims frequentlyy are calling out-of-state operations that are not locksmith companies at all. The consumer is quoted a reasonable price over the phone, but when a person posing as a locksmith finishes the job, the victim is charged a considerable amount more for unnecessary and sub-standard work."

ALOA has created a checklist for detecting a company that may be engaging in this scheme. "Many of the items in this checklist are legal by themselves," adds Gibson. "However, if several are used together, you may be dealing with a con artist."

1. Not Familiar with Your Area To make sure the company is local, make sure that they are familiar with your area of town.
2. "Locksmith Service." Unscrupulous individuals often operate under many business names/aliases. Thus, they must answer the phone with a generic phrase like, "locksmith service." If the call is answered this way, ask, "What is the legal name of your business"
3. ALOA Logo. Does the Yellow Pages ad contain a logo that makes them appear to belong to ALOA? While many locksmiths do belong to the Association, some unscrupulous individuals trick the consumer by falsely using the ALOA logo.You can always check to see if in fact these businesses are members by (800) 532-2562 or www.findalocksmith.com
4. Unclear Business Name. Look closely at the ad(s). Is the specific name of the business clearly identified? Does it appear that the dealer actually operates under several names? If a Web address is listed, does the name on the Web site match the name on the ad?
5. "Under Same Ownership." This confusing statement, often found in small print at the bottom of a full-page ad in phone directories, give consumers a sense that the firm has been in business for awhile. The statement itself may be a warning sign that the company operates under several aliases. Also, the ad sometimes lists association memberships for organizations that do not exist, (i.e. American Locksmith Association)."
6. Service Vehicle. Some legitimate locksmiths will work out of a car or unmarked van for quick jobs, but most will arrive in a service vehicle � a van or truck that is clearly marked.
7. Identity. A legitimate locksmith should ask for identity and some form of proof that you have the authority to allow the unlocking to be done. You have the right to ask for the locksmith's identification as well. Does he have a business card? Does he have an invoice or bill with the company name printed on it? Does it match the name on the service vehicle?
8. Estimate. Find out what the work will cost before you authorize it. Never sign a blank form authorizing work.
9. Invoice. Insist on an itemized invoice. You can't dispute a charge without proof of how much you paid and what the payment was for .
10. Refuse. If you are not comfortable with the service provider, you can, and should, refuse to work with the locksmith.

If you feel that you have been the victim a scheme as described above, ALOA recommends that you contact the office of the Attorney General in your state. Most Attorneys General have a division that specializes in fraudulent or deceptive business practices.You may find out how to contact your Attorney General at www.naag.org.

Check for a valid state license number . The states that have licensing for locksmith services ( AL,CA, IL, LA, NJ, NC, OK, TN and TX ) may require the licensed locksmith company to include a state license number on their vehicles, advertising, and all paperwork. If your state requires licensing, then the technician must show you his/her identity card, which is a good indicator of legitimacy. These licensed locksmiths and their companies have been investigated by the state and found free of criminal activity in their past, and are required to have current valid liability insurance policies in force. States with a licensing law typically have a consumer protection hotline number to call and a mailing address for complaints to be sent to. Do not pay anyone that will not provide you with this information. If your state does not have a licensing law to protect you, ask your legislator for that protection. The Associated Locksmiths Of America (ALOA) supports state licensing for the purpose of protecting the consumer and can assist your legislator in drafting laws to protect consumers from phony locksmith scams.
###

The Associated Locksmiths of America (ALOA) is the world's largest organization for locksmiths and other physical security professionals. ALOA is dedicated to being the consumer's first line of defense in physical security by increasing the effectiveness and productivity of locksmiths through educational programs and materials that address broad security interests. ALOA's activities include the ALOA Continuing Education (ACE) program, the ALOA Annual Convention & Security Expo and the ALOA Training Center, which is based in Dallas, Texas. ALOA leads the way for advanced and improved security performance by providing members and the security community with access to a full range of educational programs and services.

Sample letter to send to Attorney General to Complain

September 25, 2006

The Hon. Lawrence Wasden
Attorney General
700 W. Jefferson Street
P.O. Box 83720
Boise, ID 83720


Dear Attorney General Wasden:

The citizens of Idaho are being defrauded everyday by unscrupulous individuals posing as locksmiths. The Associated Locksmiths of America, Inc. (ALOA) has discovered that these individuals have set up fake addresses and phone numbers in Idaho.When a locked-out consumer telephones to get help, they call a local number given to them by directory assistance or the Yellow Pages. However, these companies manipulate local phone listings with multiple false addresses and phone numbers to make it seem like a neighborhood businesses and to increase the probability of being called. In actuality, consumers are calling out-of-state operations that are not locksmith companies. The consumer is quoted a reasonable price over the phone, but when the person posing as a locksmith finishes the job, the consumer is charged a considerable amount more for sub-standard work. These out-of-state operations are set up solely to make money by purposely defrauding the citizens of Idaho.

The complaint we hear most often by consumers is for car openings. The price quoted over the phone to stranded motorist is around $45. When the individual arrives and unlocks the car, they hand the motorist a bill for $135 - $150. This unscrupulous individual tells the frustrated consumer that the $45 was just the service call and that it was another $90 - $100 for servicing the lock. We know a number of incidents of elderly consumers locked out of their homes and being charged $900 to $1700 to replace a $12 lock. This practice is blatant defrauding of the public. As you can see from the attached articles this is a nationwide problem, one that has now come to Idaho.

The Illinois Attorney General has successfully prosecuted these individuals (see attached), and ALOA is asking that you pursue this matter as well. We are available to provide you with further information and willing to work closely with your office on this matter. Please contact our Legislative Manager, Tim McMullen at 214-819-9733 x300 or email at tim@aloa.org as soon as possible.

Sincerely,

ASSOCIATED LOCKSMITHS OF AMERICAN, INC.



Charles W. Gibson, Jr., CAE
Executive Director

Aloa: Why should I join, why should I renew?

On ALOA:(IMHO) Yes, you should renew your membership. If for no other reason than to take the high road; which for me is simply to support the profession by helping fund Aloa and its efforts. Get a subscription to The National Locksmith while you are at it.

The straight calculations are actually very favorable to joining/renewing your membership as well. The cost savings for attending classes and participating in PRP substantially out-weighs the cost of membership; if you are into learning and professional development. In my opinion, about half the cost of membership is justified just for the magazine subscription alone.

www.findalocksmith.com is Aloa’s web promotion on behalf of its members.

Google gives that site a very high ranking, primarily because official associations are given more search engine optimization weight in the algorithms that determine search results. Findalocksmith.com is a free service to members. If you search for "Locksmith" in Google, www.findalocksmtih.com comes up 1st or 2nd all the time...it also pushes one of the big scammer sites down the list as well. This represents a direct marketing benefit that could not be achieved by many members, on their own, without GREAT cost.

The Aloa monthly newsletter, I've enjoyed this new feature and look forward to receiving it. This feature has great potential for even more information, especially of a technical nature. It is an active member benefit which means that I don’t have to go hunt it down; it just shows up for me to trip over.

Exposing Scammers: David and the staff (especially Tim) have gone to great lengths to do public education regarding the scammers...in a way the scammers have prompted Aloa to engage in the strongest media campaign that the organization has undertook. I'm glad my dues have gone to that for sure. If two calls a year are received because someone called me instead of a scammer then my membership expense is justified.

Change: I've only been a member for 10 years but I can see a difference in the organization today. I think that the selection of president this year was very good, Ken is a very common sense guy. In my talks with him I've seen that he is legitimately wanting to help the industry and not just a ‘talking points’ type of guy. (The last few selections for president I think have been progressive.) Ken also strikes me as a good business guy and not just a tech guy. Having Steve Myslik on the board is also a reflection of a changing mindset that welcomes automotive locksmiths and a voice of 'call a spade a spade' change.

Areas for improvements:

-Increased support and sponsorship of online learning that is robust, affordable and easily available.

-Continued development of the internet presence on behalf of its members by using a more search friendly web-design that gives 'search presence' down to the local level. e.g. when 'googling' "Baltimore Locksmith" the Aloa page with their Baltimore members should come before the scammers pages or at least something in that direction.

-Re-Release and update of the locksmith core curriculum that was used prior to the adoption of the Bill Phillips book that now accompanies the basic locksmith course. Bills book is very nice but it is not a curriculum. The previous curriculum was well organized, had relevant information and self directed structure.

-Making all current and past locksmith books that they can available in searchable electronic format.

-Development of professionally produced TV commercials that can be used by members to educate the public regarding choosing a locksmith. Ideally, individual members can provide these to local TV stations to run as PSA's. To go one up on that, make a few state specific spots that educate the public regarding licensing. i.e. the same commercial but with some specific images for Texas, Tennessee, North Carolina etc.

-Update the life safety course with the goal of identifying common problems and corrections, based on the Life Safety Handbook...more so than just raw code. Existing course is good, but could use a refresh. A very visual course with a, “What’s wrong with this picture?” type format would be very awesome.

-I would like to see a compendium of the technical troubleshooting documents that Aloa has archived. Bob and David have provided some very useful documents to me especially on resetting electronic locks etc. I'd like to see all of those type of documents made available in one form or another, preferably in electronic format.

-Pursue active litigation against scammers using the Aloa logo and show aggressive defense of the service marks of the association. I think this is a case of you dont' have to kill all of them; you just need to post the head of one of them outside your tent so the others will get the message.-

Follow up on licensing: Now that many of these bills have been passed, what lessons have we learned? Are the laws being enforced? Are the laws being fairly applied? What other financial consequences such as new tax procedures etc are the licensing laws affecting. I'd like to help develop a standardized set of 'Administrative Rules' that can accompany the 'model law' that has been developed by Aloa. The administrative rules have a more visceral day to day effect on how locksmiths and lock related industries perform than does the wording of the laws.(North Carolina has a great set of admin rules that cover areas like Fair Trade Practices, Technical Integrity etc).

A good set of admin rules can also go a long way to standardizing the categories for licensing of 'kinda locksmith' players like: Atm techs, Bank Service Techs, Detention Locking specialist, Builders Hardware workers, automotive specialist, emergency service providers, electronic access sales and installers. These related industries seem to murky the waters of licensing...even when they aren't advertising in the YP as "Locksmith".-I’ve always heard members say, “Aloa needs to do more to promote itself…thereby promoting it’s members.”

However, promotion and marketing are very expensive; there are ways for Aloa to do that on the cheap. One is by providing high quality materials for its members to use for local advertising, thus saving the members money by avoiding the cost of having to produce TV/Radio/Print and internet spots. Another ‘low cost’ means is through press releases or press release service. To put it humorously, every time Aloa or one of its members does something good, such as attending a class, completing a PRP exam, doing a speech etc then a press release should go out via AP and web. E.g Local Aloa Locksmith, Johnny Smith, celebrates his 8th year as a member.

Aloa membership indicates a professional locksmith who adheres to ethical standards, technical competence…blah blah blah. Dallas Texas locksmith customers are lucky to have such professional service locally. You can find Johnny Smiths lock and key at www.findalocksmith.com...nnySmiths.

-Lastly and most importantly, I’d like to see Aloa putting together research and presentations for every state attorney general, district attorney and ‘AHJ’ regarding the scammers. I’ve been in close contact with Aloa regarding many of these efforts, particularly strategic web development to improve the www.findalocksmith.com. I/our company have been very actively supporting these efforts on a number of fronts including: Increased membership, education of local/state and federal officials as well as large commercial customers, search engine legal people and Internet Yellow Page administrators regarding the scammers, support of state licensing, participation in education programs, promotion of Ace® classes, loaning of talent ranging from marketing, promotion, programming, web development, search engine optimization and if nothing else a supportive attitude. Particularly, one that welcomes improvements but without trying to point out every little short-coming as evidence to” burn down the barn just to kill a few mice”.

I know, I know, "Rob won't you tell us how your really feel?"

Pop@lock.com
www.PopALock.com
www.professionallocksm...etwork.com