Serving over 115 Southern California City Locations.

 

 

     AR13362                                                                             www.comlock.com                           Contractor Licenses 478006
MONTHLY NEWSLETTER
Providing Security Solutions to Southern California Since 1961
Issue #28        Formerly known as "Bill's Lock & Safe Service",  "Commercial Lock & Security"      March 2, 2016

NEW - NEW - NEW

Puzzle 

   RETAIL STORE LOCATIONS
 
Orange
302 W. Katella Ave   
Orange, Ca. 92867 
i
Fullerton
127 N. Raymond Ave.
Fullerton, Ca. 92931
 
Store Hours 8:30am to  5:00pm  Mon. - Fri. 
Closed Sat. & Sun.
714 633-1499

 

A Quick Look At What We Do.

  

Sales,Service, Installation or Repair of:
Keys Duplicated
Locks Re-keyed
Code Cut keys
Pick Open Locks
Key Control
Door Hardware
Safe Service
Safe Deposit Box
Masterkey Systems
Desk Locks
File Cabinet
Door Closer
Panic Hardware
Padlocks  
Electronic Access
Security Cameras
Alarm Systems
Alarm System Takeovers
Alarm Monitoring
Custom Fabrications
Locksmith Training
And Much More...
We are Dealers for:
Mult-t-lock
Schlage
Von Duprin
Sargent Lock
LCN Door Closer
Adams Rite
Alarm Lock
Corbin Russwin
Arrow
US Lock
Detex
Keri Systems
Brivo
Galaxy Control System
HID
OpenEye
Pelco
Toshiba
Dedicated Micros
Sony
  And Many More...
  
Movie Scenes Filmed in Orange County
5
1. " Ocean's Eleven" - UCI Campus

2." Jerry Maguire" - John Wayne Airport and Fashion Island

3 ."Beaches" - Crystal Cove

4 ."Catch Me If You Can" - Old County Courthouse in Santa Ana

5 ."The Hangover III" - 73 freeway between Costa Mesa & Newport Beach

6 ."Rain Man" - Santa Ana Train Station

7 ."That Thing You Do" - Old Town Orange near Chapman University

8 ."American Sniper" - Seal Beach

9. "Pearl Harbor" - Tustin Hangar

10. "Iron Man" - (now Masimo), Irvine    
Our Licenses & Permits

C10 - Electrical Contractor
 
D28 - Door and Gate, Activating Devices
 
C28 - Lock & Security Contractor
 
D16 - Hardware & Safes
 
C61 - Limited Specialty
 
C7 - Low Voltage
 
Contractor License - 478006
 
Locksmith Permit - LCO646
 
Alarm Company Operators - License 4166
 
Safety Trained - Ladders, Lifts and Booms

  Industries we serve
 
Manufacturing
 
Warehousing
 
Banking
 
Multi-location Companies
 
Retail
 
Government
 
Medical Manufacturers
 
Hospitals / Care Facilities
 
Entertainment

 

Cities

 

School Districts

 

Police / Fire Service

 

Military

 

Office Buildings

 

Multi-Tenant Buildings

 

Commercial Properties

 

Property Management

  

 

New Career
Are you or someone you know thinking about a new career?

Consider
Locksmithing

Comlock Security Group, Inc. has been teaching locksmithing courses for over 23 years.

We are a private vocational school approved to operate in California specializing in training students for careers in the rapidly growing field of security. Our programs are designed to teach the student the technical skills necessary for an entry-level position with prospective employers. Our courses are a mix of lecture and hands-on training conducted at our fully equipped facility in the city of Orange, in Southern California. 

As never before, Americans are concerned with security.  Help the public upgrade the security of their homes and business by becoming a locksmith today.  The School of Security Technology is a locksmith school that has been training men and women in Southern California for careers in locksmithing since 1991.   

Our locksmithing program courses are designed to allow students to gain a clear and basic understanding of the locksmith industry and the specific functions of a general locksmith.  We provide hands-on experience that will assist an individual who is seeking job opportunities in the locksmith industry.

Our curriculum is updated periodically, our instructors have a minimum of fifteen years experience in the locksmith industry, and you could be our next graduate!
For additional information or to tour our school facility call 714 633-1366 or visit our website.
 
Next Class Start Date.
1/12/2016

Code of Ethics

Viewable Code of Ethics


Call us for:
  • Locksmithing
  • Security Cameras
  • Alarm Systems
  • Electronic Access Control Systems
  • Safes
  • Alarm Monitoring
  • Key Control Systems
  • Sales
  • Installations
  • Service
  • 24/7/365
714 633-1499
3D printers and key duplication...it's real!
 


Sept, 10 2015

Lockpickers took advantage of US Transportation Security Administration breach in which photos of its 'approved' locks were posted online.
 
$999.00, low end 3D printer, most 3D printers run about $2,500 and up.  As the technology progresses 3D printers will become more affordable and common in the home.    
Anyone with a 3D printer can now unlock every single TSA-approved padlock, thanks to a security lapse by the American government agency. The Transportation Security Administration, created following the 9/11 attacks to ensure the safety of travellers into and around the US, requires any lock on bags to be branded as "travel sentry approved", to enable them to carry out searches without having to break the lock or bag.

The master keys for those locks are kept under close guard - but a photograph of seven of them accompanied a Washington Post article about the TSA published in November 2014. It took almost a year for anyone to notice, but once they did, lock pickers moved fast to take advantage of the breach. The Washington Post took the picture down in August, but it was too late.

While copying a key from a photograph remains tricky, one security researcher, going by "Xyl2k" has lowered the barrier to entry considerably. They posted the necessary files to 3D print all seven master keys on code-sharing site Github - and others who have printed them off confirm they work.

Xyl2k used the breach to preach against the use of master keys in general, citing a research paper by AT&T's Matt Blaze. "Virtually all master keyed mechanical lock systems are at least theoretically vulnerable," Blaze wrote in 2003. "Unfortunately, at this time there is no simple or completely effective countermeasure that prevents exploitation of this vulnerability short of replacing a master keyed system with a non-mastered one."

Security researchers have also highlighted the breach as a reason to be wary of calls for a similar approach to cyber security. Just a month before it published photos of the TSA's master keys, the Washington Post called on tech companies to "invent a kind of secure golden key they would retain and use only when a court has approved a search warrant". Following the call, the Electronic Frontiers Foundation warned: "There is no way to put in a backdoor or magic key for law enforcement that malevolent actors won't also be able to abuse."

The campaign group continued: "Any key, even a golden one, can be stolen by ne'er-do-wells. Simply put, there is no such thing as a key that only law enforcement can use - any universal key creates a new backdoor that becomes a target for criminals, industrial spies, or foreign adversaries."

 
Comlock Employee Profile
Rick Rasmussen
   
Meet -  Rick Rasmussen           

Years with company -  2 employment periods totaling 28 years.

Position at Comlock -  Rick has held several position at Comlock; Service Coordinator, Instructor in our locksmithing school, Store Manager, Service Technician, Retail District Manager,  Assistant School Director.
 
Duties - Coordinates service work for customers and is the school instructor for our locksmith school.

Lives in - Fullerton
I\
Family - Rick has been married for  32 years to Christy and they have one daughter, Courtney.  Rick has a Dog and 3 cats that keep him busy.
In his spare time - Relaxing at home watching movies, going out for dinner and a movie.
 
What he likes most about working at Comlock - Likes the people he works with and the family oriented atmosphere.
We have a Winner!
Congratulation to last
month's contest  winner
 
Richy Arrayas
 
Answer:  Catalina Casino, Santa Catalina Island Ca.

March Contest

Each month we feature a picture of a popular destination or landmark from around
the Southern California area.

Guess correctly as to the location of this picture

and you'll be entered into a drawing to

 

Win $25.00 Gift Certificate.

 

One winner will be drawn each month!

Comlock Security Group employees, their family members

and business associates not eligible to participate in contest.

This Month's Location 

 

  What is the location of this picture? 

 

Click here to enter your answer.

 

Winner will be contacted at the end of each month.

 

Good Luck!  

 

 

Sep. 17 2015, 9:51 a.m.
 
In a spectacular failure of a "back door" designed to give law enforcement exclusive access to private places, hackers have made the "master keys" for Transportation Security Administration-recognized luggage locks available to anyone with a 3D printer.

The TSA-recognized luggage locks were a much-vaunted solution to a post-9/11 conundrum: how to let people lock their luggage, on the one hand, but let the TSA inspect it without resorting to bolt cutters, on the other.
When the locks were first introduced in 2003, TSA official Ken Lauterstein described them as part of the agency's efforts to develop "practical solutions that contribute toward our goal of providing world-class security and world-class customer service."
Now that they've been hacked, however, TSA says it doesn't really care one way or another.

"The reported ability to create keys for TSA-approved suitcase locks from a digital image does not create a threat to aviation security," wrote TSA spokesperson Mike England in an email to The Intercept.

"These consumer products are 'peace of mind' devices, not part of TSA's aviation security regime," England wrote.
"Carried and checked bags are subject to the TSA's electronic screening and manual inspection. In addition, the reported availability of keys to unauthorized persons causes no loss of physical security to bags while they are under TSA control. In fact, the vast majority of bags are not locked when checked in prior to flight." In other words: not our problem.

How the Keys Were Hacked

Last month, security enthusiasts and members of a lockpicking forum on Reddit began circulating a nearly year-old Washington Post story about "the secret life of baggage," and how the TSA handles and inspects airport luggage.

Photo of TSA keys that was published.

Key tips have been blurred from original photo


What no one had previously noticed was that the article included close-up photos of the "master keys" to TSA-approved luggage locks - which it turns out, are really easy to copy, as long as you can see the pattern of the teeth and have access to a 3D printer.  The photos were removed from the Post's website, but not before privacy devotees spread the images far and wide.

Then, according to his self-published timeline, Shahab Shawn Sheikhzadeh, a system administrator and lockpicker, obtained an official-looking document with even more detailed imagery. Sheikhzadeh told The Intercept that anonymous hackers inspired by the Washington Post photos found a 2008 "Guide to Travel Sentry Passkeys" posted on Travel Sentry's website.

Travel Sentry is the organization responsible for generating and enforcing security guidelines for TSA-approved locks, working with both the government and private manufacturers to guarantee its standards are being met. It does not sell or manufacture locks itself.

Steven Knuchel, a  hacker/security researcher who goes by Xylitol or Xyl2k, used the detailed images obtained from the Travel Sentry website to create the kind of files that 3D printers use to produce models.  Since the files were first published, several people have demonstrated that they work, using inexpensive 3D printing plastic called PLA.

TSA's Response

TSA's nonchalant response to the proliferation of master keys is at odds with how the agency has historically advertised the approved locks.  "There's a difference in how TSA talks about the locks to travelers and the statement they made," said Chris Soghoian, chief technologist for the American Civil Liberties Union, after hearing the TSA's statement to The Intercept.

Over the years, TSA has published various blog posts trumpeting the power of the locks to prevent all theft, writing, for instance, that the locks "will prevent anyone from removing items out of your ... bags."

Soghoian described that post as an example of TSA "lying to consumers" in a tweet. "There's nothing in that blog post about 'peace of mind'" being the reason for the locks, Soghoian told
The Intercept.

Security experts, by comparison, have long recognized that TSA locks do not fully protect your belongings. University of Pennsylvania computer science professor Matt Blaze told Wired that he sometimes picks his own TSA-recognized lock to save time looking for the actual key, because it's faster.
Chris McGoey, a security consultant specializing in travel safety, told the Intercept that "there are several ways of opening TSA locks short of having a 3D printer." He explained that "TSA locks on luggage is only one step above having no lock at all especially on soft-sided luggage with zippers."

The Problem With Backdoors

Although the actual impact remains unclear, the hacking of the master keys is a powerful example of the problem with creating government backdoors to bypass security, physically or digitally.
Most security experts and computer scientists believe backdoors for law enforcement inevitably make systems less secure, and easier for bad actors to break into.

Nicholas Weaver, a computer security researcher at Berkeley, wrote on the Lawfare blog about the TSA locks and how they are "similar in spirit to what [FBI] Director [James] Comey desires for encrypted phones."  Comey has recently been trying to convince technology companies to design some sort of special way for his agents to access encrypted communications on digital devices.

But companies including Apple and Google have resisted this pressure, insisting that developing backdoors will only weaken security that they have worked hard to improve for the sake of average customers around the world. "In theory, only the Transportation Security Agency or other screeners should be able to open a TSA lock using one of their master keys," Weaver wrote. "All others, notably baggage handlers and hotel staff, should be unable to surreptitiously open these locks. ...

Unfortunately for everyone, a TSA agent and the Washington Post revealed the secret. ... The TSA backdoor has failed."
Xylitol, the GitHub user who published the blueprint of the keys, said that was his point. "This is actually the perfect example for why we shouldn't trust a government with secret backdoor keys (or any kind of other backdoors)," he wrote in an email to The Intercept. "Security with backdoor[s] is not security and inevitably exposes everyone."

Soghoian tweeted a congratulations to the Post and TSA "for proving the stupidity of key escrow," the arrangement in which keys needed to decrypt communications are held in escrow to be accessed by a third party if necessary. End-to-end encryption, which the FBI and the Justice Department have continually urged against, only allows for the sender and the recipient of a message to hold onto keys to decrypt the message.

Clarification: An earlier version of this story incorrectly reported that hackers had broken into Travel Sentry's internal website.

Caption: Master TSA keys for various TSA-approved locks.
.



Free Key
Fullerton Store
127. N. Raymond Ave, Fullerton
714 738-3529
Orange Store 
302. W. Katella Ave,
Orange
714 288-7170
Comlock Security Group
Good for one free key at our retail store locations.  Maximum retail value not to exceed $5.00. 

One coupon per customer per day.

Store Hours: 8:30am to 5:00pm M-F  Closed Saturday & Sunday

No Expiration date.  No purchase required.  No cash value.
Comlock Security Group, Inc. |  security.team@comlock.com
    302 W. Katella Ave.
Orange, CA 92867-4705