Howard Payne & Deviant Ollam - This Key is Your Key, This Key is My Key

…he external box with some easy to get (and relatively standard) key. And hit a button. Related: link This is a good related talk - goes outside the box on all the ways you can often get into commercial buildings without picking (or even in many cases, interacting with) the lock "The Search for the Perfect Door" by Deviant Ollam link Also good: link to this video Howard Payne & Deviant Ollam - This Key is Your Key, This Key is My Key link [DEF CON 22 - Deviant Ollam & Howard Payne - Elevator Hacking - From the Pit to the Penthouse]…

I've watched it twice before. I also recommend "This key is your key, this key is my key" link to this video Deviant is a pentester focused on physical sec. Not just elevators.

Relevant video discussing fire keys and other common keys: link to this video And since this thread is about elevators, I have to also mention another video of theirs: link

The moral equivalent of "admin,password" happens all the time with physical locks. With physical goods, the key is often sold with a default bitting. (Which is the data embodied in the key equivalent to the password.) That's because just ordering the default is often cheaper, and the contractor will often just opt for the cheapest option. It wouldn't surprise me if this also happened with combination locks. link to this video