{"id":331,"date":"2014-11-24T01:20:33","date_gmt":"2014-11-24T01:20:33","guid":{"rendered":"http:\/\/words.deviating.net\/?p=331"},"modified":"2014-12-01T03:32:23","modified_gmt":"2014-12-01T03:32:23","slug":"reflections-on-the-gunbox-part-one","status":"publish","type":"post","link":"https:\/\/words.deviating.net\/?p=331","title":{"rendered":"Reflections on the GunBox – Part One"},"content":{"rendered":"

In mid-November, Twitter follower Kevin Anderson asked me about a firearm lock box product<\/a> called the GunBox<\/a>. \u00a0Every now and then, because of my general interest in teaching and presenting about firearms and gun technology<\/a>\u00a0folk will reach out with such questions. \u00a0Often, the safe and lock box inquiries come my way because of a presentation I gave at DEF CON 19<\/a> regarding the relative security (or insecurity) of many popular firearm lock boxes.<\/p>\n

According to the manufacturer’s\u00a0web site, the GunBox “has cutting edge technology, state-of-the-art design, and incredible features that make safely storing firearms with quick access a reality” and it is “the ideal way to Defend Responsibly.” \u00a0As you will see from the analysis below, while the GunBox is as effective as any other low-cost firearm lock box (most of them retail in the $150 – $300 range and the GunBox is within this zone, albeit on the higher end) at preventing a toddler from accidentally laying hands on your gun and having a terrible accident, it\u00a0is not at all suitable for long-term storage or for deterring criminals or even curious teenagers.<\/p>\n

The staff who monitor the GunBox’s Twitter account<\/a> were not keen on discussing how their hardware functions, but it becomes apparent from the moment that you open up this unit how their lock (and also the bypass\/override method) works. \u00a0Honestly, this is the first thing you see when the lid is open. \u00a0I didn’t even have to take the internal compartment apart or pull back any rubber or plastic elements. \u00a0Because the bypass method is so painfully obvious, I do not have any real ethical qualms with\u00a0documenting it here. \u00a0The manufacturer is more than adequately aware of how this works and (it would seem) has no plans to\u00a0change how this feature (or “vulnerability” depending on your point of view)\u00a0\u00a0is implemented.<\/p>\n

 <\/p>\n

Amazon has this item available via Prime shipping, so the unit actually beat me to\u00a0my house. \u00a0I ordered it a couple of days before flying home from the Persian Gulf and it was there when I arrived.<\/p>\n

\"gunbox01\"<\/a><\/p>\n

Upon opening the unit, one immediately can see the latching mechanism that keeps it shut when closed and locked. \u00a0There is a small peg with a metal cone on its tip\u00a0sticking up from the base…<\/p>\n

\"gunbox03\"<\/a><\/p>\n

… and this peg interfaces with a pair of sliding metal plates in the lid that form a hole which can expand and contract via spring pressure…<\/p>\n

\"gunbox04\"<\/a><\/p>\n

 <\/p>\n

As the lock box\u00a0can be closed just by\u00a0pressing the lid shut, one can immediately discern that the metal plates slide apart simply by any<\/em> force acting upon them. \u00a0The lock and circuitry mechanism is not needed to cause them to move…<\/p>\n

\"gunbox05\"<\/a><\/p>\n

\"gunbox06\"<\/a><\/p>\n

 <\/p>\n

As mentioned by the GunBox folk on Twitter, the unit ships with a small hex head Allen key which can be used to bypass the main locking mechanism and open the box if other methods fail to work. \u00a0While the conversation they had online was intentionally vague<\/a>, they attempted to indicate that the Allen key\u00a0was\u00a0simply\u00a0“the tool that is used [to access the bypass\u00a0hole]” and they went on to state that “the manual override is not that simple.” \u00a0This is patently false.<\/p>\n

Yes, the hex head\u00a0bit is used to remove\u00a0a small set screw in the bottom of the box, exposing the bypass hole. \u00a0After that, however, the same exact tool is inserted and simply wiggled from side to side. \u00a0That is all. \u00a0That’s the entire attack. \u00a0The shaft of the Allen key interacts with this small slot on the metal plates…<\/p>\n

\"gunbox07\"<\/a><\/p>\n

When we opened up the box and look at this, you can see that we figured it out in seconds. \u00a0The following video (which was Take One of the whole analysis) shows the process unfold. \u00a0Not only did we figure out the attack in short order, but it was trivial to perform. \u00a0It took me about 15 seconds to seat the handle of the Allen key in the correct slot the first time, then 5 seconds later the box was open. Subsequent attempts took under 10 seconds total. \u00a0It’s a process of (1) insert, (2) rock the handle of the tool toward you and therefore angle the inside tip of the tool rearward, (3) find the bypass slot in the metal plates, (4) press the tool to your right and therefore disengage the upper plate which moves to the left inside the box, (5) press the tool to your left and therefore disengage the lower plate which moves to the right inside the box, (6)\u00a0the box is open.<\/p>\n

.<\/span>
\n