[00:55.540 --> 00:56.800]  You made it to Sunday.
[00:57.280 --> 00:57.720]  Congratulations.
[00:57.720 --> 00:58.460]  Here we are.
[00:58.860 --> 00:59.300]  Excellent.
[01:00.340 --> 01:11.920]  Congratulate yourself on being here, being awake, being well hydrated, having had a wonderful night's sleep in a comfortable, wonderful hotel here in beautiful Queens, and refreshed and ready for what the day brings.
[01:12.160 --> 01:16.400]  So before we start this talk, let me just mention a couple of things that are upcoming.
[01:16.940 --> 01:20.360]  One is there are a number of talks in the fourth track.
[01:20.520 --> 01:26.900]  I know you're here right now, but for the rest of the day when you're thinking of what to do, the fourth track, all that is listed in the wiki.
[01:27.060 --> 01:30.300]  So if you go to wiki.hope.net, you can see what's coming up.
[01:30.380 --> 01:34.420]  There's a bunch of neat stuff that people have brought forth that was not on the original schedule.
[01:34.660 --> 01:39.120]  There's also, of course, workshops today and a bunch of other stuff to enjoy.
[01:39.320 --> 01:40.080]  The vendors are here.
[01:40.180 --> 01:42.220]  If you haven't had conversations with vendors, please do.
[01:42.320 --> 01:45.740]  They're all wonderful and extremely friendly and well-groomed.
[01:46.280 --> 01:54.600]  The other thing I want to mention in advance, so you can start planning for the rest of the day and how it ends, is closing ceremonies at 6.
[01:54.840 --> 01:56.780]  And this will be up in D'Angelo 416.
[01:56.900 --> 01:58.680]  I think we're not going to simulcast here.
[01:58.760 --> 02:00.660]  I think we'll simulcast it to 206.
[02:00.760 --> 02:01.800]  We'll let you know later in the day.
[02:02.260 --> 02:06.040]  But the closing ceremonies will be fun.
[02:06.200 --> 02:11.700]  We'll, you know, be thanking everybody and sort of summing up how things went, network, all that sort of stuff, you know, how the conference went.
[02:11.880 --> 02:17.000]  And following the closing ceremonies, there's a band, a salsa band.
[02:17.200 --> 02:18.220]  So this will be cool.
[02:18.360 --> 02:22.380]  So if you're thinking of leaving early, now think of changing your plans and sticking around.
[02:22.640 --> 02:23.720]  Check out closing ceremonies.
[02:23.860 --> 02:24.520]  Check out the band.
[02:24.680 --> 02:28.320]  And then if you can, stick around and help with the cleanup, pack up tonight.
[02:28.540 --> 02:30.960]  And even tomorrow morning, we'll be loading those rental trucks.
[02:31.040 --> 02:32.520]  That's a plug for volunteers.
[02:32.960 --> 02:34.840]  Otherwise, enjoy the day.
[02:34.980 --> 02:36.260]  Sunday's a fantastic day.
[02:36.360 --> 02:40.120]  The program is just as strong as the previous two days.
[02:40.180 --> 02:47.440]  And this talk is particularly strong because not only is a great abstract, highly qualified speaker a wonderful topic, but they brought stuff.
[02:47.680 --> 02:52.000]  And you'll be learning about what that is during the talk, Shoplifting on a Budget.
[02:52.180 --> 02:52.980]  Please welcome our speaker.
[03:16.770 --> 03:19.930]  I was trying to think of a good intro, and I thought about that yesterday.
[03:20.170 --> 03:22.110]  I was like, okay, what can I get people's attention with?
[03:22.270 --> 03:23.430]  So welcome, everyone.
[03:23.570 --> 03:24.690]  Welcome to HOPE.
[03:25.630 --> 03:27.270]  Thank you for coming to the talk today.
[03:27.470 --> 03:35.310]  Thanks for the HOPE organizers, all the volunteers, everyone who's made this event possible, AV, my personal cameraman, my friend Jacob.
[03:35.310 --> 03:36.990]  Thanks for helping out, everyone.
[03:38.570 --> 03:39.470]  So who am I?
[03:39.950 --> 03:40.990]  I make it Hacken.
[03:41.070 --> 03:41.750]  That's my pseudonym.
[03:41.930 --> 03:43.310]  I might tell you my first name later.
[03:43.650 --> 03:49.570]  You can find me on TikTok, YouTube, Snapchat, and Instagram, and Twitter, of course.
[03:50.150 --> 03:51.970]  And, you know, my thoughts are my own.
[03:52.210 --> 03:54.550]  I don't represent anyone else on this stage.
[03:54.750 --> 03:58.270]  And I hack out of curiosity, and this is my cat.
[04:00.350 --> 04:01.310]  Briefly, the schedule.
[04:02.430 --> 04:05.950]  The thing that I want to point out here is I'm going to ask for some volunteers.
[04:06.470 --> 04:15.650]  If you're comfortable with coming up on stage and trying some of these bypasses later, just realize that you're going to be on camera, then I'm going to ask for, like, three or four volunteers.
[04:15.950 --> 04:19.430]  So someone who may be comfortable with wire strippers.
[04:19.850 --> 04:25.130]  If there's someone in the audience who is comfortable with that, then I definitely need one of those people.
[04:25.130 --> 04:29.810]  But if you want to try something out, just keep that in mind, and I'll call on you later.
[04:30.730 --> 04:31.010]  Thank you.
[04:32.450 --> 04:33.170]  Another disclaimer.
[04:33.990 --> 04:35.270]  Shoplifting is illegal.
[04:35.590 --> 04:40.030]  I went out to dinner with a college friend last night, and I was telling him about my talk.
[04:40.070 --> 04:43.490]  And he was like, so you're encouraging people to shoplift?
[04:43.590 --> 04:44.590]  And I was like, oh, wait.
[04:44.910 --> 04:56.250]  I think I've been in, like, the hacker culture too long, where, you know, even though you teach someone, like, how to do something, you're not really encouraging them to do it on things that you shouldn't be.
[04:56.430 --> 04:59.450]  So I put... I rewrote my disclaimer.
[04:59.850 --> 05:01.170]  Shoplifting is illegal.
[05:01.170 --> 05:01.990]  It's theft.
[05:02.090 --> 05:03.910]  And I don't condone it or encourage it.
[05:04.230 --> 05:10.830]  My intent is purely to educate you on the functionality of some of these security devices.
[05:10.830 --> 05:21.270]  And just like lockpicking and other sort of hacking, don't experiment on any devices, systems, or environments that you don't have permission to do.
[05:21.390 --> 05:21.650]  Okay?
[05:21.710 --> 05:25.330]  I want to make that very clear, FBI and police that are in the audience.
[05:26.130 --> 05:32.990]  And if you do some of these bypasses, realize that you might want to wear, like, safety glasses or gloves, that sort of thing.
[05:33.070 --> 05:36.030]  So use PPE if you're doing that.
[05:36.030 --> 05:37.390]  And again, don't steal.
[05:38.570 --> 05:39.210]  All right.
[05:39.390 --> 05:44.910]  So why is security tags interesting to hackers?
[05:45.370 --> 05:49.310]  I think it's because it's very similar to other hacks that we get to see.
[05:49.650 --> 05:54.930]  So RFID, you know, you're getting access into something or bypassing access.
[05:55.210 --> 05:57.890]  Lock bypassing, same sort of thing.
[05:58.370 --> 06:03.410]  Lockpicking, some of these are more into the lockpicking sort of area.
[06:03.410 --> 06:05.410]  And then also, like, tamper evident.
[06:05.890 --> 06:07.210]  We'll talk about that a little bit.
[06:08.790 --> 06:10.390]  So how did I get interested in this?
[06:10.530 --> 06:13.010]  Well, I'll play a video in a little bit that explains this.
[06:13.170 --> 06:15.990]  But basically, I went to school for physics, also for theater.
[06:16.130 --> 06:18.810]  So it feels pretty good to be on the stage again.
[06:19.630 --> 06:21.750]  But, yeah, we learned about Faraday cages.
[06:22.170 --> 06:25.710]  And does anyone know what a Faraday cage is?
[06:26.410 --> 06:26.810]  Wow!
[06:27.090 --> 06:28.090]  I love this audience.
[06:28.410 --> 06:35.650]  Okay, for, like, the two people who didn't put their hand up, a Faraday cage is basically a metal structure that blocks signals, like radio signals.
[06:35.850 --> 06:45.970]  So when you go into an elevator and you lose your cell phone service, or when you stare into the microwave waiting for your hot pocket to finish, and it doesn't burn your eyeballs, that's all thanks to Faraday cages.
[06:47.570 --> 06:48.090]  All right.
[06:48.670 --> 06:54.630]  And then the way that I got started in this research was because of TikTok.
[06:55.170 --> 07:00.910]  My friend, Daner, that's over here that's filming, he got me into it a couple years ago during the pandemic.
[07:01.190 --> 07:03.250]  And he was like, hey, you do a lot of cool projects.
[07:03.250 --> 07:05.230]  Why don't you show some of this stuff on TikTok?
[07:05.590 --> 07:06.990]  And I was like, I don't know.
[07:07.070 --> 07:08.530]  I posted some, like, random videos.
[07:08.730 --> 07:13.550]  But one of the first videos that I posted was a stitch.
[07:14.550 --> 07:24.590]  Now, for those who aren't familiar with the TikTok jargon, a stitch is when you take up to five seconds of someone else's TikTok video and you react to it.
[07:24.790 --> 07:32.750]  So the person in this video, she asked, what is a piece of information that feels illegal to know?
[07:32.990 --> 07:42.470]  And if I asked you guys that question, guys and girls, I'm sure you'd, like, think of, like, a million different things because, you know, you'd know what I'm talking about.
[07:42.470 --> 07:44.870]  So I was like, okay, what can I talk about?
[07:45.050 --> 07:52.390]  Like, elevator keys, wearing a high-vis vest and a hard hat to get in anywhere, maybe a Proxmark, things like that.
[07:52.490 --> 08:01.750]  And then I thought back to my physics days and I thought, oh, yeah, I remember during that thing, I thought about a use of the Faraday cages.
[08:01.910 --> 08:03.470]  And I'm going to play this video.
[08:05.630 --> 08:09.010]  What's a piece of information that you learned that feels illegal to know?
[08:09.010 --> 08:15.710]  I studied physics in college, and one day we learned about Faraday cages, which are metal structures that block radio frequency signals.
[08:15.950 --> 08:20.050]  And I thought, don't stores put RFID tags on things that are expensive?
[08:20.230 --> 08:23.490]  And if you walk through the door, the alarm goes off?
[08:23.690 --> 08:27.450]  Well, all you got to do is use a Faraday cage, like a piece of aluminum foil.
[08:28.290 --> 08:31.930]  Wrap the foil around the tag, and now the alarm doesn't go off.
[08:40.320 --> 08:46.640]  Yeah, so just for the technical people in the audience, at that time I thought it was RFID.
[08:46.900 --> 08:47.540]  It's just RF.
[08:47.760 --> 08:50.440]  There's no RFID in these things.
[08:50.960 --> 08:52.540]  Actually, one of the tags does have RFID.
[08:52.700 --> 08:55.940]  But I didn't find that out until later, until I started doing more research.
[08:56.140 --> 09:03.280]  But part of the fun of TikTok is reading people's comments, and they could either be super toxic or super funny.
[09:03.280 --> 09:06.140]  So these are some of the ones that I picked out that are super funny.
[09:06.900 --> 09:12.480]  So people reacted to this, and a top comment was, Walmart ain't ready for me tomorrow.
[09:14.220 --> 09:16.760]  This app turned me into a demon day by day.
[09:17.160 --> 09:23.120]  And I hope no one notices the 70-inch TV I'm about to wrap in aluminum foil.
[09:25.720 --> 09:31.420]  And then one of the great things also about being on TikTok was you get to find, like, other hackers.
[09:31.580 --> 09:34.520]  Their algorithm is really good about feeding you content that you want to watch.
[09:34.640 --> 09:39.360]  So I found, like, other hackers, other cybersecurity people, other infosec.
[09:39.580 --> 09:41.600]  And you kind of connect to people.
[09:41.820 --> 09:44.060]  And then, you know, we got a Slack going and stuff like that.
[09:44.200 --> 09:47.780]  So just being able to talk to other people has been really awesome.
[09:49.060 --> 09:53.900]  All right, so once that video went viral, I wanted to post more about it.
[09:53.900 --> 09:56.500]  But I literally, that's all I knew at the time.
[09:56.720 --> 09:59.420]  So I went to Google, and I typed in security tags.
[10:01.160 --> 10:04.680]  So security tags are kind of like what I just usually call it.
[10:04.780 --> 10:10.620]  But the whole enchilada is called electronic article surveillance, or EAS.
[10:11.140 --> 10:15.040]  It basically consists of three different components.
[10:15.880 --> 10:17.820]  Over here, you have the pedestals.
[10:17.820 --> 10:22.260]  Those are the gates that you see at the entrance or exit to retail stores.
[10:22.260 --> 10:26.400]  Then you have the detachers, like a magnet in the top left.
[10:26.720 --> 10:29.720]  And then on the bottom, you have your security tag device.
[10:30.960 --> 10:32.920]  There's three different system types.
[10:33.480 --> 10:35.520]  There's radio frequency, or RF.
[10:35.780 --> 10:37.560]  And that's definitely, like, a generic term.
[10:37.720 --> 10:40.700]  Like, radio frequency covers the whole light spectrum, right?
[10:40.820 --> 10:45.740]  But in this particular situation, that's configured to 8.2 megahertz.
[10:46.720 --> 10:49.620]  Acoustomagnetic, or AM, is 58 kilohertz.
[10:49.620 --> 10:52.740]  And then electromagnetic, I think I spelled that wrong.
[10:53.880 --> 10:55.520]  I forget what frequency that is.
[10:55.720 --> 10:59.020]  But the EM is what you see in libraries.
[10:59.320 --> 11:00.600]  So they all kind of work the same.
[11:01.000 --> 11:03.900]  It's a little bit physics, different physics involved in each one.
[11:04.120 --> 11:07.040]  But they all kind of serve the same purpose.
[11:07.700 --> 11:07.900]  All right.
[11:08.020 --> 11:10.220]  So why do people put security tags on stuff?
[11:10.420 --> 11:12.960]  Well, it's because they don't want you to steal it.
[11:12.960 --> 11:14.380]  And what don't they want you to steal?
[11:14.620 --> 11:16.440]  Stuff that costs a lot of money, I guess.
[11:16.760 --> 11:19.320]  Or items that are frequently stolen.
[11:20.400 --> 11:21.720]  So that's the purpose.
[11:22.540 --> 11:27.300]  You remove them by either a detacher that you kind of, like, see here on the left.
[11:27.380 --> 11:28.020]  That one's electronic.
[11:28.840 --> 11:29.860]  Or some sort of magnet.
[11:31.320 --> 11:36.440]  And if you don't pay for it, and you go through the gates, then alarms go off.
[11:38.480 --> 11:42.020]  So RF tags, these are a few different types.
[11:42.480 --> 11:45.960]  Like I said, they're in the 8.2 megahertz spectrum.
[11:46.340 --> 11:49.240]  The ones that you see here on the top left are soft labels.
[11:50.040 --> 11:51.400]  We'll talk about those in a little bit.
[11:51.500 --> 11:52.360]  And then you have hard tags.
[11:53.900 --> 11:54.700]  For the...
[11:54.700 --> 11:55.400]  I'm sorry.
[11:55.520 --> 11:55.760]  For the...
[11:55.760 --> 11:55.860]  Yeah.
[11:56.880 --> 11:59.600]  Acoustomagnetic, they're either a little strip.
[11:59.800 --> 12:06.680]  So some of you might have seen the one on the top left here, like on DVDs or other, like little packages.
[12:07.200 --> 12:08.940]  Or you can have them in hard tag form as well.
[12:10.580 --> 12:17.560]  One really valuable piece of information that's available to many different things on the Internet are data sheets.
[12:17.940 --> 12:21.520]  So this just happened to be the first tag that I bought on eBay.
[12:22.180 --> 12:24.800]  It ended up being, like, one of the hardest ones to open.
[12:25.500 --> 12:34.480]  If I would have done my research beforehand, I would have looked at the data sheet and found out the actual magnetic strength that was required to open it up.
[12:34.640 --> 12:41.860]  So if you're curious about a tag and it's a brand name one, you can go on the Internet and look for the data sheet and figure out how do you open those.
[12:43.700 --> 12:47.220]  So for pedestals, they kind of look similar.
[12:47.820 --> 12:49.240]  There's kind of like two different types.
[12:49.580 --> 12:54.440]  You'll either see one with two sections or one with four sections.
[12:54.660 --> 12:59.360]  And that basically tells you which of the system types they have.
[12:59.360 --> 13:06.580]  So if it's two sections, it's the acoustic magnetic or 58 kilohertz.
[13:06.800 --> 13:12.520]  And if it's the four section, it's the 8.2 megahertz or RF.
[13:12.820 --> 13:18.500]  And that kind of helps you know about, like, okay, what types of tags should I be able to see in the store?
[13:18.500 --> 13:23.120]  And then, you know, theoretically, what could I do to bring in there?
[13:25.200 --> 13:33.220]  If you run a store and you don't want to set up a very expensive EAS system, you can buy dummy pedestals for $200 on eBay right now.
[13:33.860 --> 13:34.540]  I don't know.
[13:34.900 --> 13:37.920]  I think they have, like, a light that blinks, but they don't actually do anything.
[13:39.640 --> 13:43.860]  If you want to get into this research, there's a lot of tags available on eBay.
[13:44.100 --> 13:45.980]  They're less than $20 for, like, a hundred of them.
[13:46.160 --> 13:49.820]  So it's a lot of fun to play with these things and very cheap.
[13:52.160 --> 13:57.320]  What's not widely available are the detachers or magnets used to open these things.
[13:58.020 --> 14:07.920]  It seems like eBay and Amazon have delisted a lot of these things because, you know, a magnet is not illegal by itself.
[14:08.240 --> 14:22.640]  But, you know, the purpose that you're using it for, you know, if you do bring a magnet into a store, and this goes back to my disclaimer, if you bring a magnet into a store or any tool to facilitate shoplifting, that's charged as a shoplifting tool.
[14:23.020 --> 14:24.640]  So it's like an additional charge.
[14:24.640 --> 14:31.240]  So it's like if you were to, you know, lockpicks aren't illegal, but if you pick your way into something, now you have burglary tools.
[14:31.520 --> 14:32.320]  Same sort of thing.
[14:32.480 --> 14:33.500]  Don't bring them into a store.
[14:35.020 --> 14:35.480]  All right.
[14:35.500 --> 14:37.940]  So we're going to talk about the different types of security tags.
[14:38.360 --> 14:41.000]  The first one we kind of saw already, there's hard tags.
[14:41.100 --> 14:42.180]  Those are mainly on clothing.
[14:43.500 --> 14:45.480]  This diagram kind of shows you how they work.
[14:45.780 --> 14:50.380]  And I think the easiest way to explain this is with a finger trap.
[14:50.880 --> 14:52.300]  Does anyone know what this is?
[14:52.300 --> 14:53.000]  Okay.
[14:53.640 --> 15:01.440]  So basically you can think of like the pin in the tag, and then it goes into the hard tag like that.
[15:01.620 --> 15:03.960]  And if you try and pull it out, you're not getting an out.
[15:04.400 --> 15:04.700]  All right.
[15:04.920 --> 15:07.720]  That's basically the same exact way that these function.
[15:07.980 --> 15:14.700]  It's all friction, which is kind of hard to believe because, you know, you require all these special tools to open it.
[15:14.700 --> 15:16.460]  But it's really just a lot of friction.
[15:16.800 --> 15:23.080]  So if you look up here on the diagram, we have the pin, and it goes into the tag.
[15:23.280 --> 15:27.720]  And there's a set of ball bearings that kind of grab around the pin.
[15:27.720 --> 15:30.840]  And there's a spring that compresses all of that stuff.
[15:31.080 --> 15:34.300]  And there's a metal cylinder around it.
[15:34.400 --> 15:42.780]  And it's only when you bring a magnet into close proximity that it pulls those ball bearings and everything away from the pin, and you're able to take it out.
[15:42.860 --> 15:46.200]  That's how most of the hard tags function.
[15:47.760 --> 15:52.900]  Ink tags are special because they have some stuff inside that may explode.
[15:53.620 --> 15:58.000]  And if you see these in a store, they'll usually say that they're an ink tag.
[15:58.260 --> 16:00.920]  Usually it's noticeable, but sometimes it's not so noticeable.
[16:01.280 --> 16:07.840]  But they'll usually say, like, hey, don't mess with this, or you could get ink all over yourself.
[16:08.040 --> 16:11.280]  So if you've never seen someone open an ink tag, here you go.
[16:11.960 --> 16:13.180]  You have to click this.
[16:14.220 --> 16:16.780]  Here's what it looks like to break a security ink tag.
[16:17.140 --> 16:20.780]  I recently purchased these ink tags from eBay for security research purposes.
[16:21.100 --> 16:24.180]  And in this experiment, my tools of choice are railroad nails.
[16:24.440 --> 16:27.780]  I wedge them in between the ink tag and piece of cloth and apply pressure.
[16:28.020 --> 16:30.800]  In slow motion, you can see the ink burst out of the tag.
[16:30.980 --> 16:31.560]  Follow for more.
[16:34.040 --> 16:40.560]  I always have to, like, say that disclaimer on my TikToks because, like, you know, I always say, like, for security research purposes.
[16:40.560 --> 16:49.780]  And it is, but I had some takedowns, so I tried to, like, make it obvious that I'm not trying to, you know, use this knowledge for anything else.
[16:50.300 --> 16:54.880]  So it is funny, like, people, like, you know, commenting, like, oh, yeah, security research purposes.
[16:57.200 --> 16:58.600]  Soft labels are another class.
[16:58.720 --> 16:59.580]  We talked about this earlier.
[17:00.540 --> 17:04.420]  They, these ones are, can be deactivated at the counter.
[17:05.600 --> 17:09.240]  The hard tags and mostly everything else, like, they remove from the item.
[17:09.480 --> 17:10.700]  These, they leave on the item.
[17:11.020 --> 17:14.440]  And they are deactivated with some, like, powerful thing.
[17:14.440 --> 17:21.660]  So the RF tag that you see on the top left, that's basically an inductor and a little tiny capacitor.
[17:21.900 --> 17:26.600]  And they basically just fry that capacitor at the checkout station.
[17:26.840 --> 17:33.100]  And then the acousto-magnetic, I don't know the exact physics, but there's some kind of, like, magnetic coupling that's going on.
[17:33.180 --> 17:34.880]  And they just kind of, like, reverse the polarity.
[17:34.920 --> 17:36.540]  And that's how those are deactivated.
[17:38.240 --> 17:40.200]  One of my favorite is the spider wrap.
[17:40.780 --> 17:43.760]  And this, you'll see, that, well, you saw it at the beginning when I cut it.
[17:44.000 --> 17:47.520]  But they put them around, like, TVs and PlayStations and things like that.
[17:47.680 --> 17:49.920]  And it serves a couple purposes.
[17:50.320 --> 17:55.840]  And one of them is that it encloses boxes so that you can't open the sides.
[17:55.840 --> 18:01.720]  And then it also, as you saw at the beginning, if you were to cut those, it sets off an alarm.
[18:03.280 --> 18:05.520]  Similar to the spider wraps, there's cable locks.
[18:06.040 --> 18:07.220]  It's made by the same company.
[18:07.580 --> 18:12.200]  This one is made more to, like, route through something and, like, lock it to a shelf.
[18:12.360 --> 18:16.820]  Or just hanging on an item, but it's not meant to go around a box or anything.
[18:18.300 --> 18:22.300]  Hooks, I'm sure you've seen a lot of these in, like, CVS or things like that.
[18:22.460 --> 18:27.740]  They just kind of hold items that are on the shelf and prevent you from removing them.
[18:27.840 --> 18:30.200]  You have to take a magnet to remove them.
[18:31.580 --> 18:33.900]  Security boxes are kind of like a catch-all.
[18:33.900 --> 18:37.920]  If something's weirdly shaped, you can just put it in this box.
[18:38.080 --> 18:39.420]  And now you have to open the box.
[18:40.460 --> 18:48.900]  The fun thing is that this one, this one, this one, and this one, they all open with the exact same magnet.
[18:50.720 --> 18:53.740]  So, you know, I got my lock bypass people here.
[18:53.940 --> 18:55.140]  They had a great talk yesterday.
[18:55.420 --> 18:58.340]  It's like things that, like, if they're key to like.
[18:58.580 --> 19:01.260]  You know, you can think of all these things that are key to like.
[19:01.260 --> 19:03.360]  And if you have the one key, then you're good.
[19:04.320 --> 19:08.680]  One interesting one that I came up with during my research is the Yonder Pouch.
[19:08.680 --> 19:10.360]  Has anyone ever seen these in public before?
[19:11.100 --> 19:11.940]  A couple people.
[19:12.320 --> 19:16.920]  So, they are at, it seems like, concerts and comedy shows.
[19:17.200 --> 19:22.500]  I bought mine from someone who was a, they worked in like college or something like that.
[19:22.880 --> 19:31.100]  They're meant to secure phones so that you don't record the event that you're going to or that you are not distracted by your phone.
[19:31.100 --> 19:35.460]  And they are basically a hard tag with a little pouch on the end.
[19:35.640 --> 19:39.380]  The fun thing about this is that the really strong magnets are kind of hard to find.
[19:39.560 --> 19:45.980]  But the one that I bought on eBay came with the magnetic tray for this and it can open security tags too.
[19:48.060 --> 19:54.460]  Trying to figure out, you know, I wanted to buy those pedestals and like put them in my garage or something.
[19:54.680 --> 19:56.320]  But it just seemed like unnecessary.
[19:56.320 --> 20:01.420]  So, fortunately, you can buy detectors on eBay or AliExpress.
[20:02.180 --> 20:06.420]  And it just kind of shows you like, hey, this is an active tag.
[20:06.720 --> 20:10.980]  And you need two of them because of the different systems in the different stores.
[20:12.180 --> 20:16.060]  Kind of like I alluded to earlier, almost everything is opened by magnet.
[20:16.360 --> 20:21.460]  So, if you have a magnet or a couple different kinds, you can open up most of these things.
[20:23.240 --> 20:27.380]  Another disclaimer, if you're trying to do this research on your own, just be careful.
[20:27.800 --> 20:30.040]  Some of these magnets are really, really powerful.
[20:30.320 --> 20:43.580]  So, you want to have any metal away from them and especially away from other magnets because if something slams together and your finger's in the way or they chip and little shards go flying, that's bad news.
[20:43.740 --> 20:45.880]  So, be very careful when you're experimenting.
[20:47.740 --> 20:51.420]  So, there's the... these are the different kind of magnets that I've purchased.
[20:51.700 --> 20:53.720]  The top left is called a fishing magnet.
[20:53.720 --> 20:55.540]  You can get these really easy on eBay.
[20:55.900 --> 20:58.360]  The one that I have is rated for 270 pounds.
[20:58.740 --> 21:01.840]  The one on the bottom left is called the Alpha S3 key.
[21:02.160 --> 21:06.820]  That's the one that I was talking about earlier that was kind of like a one key to rule them all.
[21:07.320 --> 21:12.840]  The one on the bottom right is really good for hard tags and can open up most of them.
[21:13.200 --> 21:15.460]  I think mine's rated for 15,000 gauss.
[21:15.460 --> 21:19.260]  And on the top right, it's kind of like an in-between of everything.
[21:19.420 --> 21:20.420]  It's just a strong magnet.
[21:22.360 --> 21:25.320]  There are some security tags that don't use magnets to open.
[21:25.680 --> 21:32.200]  And so, the things that... the equipment that open them, they're called like detachers.
[21:33.340 --> 21:40.660]  And instead of a magnet, there's this little hole here on the tag and something goes in there.
[21:42.240 --> 21:45.660]  You can either have that electric one you saw earlier or there's like a handheld version.
[21:45.920 --> 21:47.340]  In both of them is this thing.
[21:47.440 --> 21:47.840]  It's a hook.
[21:48.160 --> 21:51.400]  So, that hook goes into that hole and there's like a little lever.
[21:51.620 --> 21:56.200]  It's really hard to press, but the hook goes into the lever and just presses it down and releases the tag.
[21:58.060 --> 21:59.600]  All right, but what if you don't have a magnet?
[21:59.760 --> 22:00.280]  What can you do?
[22:00.660 --> 22:02.900]  All right, so now we're going to get into the bypasses, the fun stuff.
[22:03.300 --> 22:05.400]  All right, so you could destroy it.
[22:05.580 --> 22:09.360]  Well, let me... before I say this, the magnet is definitely the easy way to go.
[22:09.360 --> 22:14.720]  So, some of these things that we're going to show aren't like what you would do in the store necessarily.
[22:15.080 --> 22:17.040]  It's just like, how do you open these things?
[22:17.260 --> 22:23.440]  There are legitimately some people who buy things and they bring them home and the tag's still on.
[22:23.540 --> 22:25.700]  So, now they have to figure out how do you get them off.
[22:26.280 --> 22:30.680]  If you're close to the store, I'd recommend just going back to the store with your receipt and getting them to take it off.
[22:30.780 --> 22:33.720]  But if you want to have some fun, you can take it off yourself.
[22:35.320 --> 22:41.020]  All right, so for soft labels, all you have to do... these are really easy.
[22:41.280 --> 22:43.900]  The easiest way is to peel it off.
[22:44.020 --> 22:44.600]  They're stickers.
[22:46.060 --> 22:49.700]  But what are some other ways that you could destroy them?
[22:50.520 --> 22:52.140]  A knife or a pen would work.
[22:52.300 --> 22:53.560]  So, we're going to show you that.
[23:05.540 --> 23:07.580]  All right, so here I have some soft labels.
[23:09.040 --> 23:15.650]  These are the acoustic magnetic ones that you might see on a package or DVD or something like that.
[23:16.210 --> 23:18.950]  So, first I'm just going to put it on this box and we're going to test it out.
[23:21.850 --> 23:23.130]  Okay, so that means it's active.
[23:25.310 --> 23:29.770]  And you just take a pair of scissors, kind of cut into it a little bit.
[23:31.970 --> 23:35.610]  And so that's kind of... yeah, clap for the scissor cut.
[23:39.430 --> 23:42.190]  It's basically the same thing for the RF tag.
[23:42.570 --> 23:48.250]  But for the RF tag, if you remember on the pictures earlier, or you can see it on here, all you have to do is cut one of the traces.
[23:50.650 --> 23:53.710]  So you can just like get really, really close and just kind of...
[23:54.130 --> 23:56.950]  Oh, I should have demoed that it worked initially.
[23:58.030 --> 23:59.410]  But I broke it already.
[24:03.490 --> 24:05.330]  Okay, you guys get it?
[24:06.510 --> 24:12.430]  If you don't have a, you know, pair of scissors on you, you can maybe like run it along with a pen.
[24:12.970 --> 24:15.710]  The AM tag is a little bit harder to get into.
[24:15.890 --> 24:17.250]  It's like got some layers in there.
[24:17.370 --> 24:18.630]  So you got to like dig really deep.
[24:22.110 --> 24:24.350]  For the box, how do you open a box?
[24:24.350 --> 24:28.930]  You could use like a hammer or a cirque saw or something else.
[24:29.450 --> 24:30.550]  Here's what I did.
[24:33.710 --> 24:35.970]  No, rien de rien.
[24:37.650 --> 24:41.310]  No, je ne regrette rien.
[24:42.810 --> 24:47.110]  Ni le bien qu'on m'a fait.
[24:48.450 --> 24:52.190]  Ni le mal, tout ça m'est bien égale.
[24:57.380 --> 24:58.920]  Those things are tough.
[24:59.620 --> 25:04.380]  I had a sledgehammer and man, it is really, really hard to open those things.
[25:08.170 --> 25:15.110]  By the way, when I were posting these TikToks and my hair was a little bit shorter, I kept getting called John Wick.
[25:15.270 --> 25:18.190]  So I bought the John Wick Blu-ray DVD and now I keep it in one of these.
[25:19.710 --> 25:21.630]  And I wasn't called John Wick.
[25:21.750 --> 25:24.970]  I was called Walmart John Wick or like discount John Wick.
[25:24.970 --> 25:27.390]  If you guys are like on TikTok, you'll know what that means.
[25:27.770 --> 25:29.810]  It just means like I'm a cheaper looking version.
[25:30.550 --> 25:31.610]  Wish John Wick.
[25:31.830 --> 25:32.790]  Yeah, wish John Wick.
[25:34.770 --> 25:37.930]  Okay, so for hard tags, if you want to...
[25:37.930 --> 25:42.450]  The easiest way to open up one of these by destruction is...
[25:42.830 --> 25:50.010]  All you have to do is remove the little bump on the end, and that's where that magnet kind of gets that metal cylinder.
[25:50.330 --> 25:53.810]  So if you can kind of dig around in there, you can just take all the components out.
[25:54.070 --> 26:02.090]  This is especially good if you're trying to do a tag with ink, because you're avoiding all the ink problems.
[26:05.670 --> 26:08.110]  Here's how I remove clothing security tags.
[26:08.350 --> 26:11.890]  I recently purchased these tags from eBay for security research purposes.
[26:12.210 --> 26:14.550]  They're held together using a pin and latch mechanism.
[26:14.830 --> 26:18.510]  Most are open with a super strong magnet, but if I didn't have one, I can turn up the heat.
[26:18.690 --> 26:20.270]  Here I'm using an old soldering iron.
[26:20.470 --> 26:22.170]  I get it hot and I go in deep.
[26:22.370 --> 26:24.290]  Then I move it around a bunch before pulling it out.
[26:24.490 --> 26:24.850]  Success.
[26:25.210 --> 26:25.890]  Follow for more.
[26:27.830 --> 26:28.650]  Follow for more.
[26:30.990 --> 26:33.070]  So you could do that with a soldering iron.
[26:34.450 --> 26:36.370]  Sometimes I really like these flush cutters.
[26:36.490 --> 26:38.570]  These are really good, just like a whole lot of stuff.
[26:38.730 --> 26:43.030]  But these security tags are very tough plastic, so you need some good stuff.
[26:44.310 --> 26:46.970]  Now what happens if you're trying to open an ink tag?
[26:47.190 --> 26:48.450]  It can be really messy.
[26:49.890 --> 26:54.350]  So we're going to look at some different things, and then I'll give you my opinion at the end.
[26:55.290 --> 27:00.350]  But I think one of the things you want to do is try not to make the ink spill.
[27:01.030 --> 27:06.530]  So usually there's holes in the tag where the ink would exit, so you can try and cover those up.
[27:08.170 --> 27:11.010]  Will duct tape prevent the security ink tag from splattering?
[27:11.230 --> 27:11.990]  Let's find out.
[27:12.110 --> 27:18.910]  I recently purchased these ink tags from eBay for security research purposes, and first I slide the duct tape behind the tag and then cover the top.
[27:19.110 --> 27:22.090]  Then I put on my safety gloves and glasses and pry open the tag.
[27:22.090 --> 27:25.150]  The duct tape was effective overall, but some ink got out.
[27:25.390 --> 27:26.150]  What else should I try?
[27:29.190 --> 27:33.530]  Another one of those disclaimers that I try and put on my TikToks is, I was wearing safety glasses.
[27:33.990 --> 27:37.690]  Just so, because some people's videos get taken down for safety reasons.
[27:39.330 --> 27:40.530]  Alright, let's see what else we got.
[27:40.970 --> 27:44.210]  Will this security ink tag not splatter if I freeze then break it?
[27:44.350 --> 27:45.230]  Let's find out.
[27:45.410 --> 27:49.930]  The ink tag sat in my freezer for 24 hours, and now it's time to conduct our security research.
[27:49.930 --> 27:54.250]  I grab my scientific instruments, also known as railroad nails, and apply pressure.
[27:54.470 --> 27:57.950]  As you can see, the ink still burst out of the tag and was not completely frozen.
[27:58.250 --> 27:59.110]  What else should I try?
[28:00.410 --> 28:02.470]  Did anyone notice what was in my freezer?
[28:04.030 --> 28:04.470]  Uno?
[28:05.010 --> 28:06.390]  In the Cards Against Humanity?
[28:06.690 --> 28:07.910]  Anyone know why I did that?
[28:10.150 --> 28:10.590]  Yes.
[28:12.110 --> 28:24.670]  So, sometimes if you don't think a video is going to do well, or you just want it to do better, you can put things in the video that are kind of slight that people want to correct you about, or ask you about.
[28:25.210 --> 28:31.830]  So, just putting some stuff in my freezer, and another one with the freezer, I put like a shoe in there, and people are like, why are there shoes in there?
[28:31.830 --> 28:33.310]  And it just like, gets that engagement.
[28:33.630 --> 28:37.070]  So, pro tip, if you're on TikTok, or...
[28:37.070 --> 28:37.570]  Yeah.
[28:39.970 --> 28:42.530]  You know, if you're posting videos, like, do something.
[28:43.110 --> 28:43.530]  Typos.
[28:43.650 --> 28:44.890]  I'll show you a typo in a little bit.
[28:45.610 --> 28:46.030]  Yeah.
[28:46.210 --> 28:47.730]  Have people correct you on things.
[28:47.730 --> 28:48.310]  It's really good.
[28:48.830 --> 28:50.370]  That suggestion came from people.
[28:50.530 --> 28:52.350]  So, people were like, hey, will freezing work?
[28:52.510 --> 28:59.810]  And turns out, that ink probably has like some alcohol in it, so it has a, probably a pretty low freezing point, and didn't work.
[29:01.830 --> 29:04.810]  Will hot glue prevent this security ink tag from splattering?
[29:05.030 --> 29:05.770]  Let's find out.
[29:05.910 --> 29:14.550]  I recently purchased these ink tags from eBay for security research purposes, and after smothering the tag with hot glue, I put on my safety gloves and glasses, and pry open the tag.
[29:14.810 --> 29:16.970]  To my surprise, the ink files remained intact.
[29:17.290 --> 29:18.230]  What else should I try?
[29:19.730 --> 29:22.470]  Yeah, I was pretty surprised by that one.
[29:22.670 --> 29:25.450]  And even though I wouldn't need to try anything else, it's fun to try other things.
[29:26.070 --> 29:31.070]  I tried beeswax, too, because I thought hot glue was kind of similar.
[29:31.890 --> 29:33.290]  And beeswax worked, too.
[29:34.530 --> 29:38.330]  I don't think some of these things are like always going to work, right?
[29:38.410 --> 29:43.050]  There could be little inconsistencies, right, that just make it work or make it not work.
[29:43.250 --> 29:50.850]  I think the thing with the hot glue that made it work was, it's sort of grabbing around everything and just like preventing it from breaking.
[29:51.190 --> 29:53.170]  So, I think that's why that one worked.
[29:54.170 --> 29:59.410]  So, my recommendation for ink tags is, if you can, of course, go back to the store and have them take it off.
[29:59.730 --> 30:01.890]  But just get the ink vials out first.
[30:01.990 --> 30:06.070]  So, you can use like some flush cutters or maybe melted or something like that.
[30:06.210 --> 30:07.810]  And just get the ink vials out.
[30:07.950 --> 30:11.610]  That way, when you proceed further, you don't have any risk of the ink splattering.
[30:12.230 --> 30:15.810]  So, another way of opening up tags is by separation.
[30:16.570 --> 30:19.890]  And you can do that with forks or rubber bands.
[30:20.150 --> 30:23.810]  And I'm not allowed to say one of the other methods because it's kind of inappropriate.
[30:23.870 --> 30:28.650]  But you can do your own research and figure out what material that is.
[30:29.190 --> 30:30.750]  And plastic bags.
[30:31.750 --> 30:34.470]  And some of these might not get it off all the way.
[30:34.470 --> 30:39.970]  So, you know, if it gets it off most of the way, then you could sort of use a combination of other things.
[30:40.130 --> 30:44.610]  Like, if you get it separated enough, you can just go in with some flush cutters and cut the pin off.
[30:46.110 --> 30:49.430]  Will I be able to remove the security tag using two forks?
[30:49.630 --> 30:50.350]  Let's find out.
[30:50.530 --> 30:53.750]  I recently purchased these tags from eBay for security research purposes.
[30:54.110 --> 30:58.050]  I begin by inserting the pin into the tag and then slide the first fork in between them.
[30:58.230 --> 31:02.030]  I'm able to pop out the pin a little and then I use the second fork to finish the job.
[31:02.250 --> 31:02.610]  Success!
[31:03.050 --> 31:03.870]  What else should I try?
[31:05.650 --> 31:07.170]  Did anyone notice the typo?
[31:08.770 --> 31:11.590]  So, it was two forks, T-O-O.
[31:12.090 --> 31:14.770]  So, yeah, I had people like, hey, you spelled two wrong.
[31:14.930 --> 31:16.290]  I'm like, thanks for the points, guy.
[31:18.890 --> 31:24.590]  If you're doing it with forks, I recommend not using ones made of, like, I think these were, like, mainly silver or something.
[31:24.710 --> 31:25.910]  And they're just, like, bent a lot.
[31:26.110 --> 31:27.410]  So, try and get something that's really sturdy.
[31:29.430 --> 31:32.310]  Will I be able to remove my ink tag using a plastic bag?
[31:32.470 --> 31:33.310]  Let's find out.
[31:33.450 --> 31:37.290]  I recently purchased retail ink tags from eBay for security research purposes.
[31:37.670 --> 31:38.990]  First, I set up the experiment.
[31:38.990 --> 31:41.910]  Then I slide the bag between the main tag and ink tag.
[31:42.170 --> 31:47.190]  Next, I spin it around the center, building up thin layers of plastic, which gently separates the two halves.
[31:47.650 --> 31:48.010]  Success!
[31:48.410 --> 31:50.330]  The ink tag pops off with no mess.
[31:50.710 --> 31:51.370]  Follow for more.
[31:52.690 --> 31:55.950]  I think that one works maybe 60% of the time.
[31:57.070 --> 32:01.230]  This is my favorite method, except for that other method that I'm not allowed to talk about on stage.
[32:01.470 --> 32:01.990]  Go look that up.
[32:02.110 --> 32:03.310]  But this is kind of close to that one.
[32:03.310 --> 32:06.890]  Can you all please stop tagging Party Shirt in all of my videos?
[32:07.190 --> 32:08.390]  I do not post cap.
[32:08.610 --> 32:09.390]  Just fax.
[32:09.630 --> 32:13.250]  Now sit back and enjoy the security ink tag and rubber band video.
[32:13.690 --> 32:14.690]  Cause day and night.
[32:15.430 --> 32:18.570]  The lonely loner seems the freeest mind at night.
[32:19.850 --> 32:22.430]  Does anyone know who Party Shirt is on TikTok?
[32:23.990 --> 32:24.930]  Didn't think so.
[32:24.930 --> 32:27.290]  But if you're on TikTok, you probably know who they are.
[32:28.050 --> 32:33.590]  Party Shirt is a pair of gentlemen that test Internet trends or whatever.
[32:33.810 --> 32:38.230]  So usually people will tag them in a video to have them test it.
[32:38.410 --> 32:43.490]  Because Party Shirt is sort of like the known good source of trying things.
[32:43.590 --> 32:47.830]  So if they try it and they say it's good, then you can trust that the original is good or otherwise.
[32:48.290 --> 32:54.390]  So another way to get points on the Internet is people weren't really tagging Party Shirt in my videos.
[32:54.390 --> 32:55.150]  They kind of were.
[32:55.310 --> 32:55.970]  But not a lot.
[32:56.390 --> 32:59.130]  But every time I told people to stop doing it...
[33:01.250 --> 33:04.510]  So Party Shirt ended up testing the plastic bag one.
[33:04.910 --> 33:06.230]  And they got it open.
[33:06.390 --> 33:06.870]  So that was cool.
[33:09.610 --> 33:10.930]  Continuity is another bypass.
[33:12.050 --> 33:15.770]  And I'm sure our lock bypass people are very familiar with this one.
[33:16.090 --> 33:19.110]  So this is appropriate for the spider tag.
[33:19.310 --> 33:20.510]  So you saw me cut it earlier.
[33:20.510 --> 33:26.110]  If you continue the continuity, you will have an option to get it open.
[33:26.530 --> 33:30.070]  Will I be able to remove my spider security tag using alligator clips?
[33:30.230 --> 33:30.950]  Let's find out.
[33:31.190 --> 33:34.170]  I purchased some spider tags from eBay for security research purposes.
[33:34.490 --> 33:36.790]  And cutting the wire normally sets off a very loud alarm.
[33:37.190 --> 33:39.430]  First, I shave off two sections of wire coating.
[33:39.710 --> 33:42.110]  Next, I place clips to maintain electrical continuity.
[33:42.510 --> 33:43.650]  And now it's time to cut the wire.
[33:44.210 --> 33:44.550]  Success!
[33:44.550 --> 33:46.530]  No loud alarm or rapid blinking.
[33:46.790 --> 33:47.510]  Follow for more.
[33:48.750 --> 33:53.050]  If you notice, I didn't put the pliers in there.
[33:54.370 --> 33:58.010]  Someone had told me that they had a TikTok taken down for having scissors in there.
[33:58.050 --> 34:00.410]  So I was paranoid and I didn't put that part in there.
[34:01.250 --> 34:02.790]  But we're going to demonstrate that later.
[34:03.850 --> 34:06.330]  And then we already talked a little bit about Faraday cages.
[34:06.330 --> 34:10.930]  But this is something that my old college roommate kind of told me about first.
[34:11.450 --> 34:13.770]  And they're called booster bags.
[34:13.970 --> 34:16.230]  I learned a lot on TikTok afterwards too.
[34:16.350 --> 34:22.190]  People were just like telling me things like the nickname for like shoplifting is actually borrowing.
[34:22.610 --> 34:24.550]  So I guess they're going to bring it back at some point.
[34:24.730 --> 34:31.010]  But booster bags are shopping bags that people line with aluminum foil, creates a Faraday cage, and they're able to walk out with stuff.
[34:31.990 --> 34:33.550]  Another method is jamming.
[34:33.550 --> 34:36.030]  I haven't heard too much done with this.
[34:36.250 --> 34:38.830]  But theoretically, you know, everything's kind of done with RF.
[34:39.110 --> 34:41.650]  So you could possibly build some kind of jammer.
[34:42.150 --> 34:43.670]  I haven't done any kind of research with that.
[34:44.110 --> 34:44.630]  All right.
[34:44.730 --> 34:50.830]  Now, one of the fun things with having like 500 ink tags is what do I do with this stuff?
[34:51.170 --> 34:57.330]  So since I'm on TikTok and stuff like that, I'm like, oh, let me try and make some art.
[34:57.470 --> 35:01.490]  So we're going to play a game, calls it, is it art or not art?
[35:02.290 --> 35:03.590]  So let me know what you guys think.
[35:19.310 --> 35:19.670]  Art.
[35:19.910 --> 35:21.190]  That is my... thank you.
[35:22.070 --> 35:23.450]  Hold up your hands if you think it's art.
[35:24.510 --> 35:24.870]  Cool.
[35:25.170 --> 35:25.490]  All right.
[35:25.570 --> 35:26.250]  Now put your hands down.
[35:26.450 --> 35:27.330]  Who doesn't think it's art?
[35:27.450 --> 35:28.050]  Please be honest.
[35:28.610 --> 35:28.990]  A few people.
[35:29.150 --> 35:29.290]  Okay.
[35:29.510 --> 35:30.770]  I didn't really think so either.
[35:31.370 --> 35:34.290]  I just did it because I had like hundreds and hundreds of security tags.
[35:35.450 --> 35:40.170]  But that ended up being my most viral videos, like sitting at like 26 million views.
[35:40.430 --> 35:41.750]  And everyone's commenting.
[35:41.990 --> 35:46.950]  Because remember, the thing that I did in the description was, hey, I'm creating art, everyone.
[35:47.230 --> 35:52.090]  Just to like trigger those people to, you know, argue in the comments whether it's art or not art.
[35:52.250 --> 35:53.630]  There was a lot of people arguing.
[35:54.030 --> 35:57.070]  And it kind of got me thinking like, yeah, what is art?
[35:58.070 --> 35:59.290]  And, you know, who knows?
[35:59.490 --> 36:00.850]  It's in the eye of the beholder, right?
[36:01.490 --> 36:04.030]  Here's some of the comments on this one.
[36:04.190 --> 36:05.370]  Bidding starts at $2 million.
[36:06.950 --> 36:08.450]  Anyone can make art nowadays.
[36:08.810 --> 36:11.070]  I remember when art had pictures and people in it.
[36:11.170 --> 36:11.790]  Man, I'm old.
[36:13.730 --> 36:16.410]  And I made the mistake of selling this.
[36:16.550 --> 36:19.030]  Because I was like, when it was going viral, I was like, oh, let me sell it.
[36:19.090 --> 36:22.450]  I think I sold it for like 200 bucks or something like that, which is so pretty awesome.
[36:22.670 --> 36:25.350]  But then it like got, it was my most viral video.
[36:25.350 --> 36:30.130]  I was like, oh, I kind of wish I had it back just so I could hang it on the wall to kind of have something remembered by.
[36:31.470 --> 36:34.810]  Okay, so the hope badge that I designed this year.
[36:35.290 --> 36:36.690]  There's a few people that got it.
[36:36.810 --> 36:37.830]  I only made 20 of them.
[36:38.610 --> 36:41.650]  And this was sort of inspired by security tags.
[36:41.950 --> 36:47.490]  So on the badge is a couple security tags that you see at the bottom.
[36:48.030 --> 36:50.810]  Those are internal components of a couple different ones.
[36:50.810 --> 36:55.490]  And we have both the 8.2 megahertz and the 58 kilohertz.
[36:55.870 --> 36:59.510]  And so if you were to bring this into a retail store, it would set off the alarms.
[36:59.750 --> 37:01.290]  So don't do that, people who bought it.
[37:06.710 --> 37:11.690]  Also, I wanted to... and I kind of did that last year at DEFCON, but I kind of wanted to do something different this year.
[37:11.690 --> 37:14.190]  So on here there's a demo.
[37:14.930 --> 37:16.290]  Let me reset.
[37:16.770 --> 37:18.270]  It's called the spider tag demo.
[37:18.630 --> 37:20.970]  So right now it's like armed.
[37:21.230 --> 37:22.950]  And if you remember the security tag...
[37:22.950 --> 37:24.090]  Sorry, the spider tag.
[37:24.290 --> 37:26.920]  When you break the continuity, it alarms.
[37:27.830 --> 37:28.970]  So we got something like that.
[37:29.650 --> 37:31.090]  Or I'll just disconnect it here.
[37:33.250 --> 37:35.330]  And if we reconnect it, it doesn't go off.
[37:35.330 --> 37:37.190]  But I have a little magnet.
[37:39.090 --> 37:40.490]  And there's a little magnet sensor.
[37:40.670 --> 37:41.930]  So it kind of just like rearms it.
[37:42.230 --> 37:44.190]  It's also got like a little video game on it.
[37:44.330 --> 37:45.750]  And just like a flashy badge mode.
[37:45.970 --> 37:47.910]  So that was a lot of fun to make for HOPE.
[37:48.830 --> 37:51.070]  If you guys are going to DEFCON, check out my DEFCON badges.
[37:51.610 --> 37:52.790]  They'll be released soon.
[37:53.330 --> 37:53.570]  All right.
[37:53.690 --> 37:58.230]  So now I'm going to ask for some volunteers to come up and try some of these things.
[37:58.370 --> 38:00.530]  The things that we're going to try are some Faraday cages.
[38:00.910 --> 38:03.130]  We're going to try the rubber band method.
[38:03.330 --> 38:07.170]  And we're going to try the spider tag alligator clips.
[38:07.510 --> 38:08.910]  So do I have any volunteers?
[38:09.370 --> 38:10.170]  Otherwise, I'll do it.
[38:10.270 --> 38:10.390]  All right.
[38:10.430 --> 38:11.110]  Come up on stage.
[38:11.370 --> 38:12.370]  If you want to give it a try.
[38:12.590 --> 38:12.970]  Come on up.
[38:18.100 --> 38:18.460]  Check.
[38:18.660 --> 38:18.820]  Check.
[38:19.000 --> 38:19.220]  All right.
[38:19.600 --> 38:20.120]  One, two.
[38:20.260 --> 38:22.100]  Hey, welcome to HOPE today.
[38:22.500 --> 38:22.680]  All right.
[38:22.900 --> 38:24.480]  So what is your name?
[38:24.820 --> 38:25.760]  My name is Zalia.
[38:26.220 --> 38:26.580]  Zalia.
[38:26.700 --> 38:27.320]  Nice to meet you.
[38:27.560 --> 38:28.480]  Give her a round of applause.
[38:30.780 --> 38:31.240]  All right.
[38:31.240 --> 38:36.180]  So would you like to try the spider tag where you get to cut the cord?
[38:36.580 --> 38:39.240]  Or we also have the rubber band or the Faraday cage?
[38:39.500 --> 38:40.420]  Spider tag, please.
[38:40.460 --> 38:41.000]  Spider tag.
[38:41.120 --> 38:41.340]  All right.
[38:41.600 --> 38:43.300]  So grab that box.
[38:44.460 --> 38:46.100]  And first we need to put it on.
[38:46.220 --> 38:47.100]  So hold the microphone.
[38:51.100 --> 38:51.920]  There's a...
[38:51.920 --> 38:52.860]  Can you hold it up here?
[38:53.040 --> 38:55.680]  There's a little button on the bottom that's used to extend that.
[38:55.900 --> 38:59.120]  And then you wrap it around the box like this.
[39:00.020 --> 39:02.320]  And then there's a little lever on the top.
[39:02.540 --> 39:03.540]  Close it like this.
[39:08.880 --> 39:10.720]  Ooh, you're going to kill the heavy guy.
[39:15.210 --> 39:16.230]  Get it nice and tight.
[39:16.810 --> 39:16.970]  Okay.
[39:17.150 --> 39:19.050]  So have you used wire strippers before?
[39:19.630 --> 39:19.910]  Yeah.
[39:20.270 --> 39:20.470]  Okay.
[39:20.790 --> 39:23.290]  So I think where it says like 18.
[39:23.750 --> 39:27.850]  And you kind of just want to like shave a little bit off.
[39:28.450 --> 39:31.030]  If you want to practice, you could actually practice with this one.
[39:31.790 --> 39:34.630]  Just try and like shave maybe like that much off.
[39:47.000 --> 39:49.720]  And I found if I hold the wire strippers at like an angle.
[39:49.960 --> 39:50.160]  Yeah.
[39:50.340 --> 39:50.660]  Like that.
[39:50.860 --> 39:52.060]  You kind of got to do that sort of thing.
[39:53.920 --> 39:55.100]  Try that on the 18 one.
[39:56.920 --> 39:57.660]  Did you get it?
[39:58.540 --> 39:59.920]  A little bit?
[40:05.580 --> 40:05.950]  Yeah.
[40:06.330 --> 40:06.660]  There you go.
[40:13.580 --> 40:14.440]  She got one of them.
[40:21.690 --> 40:22.610]  I think you got it.
[40:22.890 --> 40:23.130]  All right.
[40:23.190 --> 40:24.690]  Now we got some alligator clips.
[40:31.360 --> 40:32.660]  God, this is my life.
[40:32.820 --> 40:33.350]  Like every day.
[40:35.900 --> 40:36.580]  There you go.
[40:45.370 --> 40:47.230]  And before you cut it, I'm just going to double check.
[40:47.490 --> 40:47.730]  Just so.
[40:48.110 --> 40:48.250]  Yeah.
[40:51.650 --> 40:52.050]  All right.
[40:52.330 --> 40:53.150]  Let's check here.
[40:54.170 --> 40:56.030]  I think you're probably good.
[40:56.850 --> 41:00.450]  I don't see it stripped all the way around, but that's not totally necessary.
[41:00.690 --> 41:01.690]  Does it matter which one I cut?
[41:02.290 --> 41:02.690]  No.
[41:02.890 --> 41:04.470]  So this is like one continuous wire.
[41:04.630 --> 41:05.890]  She asked, does it matter which one you cut?
[41:06.190 --> 41:06.970]  It doesn't matter.
[41:07.450 --> 41:09.630]  Use the little flush cutters over there.
[41:10.390 --> 41:11.690]  And hold it up and cut it.
[41:15.090 --> 41:15.530]  Whoa.
[41:18.190 --> 41:22.690]  I think it got knocked around at the end.
[41:23.210 --> 41:24.350]  But do you want to take that?
[41:24.890 --> 41:25.150]  All right.
[41:26.970 --> 41:27.490]  All right.
[41:27.650 --> 41:30.810]  So next we got the Faraday cage or rubber bands.
[41:31.330 --> 41:32.570]  Which one would you like to try?
[41:33.070 --> 41:33.690]  Rubber band.
[41:33.790 --> 41:34.470]  Rubber band.
[41:34.690 --> 41:35.130]  All right.
[41:35.330 --> 41:38.290]  So we're going to set this up over here.
[41:44.140 --> 41:48.260]  So I had some of these ink tags and I took the ink out.
[41:48.840 --> 41:52.100]  If you wanted to just like throw that outside or like...
[41:52.100 --> 41:52.160]  Yeah.
[41:52.620 --> 41:53.280]  Or do you want to...
[41:53.280 --> 41:53.740]  Here, come up.
[41:53.780 --> 41:54.160]  Come up here.
[41:55.600 --> 41:58.020]  No, a magnet will rearm it.
[41:58.400 --> 41:59.500]  I'll give you one at the end.
[41:59.700 --> 42:02.420]  But we're just going to put it in this water.
[42:09.930 --> 42:17.190]  That was another thing that people commented on TikTok was like, oh yeah, like if it just alarms, you can like just have a soda with you and do that sort of thing.
[42:17.190 --> 42:17.890]  All right.
[42:18.130 --> 42:19.570]  So we're going to get a piece of cloth.
[42:20.130 --> 42:21.730]  So go ahead and take that.
[42:21.790 --> 42:22.470]  Be careful of that.
[42:22.650 --> 42:23.530]  Stick it through the cloth.
[42:28.640 --> 42:30.160]  And then stick it into the tag.
[42:34.180 --> 42:34.620]  Okay.
[42:34.920 --> 42:36.600]  And then grab a rubber band.
[42:36.760 --> 42:38.880]  Grab one of the thick ones out of that bag.
[42:39.440 --> 42:51.060]  And did you see the video where it's kind of like you're basically going to stretch the rubber band around it as much as you can and then kind of like flip it around and you're just building up layers like that.
[42:51.620 --> 42:53.280]  Should I use the thicker or thinner?
[42:53.620 --> 42:54.220]  Thicker, yeah.
[43:03.290 --> 43:04.090]  Let me see.
[43:07.330 --> 43:07.930]  Yeah, it's fine.
[43:09.070 --> 43:10.790]  It's a little loose right now.
[43:11.710 --> 43:12.610]  Not really sure.
[43:12.750 --> 43:13.370]  Enough rubber band?
[43:13.610 --> 43:13.890]  Why?
[43:14.730 --> 43:15.750]  Yeah, let's just try it.
[43:46.910 --> 43:47.670]  Out of rubber band.
[43:47.790 --> 43:48.110]  Okay.
[43:48.410 --> 43:49.230]  You're almost out of rubber band.
[43:49.290 --> 43:50.650]  When you feel you can't do it anymore, stop.
[43:53.210 --> 43:53.570]  Okay.
[43:53.990 --> 43:57.370]  Now hold it up and twist it like you're kind of like screwing that off.
[43:58.210 --> 44:00.090]  Just kind of turn to the left or the right.
[44:02.310 --> 44:03.310]  You guys hear that?
[44:03.490 --> 44:03.790]  Wow.
[44:04.090 --> 44:04.250]  Yeah.
[44:04.830 --> 44:05.750]  See if you keep twisting.
[44:07.510 --> 44:08.750]  You might get another pop.
[44:08.990 --> 44:12.570]  So when you're doing the rubber band method, you're listening for that pop.
[44:13.390 --> 44:15.990]  Hopefully if there was ink in there, it didn't pop.
[44:16.450 --> 44:17.550]  Just heard another one.
[44:19.830 --> 44:22.710]  And it was a little loose to begin with, so...
[44:22.710 --> 44:22.930]  Hey!
[44:25.370 --> 44:26.050]  All right.
[44:26.270 --> 44:26.810]  Good job.
[44:26.990 --> 44:27.890]  You can keep that if you want.
[44:28.390 --> 44:29.010]  All right.
[44:29.710 --> 44:30.390]  Good job.
[44:31.090 --> 44:31.510]  All right.
[44:31.590 --> 44:34.110]  Next, we're going to do a Faraday cage.
[44:34.290 --> 44:35.050]  So come on up.
[44:35.650 --> 44:37.150]  If you guys want to try it out later...
[44:37.150 --> 44:41.310]  By the way, I'm going to go to the hardware hacking area with all this stuff after this talk.
[44:41.310 --> 44:45.070]  So if you have additional questions or want to try this stuff out, meet me out over there.
[44:45.410 --> 44:47.070]  Unfortunately, I don't think we have time for everyone else.
[44:47.190 --> 44:50.110]  But you guys can come to the hardware hacking area and finish it out.
[44:50.510 --> 44:50.770]  All right.
[44:51.310 --> 44:51.910]  What's your name?
[44:52.590 --> 44:53.390]  My name is Robert.
[44:53.730 --> 44:54.450]  Nice to meet you, Robert.
[44:54.910 --> 44:55.730]  Are you ready to steal?
[44:56.090 --> 44:56.230]  Yep.
[44:56.710 --> 44:57.050]  Don't.
[44:57.350 --> 44:58.030]  Don't steal.
[44:59.210 --> 44:59.550]  God.
[44:59.790 --> 45:00.730]  What did I tell you guys?
[45:00.910 --> 45:01.430]  You can borrow.
[45:01.510 --> 45:02.670]  Yeah, you can borrow this stuff.
[45:02.830 --> 45:03.870]  You can't take it.
[45:03.870 --> 45:04.330]  Okay.
[45:04.630 --> 45:07.710]  So I'm going to have you try out some of this stuff.
[45:07.990 --> 45:09.630]  We have some aluminum foil.
[45:09.850 --> 45:11.930]  We have a Faraday phone bag.
[45:11.930 --> 45:13.290]  We have a Ruffles bag.
[45:13.510 --> 45:14.770]  And we have some Faraday cloth.
[45:15.250 --> 45:16.490]  Which one do you want to try first?
[45:17.470 --> 45:19.070]  Let's try one of the chip bags.
[45:19.290 --> 45:19.610]  Okay.
[45:20.150 --> 45:20.930]  Do me a favor.
[45:21.110 --> 45:22.490]  Choose the nacho cheese one first.
[45:24.910 --> 45:25.470]  All right.
[45:25.690 --> 45:26.910]  So pick a tag.
[45:27.030 --> 45:27.410]  Any tag.
[45:31.540 --> 45:32.700]  Oh, why'd you choose that one?
[45:32.940 --> 45:33.260]  Okay.
[45:33.340 --> 45:34.280]  I think that one's a checkpoint.
[45:35.100 --> 45:35.420]  Okay.
[45:35.980 --> 45:36.980]  Drop it in the chip bag.
[45:38.060 --> 45:40.560]  And fold the top over just to make sure it's closed.
[45:41.460 --> 45:41.760]  All right.
[45:42.400 --> 45:44.140]  Raise your hand if you think it's going to work.
[45:45.460 --> 45:47.980]  And we're pretending that we're going to like walk through security with this thing.
[45:48.080 --> 45:48.220]  All right.
[45:48.240 --> 45:48.540]  Here we go.
[45:51.380 --> 45:51.700]  Ah.
[45:52.880 --> 45:54.580]  I actually didn't think that was going to work.
[45:54.720 --> 45:55.960]  The nacho cheese one was kind of eh.
[45:56.200 --> 45:56.540]  All right.
[45:56.780 --> 45:59.080]  Now let's try aluminum foil.
[46:00.600 --> 46:01.540]  Oh, and you know what?
[46:01.540 --> 46:06.600]  I think the RFID guy who was talking yesterday, I don't know if he's even here.
[46:07.220 --> 46:10.280]  But there's some that are like low frequency, some that are high frequency.
[46:10.560 --> 46:12.720]  So actually I want you to use a low frequency tag.
[46:13.980 --> 46:16.040]  So here, wrap that one instead.
[46:16.480 --> 46:18.300]  This is the Sensormatic tag.
[46:19.040 --> 46:23.900]  By the way, I do recommend if you have a retail store, to use the ones that have the hooks.
[46:24.140 --> 46:26.620]  Because they're harder to open and magnets don't work.
[46:27.120 --> 46:27.700]  All right.
[46:27.920 --> 46:29.520]  So let's see here.
[46:32.570 --> 46:33.010]  Okay.
[46:33.130 --> 46:33.310]  Yeah.
[46:33.470 --> 46:33.850]  You're good.
[46:34.470 --> 46:34.930]  All right.
[46:35.250 --> 46:38.130]  And let's try the Faraday cloth.
[46:41.090 --> 46:41.530]  Yeah.
[46:41.810 --> 46:43.490]  And let's do a little experiment.
[46:44.610 --> 46:48.090]  Let's just like have one layer, and I'll kind of like try from the other side.
[46:51.190 --> 46:53.630]  So first I'll do it from this side, just so you can hear it work.
[46:54.790 --> 46:56.770]  So you can't just have one layer.
[46:56.970 --> 47:01.490]  Let's figure out how many layers does it take to experiment and do security research.
[47:04.970 --> 47:05.790]  Two layers.
[47:06.210 --> 47:06.570]  All right.
[47:06.650 --> 47:08.050]  I think it's actually like four layers.
[47:08.730 --> 47:09.710]  Because you're...
[47:09.710 --> 47:10.090]  Oh.
[47:10.250 --> 47:11.150]  Not good enough.
[47:11.310 --> 47:12.010]  Not good enough.
[47:16.990 --> 47:22.430]  I got the idea for the chip bag from Terminator Salvation or something.
[47:22.770 --> 47:26.190]  There's a scene in there when they do like a... they put it in a ruffles bag.
[47:26.330 --> 47:26.770]  Four layers.
[47:26.950 --> 47:27.710]  Four layers.
[47:27.710 --> 47:27.830]  Four layers.
[47:29.710 --> 47:30.070]  Nope.
[47:33.910 --> 47:41.150]  So, so far the Faraday cage... and see sometimes it's like the problem is might be like these edges over here that like technically aren't closed.
[47:41.650 --> 47:43.510]  So try and like fold in, fold in everything.
[47:50.210 --> 47:50.570]  Yay!
[47:53.030 --> 47:53.910]  Thank you very much.
[47:54.250 --> 47:54.570]  Thank you.
[47:54.710 --> 47:55.030]  All right.
[47:55.230 --> 47:56.070]  We have... you can keep that.
[47:56.330 --> 47:56.510]  Thank you.
[47:56.510 --> 47:57.670]  We have time for a couple questions.
[47:58.190 --> 48:01.690]  If you guys want to run up, I'm going to put the mic down here.
[48:15.830 --> 48:18.130]  It's hard to run from the cops with a broken ankle.
[48:21.860 --> 48:22.540]  Oh, yeah.
[48:23.860 --> 48:24.560]  Yes, sir.
[48:25.240 --> 48:32.920]  So just like people make jokes with the actual small locks, have you ever gone to a store and added extra tags just for extra chaos?
[48:32.920 --> 48:33.460]  No.
[48:35.300 --> 48:36.160]  That's kind of funny though.
[48:36.500 --> 48:44.220]  I mean, I thought about a lot of different like little pranks you could do, but I, you know, the only time I bring security tags into a store is by accident.
[48:44.220 --> 48:53.340]  Like, you know, when I was here this week and, you know, had my backpack and I just had to go into CVS or something and it sets an off and I'm like, sorry everyone.
[48:53.680 --> 48:57.220]  Like, it might sound weird, but I have these things in my bag.
[48:57.520 --> 48:58.860]  I promise I'm not stealing.
[49:00.140 --> 49:00.700]  Yes, sir.
[49:00.880 --> 49:06.040]  This is not actually apropos of tags, but your attempt to freeze the tags amused me.
[49:06.040 --> 49:16.660]  I recently had some artisanal jam, which I took through TSA at an airport and they confiscated it, even though I offered to eat it right there.
[49:17.680 --> 49:19.560]  They said, it's a gel.
[49:19.760 --> 49:20.420]  It's really a pity.
[49:20.660 --> 49:25.000]  If only you had frozen it, we would have let you take it through.
[49:25.320 --> 49:28.660]  Yeah, I've heard people being able to freeze those kinds of things to take them through.
[49:28.960 --> 49:29.220]  Interesting.
[49:32.830 --> 49:34.150]  Have fun and hope everyone.
[49:34.470 --> 49:35.110]  Thanks for coming by.