Page 1 of 3

Liberty safe

PostPosted: Wed Sep 06, 2023 9:19 pm
by Rotary12
A little something to consider when purchasing a new safe.

https://twitter.com/charliekirk11/statu ... SMc27SorYA

Sent from my SM-S908U1 using Tapatalk

Re: Liberty safe

PostPosted: Thu Sep 07, 2023 2:43 am
by daleamn
So does Liberty have a code, that you cannot change, that will open the safe?
If yes, is the code different for each individual safe out there?
I guess it could be handy is some situations but sounds like it could be a major security concern too.

Re: Liberty safe

PostPosted: Thu Sep 07, 2023 4:47 am
by jdege
Rotary12 wrote:A little something to consider when purchasing a new safe.

https://twitter.com/charliekirk11/statu ... SMc27SorYA

Sent from my SM-S908U1 using Tapatalk

I don't object to Liberty responding to a valid court order, I'm object to Liberty having the combinations in the first place.

Not in maintaining the combinations, but in being able to maintain the combinations.

Their process for assigning combinations should be such that it's not possible for them to know the combination for any given customer's safe.

Re: Liberty safe

PostPosted: Thu Sep 07, 2023 5:44 am
by Holland&Holland
jdege wrote:
Rotary12 wrote:A little something to consider when purchasing a new safe.

https://twitter.com/charliekirk11/statu ... SMc27SorYA

Sent from my SM-S908U1 using Tapatalk

I don't object to Liberty responding to a valid court order, I'm object to Liberty having the combinations in the first place.

Not in maintaining the combinations, but in being able to maintain the combinations.

Their process for assigning combinations should be such that it's not possible for them to know the combination for any given customer's safe.

Then don’t buy a Liberty safe. Isn’t this one of their advertised features? I do believe that the consumer needs to register in order to associate themselves with the specific safe. Part of the warranty process. Once again if you don’t want that feature it is up to you.

Re: Liberty safe

PostPosted: Thu Sep 07, 2023 7:04 am
by jdege
They clearly have a very different idea of what constitutes security than I do.

To me, it feels like a website that maintains a plaintext copy of your password - it's simply wrong.

Re: Liberty safe

PostPosted: Thu Sep 07, 2023 7:15 am
by Rotary12
So, it appears that they freely gave the combination to the safe without a warrant or subpoena and are now trying to smooth over their error.

https://twitter.com/libertysafeinc/stat ... 8nKyA&s=19

Re: Liberty safe

PostPosted: Thu Sep 07, 2023 7:51 am
by jdege
Rotary12 wrote:So, it appears that they freely gave the combination to the safe without a warrant or subpoena and are now trying to smooth over their error.

https://twitter.com/libertysafeinc/stat ... 8nKyA&s=19

Now they're talking about "expunging" their combinations. And that still misses the whole point.

Suppose, for example, some hacker managed to copy their database ... and now had the combinations for every Liberty safe by serial number, and by name and address for everyone who sent in their warranty cards.

How much would that be worth, on the dark web?

Or suppose they just published it. Remember the Kia Boyz?

For the manufacturer to be able to keep a record of the combinations is a security risk.

Re: Liberty safe

PostPosted: Thu Sep 07, 2023 8:24 am
by 870TC
in my experience its fairly common that the safe company maintains a record of the original combination. Just change the combination after you buy a safe.
It doesn't surprise or concern me that a safe company responds to an official (may not have been- is an issue) law enforcement request for the combination.

Re: Liberty safe

PostPosted: Thu Sep 07, 2023 8:53 am
by jdege
870TC wrote:in my experience its fairly common that the safe company maintains a record of the original combination.

So it appears. And now everybody knows it.

Which means the hackers have found their next target.

If I was in the business, I'd purge all of the combinations, now, before their database is compromised.

Re: Liberty safe

PostPosted: Thu Sep 07, 2023 8:58 am
by Lumpy
Why I will never buy a robot butler: it won't really be working for you, it will be working for the robot butler company (and anyone who hacks their override command codes).

Re: Liberty safe

PostPosted: Thu Sep 07, 2023 9:45 am
by warrlac
Seems that the Charlie Kirk tweet has merit. That said, I would hesitate to purchase a Liberty Safe Co. product in the future.

That's just me...

Re: Liberty safe

PostPosted: Thu Sep 07, 2023 3:06 pm
by atomic41
They also support the enemies of liberty.

bLpJDyosVmL5.jpg

Re: Liberty safe

PostPosted: Thu Sep 07, 2023 9:25 pm
by Holland&Holland
You do realize that your safe is not all that secure any way even with out the combo right?

Re: Liberty safe

PostPosted: Thu Sep 07, 2023 10:13 pm
by warrlac
Holland&Holland wrote:You do realize that your safe is not all that secure any way even with out the combo right?



wait-what-meme-16.jpg
wait-what-meme-16.jpg (69.24 KB) Viewed 13900 times

Re: Liberty safe

PostPosted: Fri Sep 08, 2023 7:40 am
by samginko
Speculation is that, Liberty was awarded large contract to provide EMP safe lock boxes for the government.

Safe manufacturers have traditionally kept a backdoor for customer who may loose the combinations or keys. The concern here is that everything is hackable and you can reverse engineer keys if you have enough samples.

Outage is that Liberty released the information "without" court order.

I could be wrong, but there may not have been a court order issued.