Institutional padlock replacement help

[belril]

Howdy all,

I just realized the other day that the wireless routers in my residence hall are locked to brackets by means of a Master padlock. You know, the kind that can be shimmed open with a beer can. So, I'm going to be meeting with the Director of Technology Infrastructure to discuss the fact that they're securing $250 wireless access points with $5 locks that can be bypassed with less than $1 worth of technology (though I'll phrase it in a less snarky manner). My question to you all is: what's a decent double-bearing lock that has a similar form factor and can be keyed alike, with a fairly modest cost that I can suggest as a replacement?

Thanks.

P.S. Contradiction note: the library is outfitted with a full set of Primus cylinders. Go figure.

[JasonAller]

I can't offer a good suggestion for a replacement lock.

I can offer some suggestions about how to keep your well meaning gesture from backfiring and hurting you.

A University setting has a lot of different levels of interactions. There are chains of command that normalize the most common means of communication. Direct communication between student and the Director of Technology Infrastructure is not usually a common interaction. It is even less common when the communications consist of the student raising awareness of an issue and bringing a solution that will be implemented. By honestly trying to point out this deficiency you are raising awareness of two things:

• The equipment is locked with less than top of the line locks, but it is locked.
• You have been evaluating the security measures that have been put in place to protect university equipment.

The chances that they will focus on the first item over the second are not high. Be prepared for that.

Keep it short, keep it factual and non-emotional. Distance yourself a little by finding an article, any related article to reference. Don't walk in and cite only your own knowledge. As much as possible turn it into "I was reading this article, and noticed that what it was talking about was right in front of me". That will help lessen the impression that you were evaluating the security measures.

The article serves two purposes. It shifts the source of the report from a student to a presumed professional, they will take the news better this way. It also lets you hand them something that contains all the points you want to get across. It can be a printout or the url of a youtube video demonstrating shimming.

Security disclosure is difficult for anybody, it is more difficult when you have to overcome having bypassed normal chain of command and communication channels.

Good Luck!

[JK_the_CJer]

Jason's idea is a good one; unless you really have the gift of gab, I'd reference an article like he said.

As for a replacement lock, American 5200s (or similar) seem to fit the bill nicely. They use double-ball and any locksmith will be familiar with rekeying them.

[belril]

@JK: Thanks for the suggestion. Seems like it fits the bill to a T.

@Jason: Thanks for your two cents. I appreciate it.

[Evan]

Howdy all,

I just realized the other day that the wireless routers in my residence hall are locked to brackets by means of a Master padlock. You know, the kind that can be shimmed open with a beer can. So, I'm going to be meeting with the Director of Technology Infrastructure to discuss the fact that they're securing $250 wireless access points with $5 locks that can be bypassed with less than $1 worth of technology (though I'll phrase it in a less snarky manner). My question to you all is: what's a decent double-bearing lock that has a similar form factor and can be keyed alike, with a fairly modest cost that I can suggest as a replacement?

Thanks.

P.S. Contradiction note: the library is outfitted with a full set of Primus cylinders. Go figure.

Jason's reply was excellent about the unusual nature of your meeting with a division level executive in a college organization...

However, one thing you have failed to consider here is that college networks are often protected electronically to monitor for hardware failure and attempts to bypass or change device configurations... The act of unplugging the patch cord from the wireless access point or powering it down might trigger a network alarm which can be investigated... It is not like the access points will all just one day mysteriously vanish without IT becoming aware of it either through many network alarms or a sudden increase in help desk calls because of network connectivity issues...

Just something you should consider...

Those cheap (in your opinion) padlocks might only be there to prevent someone from removing the wireless access points impulsively because it is locked down and therefore more difficult to remove then if it were merely laid on the shelf without a lock...

~~ Evan