Marc Weber Tobias

{{Infobox person

| name = Marc Weber Tobias

| image =

| alt =

| caption =

| birth_name = Marc Weber Tobias

| birth_date =

| birth_place = United States

| other_names =

| occupation =

| years_active =

| known_for = Insecurity engineering

| notable_works =

| alma_mater = University of Nebraska-Omaha
Creighton Law School

}}

Marc Weber Tobias is an American lawyer, writer, and researcher specializing in security systems, particularly locks and physical security mechanisms.{{Cite web|url=https://www.wired.com/2009/05/ff-keymaster-showa/|title=Remember Pearl Harbor? This Lock Breaker Does|first=WIRED|last=Staff|via=www.wired.com}}https://archive.triblive.com/business/technology/pitt-teaching-engineering-students-how-to-pick-locks/{{Cite web|url=https://www.proquest.com/docview/332275071|title=Laptop locks easy to pick - ProQuest|website=www.proquest.com}} He is known for his work on lock designs and insecurity engineering.{{Cite web|url=https://news.engineering.pitt.edu/reducing-insecurity-in-security-engineering/|title=Reducing Insecurity in Security Engineering|website=Reducing Insecurity in Security Engineering}}

Early life and education

From an early age, Tobias developed an interest in disassembling objects to understand their functionality, which led him to focus on analyzing and testing the vulnerabilities of locks and security systems.{{Cite web|url=https://pittnews.com/article/128789/news/campus/students-break-in-to-security-engineering-at-pitt/|title=Students 'break in' to security engineering at Pitt|date=March 13, 2018}}

Tobias earned a bachelor's degree from the University of Nebraska-Omaha in 1970 and a Juris Doctor from Creighton Law School in 1973.

Career

In 2010, Tobias began investigating gun safe security following the accidental shooting of Ryan Owens, a three-year-old in Vancouver, Washington. The firearm involved was stored in an inexpensive safe provided by the county sheriff's office. Tobias identified a design flaw that could allow unauthorized access, prompting him to evaluate the security of various low-cost gun safes. He found that several safes priced between $75 and $200, manufactured in China were easily opened. Methods used included gently bouncing the safe while lifting a corner with a finger and employing simple tools like paper clips, wires, and straws to breach the locks. As a result, Tobias filed a federal class action lawsuit against Stack-On Corporation in 2012, which was

ultimately settled by the manufacturer in the plaintiff favor.https://www.securitylaboratories.org/safe-design-that-use-solenoids-are-not-secure/

Tobias co-founded the Security Engineering Laboratory at the University of Pittsburgh with Tobias Bluzmanis, where students study both technical and ethical considerations in discovering security vulnerabilities. At the University of Pittsburgh's Swanson School of Engineering, he teaches methods for detecting flaws in locks and other products, a field he refers to as insecurity engineering.

Tobias has worked for many lock manufacturers in the U.S., Europe, and the Middle East. He

has also worked with federal, state, and local law enforcement agencies.{{Cite web|url=https://www.nytimes.com/wirecutter/reviews/best-door-lock/|title=The Best Door Lock|date=November 20, 2024|via=NYTimes.com}} He serves as the co-principal of Securitylaboratories.org.{{Cite web|url=https://www.nbcnews.com/id/wbna44058342|title=Hackable High-Tech Locks Pose National Security Risks|date=August 8, 2011|website=NBC News}} Tobias is also a member of UL's technical standards panel for locks, safes, and alarms, where he contributes to the development of testing and certification guidelines.

Tobias is a member of several professional associations, such as the ALOA Security Professionals Association, American Society for Industrial Security, FBI InfraGard, and the International Association for Identification (IAI). He also serves as a technical advisor to the Association of Firearm and Tool Mark Examiners (AFTE).

As an attorney, Tobias works at Investigative Law Offices, P.C.{{Cite web|url=https://www.nytimes.com/2004/09/17/nyregion/the-pen-is-mightier-than-the-lock.html|title=The Pen Is Mightier Than the Lock (Published 2004)|date=September 17, 2004}}https://www.reuters.com/article/business/children-can-break-into-gun-safes-with-paper-clips-straws-experts-warn-idUSL2E8IS03I/ His practice focuses on technical fraud investigations and providing consultancy on security issues, including lock bypass techniques and analyzing security system flaws.http://www.mys1cloud.com/cct/ebooks/9780398070793.pdf

Writing

In 1971, Tobias authored the first edition of Locks, Safes, and Security: An International Police Reference which is considered as the bible for law enforcement and crime laboratories.{{Cite web|url=https://slate.com/technology/2008/07/how-professional-locksmiths-are-getting-picked-apart-online.html|title=Pick a Lock, Any Lock|first=Farhad|last=Manjoo|date=July 23, 2008|via=Slate}}{{Cite web|url=https://web.archive.org/web/20100218074500/https://www.wired.com/wired/archive/13.02/lockbusters.html|title=Wired 13.02: The Lock Busters|date=February 18, 2010|website=Wired}} The book's second edition was published in 2000 which was reviewed by several security periodicals that included ASIS Security Management, and the Journal of Forensic Identification.{{Cite web|url=https://www.proquest.com/openview/88fc4b78749c61be8d0144c6cab006d0/1?pq-origsite=gscholar&cbl=29772|title=Locks, Safes, and Security: An International Police Reference}}{{Cite journal|url=https://go.gale.com/ps/i.do?id=GALE%7CA137355100&sid=sitemap&v=2.1&it=r&p=AONE&sw=w&userGroupName=anon~ae119ab2&aty=open-web-entry|title=Locks, Safes and Security: An International Police Reference. Government Version 5.0.|first=David D.|last=Daily|date=October 1, 2005|journal=Security Management|volume=49|issue=10|pages=116–117|via=go.gale.com}}

In 2008, Tobias co-authored Open in Thirty Seconds: Cracking One of the Most Secure Locks in America which describes methods to defeat Medeco locks.{{Cite web|url=https://www.wired.com/2008/08/medeco-locks-cr/|title=Researchers Crack Medeco High-Security Locks With Plastic Keys|first=Kim|last=Zetter|via=Wired.com}}{{Cite web|url=https://www.wired.com/2007/08/medeco-readies-assembly-line-fix-for-defcon-lock-hack/|title=Medeco Readies Assembly-Line Fix for DefCon Lock Hack|first=Kim|last=Zetter|via=www.wired.com}}

In 2024, his eighth book, Tobias on Locks and Insecurity Engineering, was published by Wiley. The book discusses the historical development of lock engineering and examines the progression of lock technologies, from traditional mechanical systems to modern digital codes. It discusses how increasing complexity in lock design can introduce new vulnerabilities. The book was reviewed by the Security Management magazine and described as a "comprehensive engineering reference."{{Cite web|url=https://www.asisonline.org/security-management-magazine/articles/2024/05/book-review-locks-insecurity-engineering/|title=Book Review: Tobias on Locks and Insecurity Engineering|website=www.asisonline.org}}

Bibliography

  • Tobias, Marc W. (1971). Locks, Safes, and Security: An International Police Reference
  • Tobias, Marc W. (1972). Pre-trial Criminal Procedure: A Survey of Constitutional Rights
  • Tobias, Marc W. (1974). Police Communications
  • Tobias, Marc W. (1975). A Field Manual of Criminal Law and Police Procedure
  • Tobias, Marc W. (2000). Locks, Safes, and Security: An International Police Reference (2nd edition)
  • Tobias, Marc W. (2008). Techno Security's Guide to Securing SCADA
  • Tobias, Marc W.; Bluzmanis, Tobias (2008). Open in Thirty Seconds: Cracking One of the Most Secure Locks in America
  • Tobias, Marc W. (2024). Tobias on Locks and Insecurity Engineering

References