[00:00.000 --> 00:04.820]  Focuses mostly on physical side, so breaking into buildings, stealing stuff, getting back out again.
[00:05.260 --> 00:10.680]  I have used and leveraged elevators in that line of work a whole lot, and it's really funny.
[00:11.440 --> 00:11.880]  Howard?
[00:12.640 --> 00:13.340]  Hi, everybody.
[00:13.540 --> 00:13.920]  I'm Howard.
[00:14.080 --> 00:15.740]  I'm an elevator consultant, former inspector.
[00:16.000 --> 00:19.360]  I'm not a member of either of the two fantastic local unions that New York City has.
[00:19.780 --> 00:25.620]  I'm frequently found in Atlantic City and Las Vegas in the casinos, and my favorite beer is cheap beer.
[00:26.420 --> 00:26.860]  Right on.
[00:27.140 --> 00:29.420]  And are you here representing any particular employer today?
[00:29.420 --> 00:30.720]  The standard disclaimer applies.
[00:31.000 --> 00:36.340]  The views and opinions expressed herein do not represent those of my employer, and I am not here representing Payne Elevator despite the name.
[00:37.180 --> 00:37.720]  All right.
[00:38.000 --> 00:38.900]  One other caveat.
[00:40.040 --> 00:42.140]  This is serious f*cking stuff.
[00:43.760 --> 00:49.300]  So, most of you probably ride elevators every day if you're from New York City, and most of those trips happen without incident.
[00:49.640 --> 00:53.600]  It's very rare for a passenger to be injured by an elevator, but it can happen.
[00:54.220 --> 01:03.440]  Most of the injuries that occur in this field are people like me that are working either on the car top, in the hoist way, or the motor room, or the pit.
[01:04.480 --> 01:10.560]  Now, industrial accidents aside, elevators are generally safe, and we don't want to give people the impression that that's not the case.
[01:10.560 --> 01:18.060]  So, with that being said, though, if you're messing with them, there are various failure modes that can result in grievous bodily harm.
[01:18.780 --> 01:25.000]  In this case, you might notice there is a leg in the one-inch gap between the car sill and the landing sill.
[01:26.180 --> 01:28.240]  Amazingly, this leg was saved.
[01:30.600 --> 01:39.360]  And, of course, another disclaimer for everybody here, the introduction we got said it pretty adequately, but please leave the hotel pen alone.
[01:39.880 --> 01:42.860]  And they do have cameras in all the elevators, as you're probably aware, so...
[01:42.860 --> 01:44.280]  All being monitored by the NSA, yeah.
[01:46.640 --> 01:48.200]  And they're bad enough as it is.
[01:48.440 --> 01:52.020]  Yeah, just because you think you're smart enough to be like, well, I'm no dumbass, I'm not gonna die.
[01:52.440 --> 01:54.740]  I'll just fool around a little bit, it'll be okay.
[01:55.140 --> 01:57.140]  Right, what's wrong with a little harmless fun, right?
[01:58.980 --> 02:00.480]  We should have volume on the laptop.
[02:06.340 --> 02:08.200]  Do we have volume on that laptop, soundboard?
[02:09.400 --> 02:10.620]  So, like, that's funny, right?
[02:10.700 --> 02:12.420]  That's, you know, the helicopter trick.
[02:12.620 --> 02:14.240]  The escalator helicopter on YouTube.
[02:14.880 --> 02:16.500]  So, you know, one kid did it right.
[02:16.860 --> 02:17.560]  Somebody else?
[02:17.740 --> 02:18.400]  Maybe not so much.
[02:18.680 --> 02:19.500]  Hey, it looks fun, right?
[02:24.370 --> 02:28.370]  It's all fun and games until you wind up with a felony criminal mischief charge.
[02:31.010 --> 02:34.490]  It has caused thousands of dollars in damage.
[02:35.190 --> 02:40.730]  Yeah, so just because you think this is funny, and you saw it, and you learned a little bit, you're not a f*cking professional.
[02:41.130 --> 02:41.810]  We are.
[02:41.910 --> 02:42.630]  Well, he is.
[02:42.890 --> 02:44.510]  I stayed at Holiday Inn Express last night.
[02:46.490 --> 02:47.570]  This is his jam.
[02:48.090 --> 02:49.950]  He's trained for this, what you're about to see.
[02:50.290 --> 02:56.190]  Some of this is stuff that looks fun, but you really, even if you've heard stories of people doing it, you probably shouldn't.
[02:56.590 --> 02:57.390]  Trust us, please.
[02:58.890 --> 03:07.230]  So, a little introduction to elevator tech, because a lot of you might be kind of the train spotter type who's very interested in how certain systems are and how they work.
[03:07.230 --> 03:16.790]  You might not be aware that elevators, even though we ride them all the time, there's a lot of variety on the back end, but you can fundamentally think of them as coming in two flavors.
[03:17.370 --> 03:25.150]  Elevators are either overhead traction, where they're hoisted by cables, the industry would call them ropes, or they are driven from below by a hydraulic piston.
[03:25.410 --> 03:31.550]  So, you have traction elevators and hydro elevators, overhead traction, or by means of something in the pit pushing up.
[03:32.710 --> 03:39.690]  Now, what gets interesting about this, however, is people think that the elevator is really, it's a fixed machine.
[03:39.910 --> 03:46.690]  You're in this room, and it must be hoisted on all sides, and it's all affixed, and okay, and this is driving up, and it's really anchored in there.
[03:47.470 --> 03:51.890]  This is what is actually just moving the cab positionally.
[03:52.010 --> 03:53.050]  This is actually not moving the cab.
[03:53.150 --> 03:55.650]  This is what is guiding the cab in the hoistway.
[03:56.190 --> 04:00.450]  Elevator cabs, again, look at the slides that are going to be on the wiki for more details.
[04:00.450 --> 04:04.830]  The elevator cab is just guided gently by two rails.
[04:05.190 --> 04:09.870]  Rails and rollers on the sides are guiding this cab up and down the hoistway.
[04:10.070 --> 04:11.850]  It's not anchored in all four corners.
[04:11.870 --> 04:15.590]  The actual car sling itself is really minor.
[04:15.850 --> 04:17.790]  It's not a complicated machine.
[04:18.110 --> 04:26.850]  You're interacting with something that is just drifting up and down very lightly, and in this hoistway, it's simply stabilized by some rails.
[04:26.850 --> 04:33.070]  Where you usually interact with something that Howard is going to talk about, and yeah, okay, there you go.
[04:33.810 --> 04:34.730]  So this is my elevator.
[04:35.990 --> 04:36.750]  Brought it from home.
[04:39.870 --> 04:42.710]  So what you're looking at here are what we'd call fixtures.
[04:43.130 --> 04:50.410]  On the left side of the slide, this is the primary means of a user interacting and giving instructions as far as what destination they want to go to.
[04:50.410 --> 04:53.130]  That's called the car operating panel or sometimes the COP.
[04:53.610 --> 04:58.030]  And when you push that button for floor one, two or three, you're registering what's called a cab call.
[04:58.730 --> 05:03.150]  That's as opposed to when you're in the hallway, you push up or down, and that's called a hall call.
[05:03.850 --> 05:12.310]  There's also position indicators both traveling with the car that tell you what floor you're at, what direction it's going, and in the hallway to let you know you're about to get on an elevator that's going in the wrong direction.
[05:12.310 --> 05:13.570]  Please don't do that.
[05:14.790 --> 05:22.570]  So again, when the elevator is driving you up or down, based on the instructions you've given it, that's happening from the motor room itself.
[05:22.790 --> 05:26.430]  The elevator machine that you're riding in, the car, doesn't have its own power.
[05:26.530 --> 05:28.730]  That's being provided from the pit or the penthouse.
[05:29.350 --> 05:32.410]  Overhead traction elevators, you've got a nice motor room all the way on the top.
[05:32.510 --> 05:33.290]  It's called the penthouse.
[05:33.390 --> 05:36.070]  Here we have beautiful, you know, gearless traction machines.
[05:36.150 --> 05:36.590]  Who makes these?
[05:36.870 --> 05:38.490]  I believe that was Westinghouse.
[05:38.670 --> 05:39.950]  Yeah, beautiful Westinghouse setup.
[05:39.950 --> 05:44.790]  If you have a hydro system, if you're being driven down from the pit, motor room is not nearly as sexy.
[05:45.030 --> 05:47.410]  Motor room and machine room, interchangeable terms, by the way.
[05:47.970 --> 05:52.790]  Hydro machine room, I mean, you're just, you know, you're looking at a hydro tank and a pump system and a little controller on the wall.
[05:53.410 --> 05:58.830]  Because space is really at a premium in so many buildings nowadays, they have made machine rooms smaller and smaller.
[05:58.950 --> 06:01.650]  They even do make something called like a machine roomless elevator.
[06:02.050 --> 06:02.570]  What is it?
[06:02.650 --> 06:06.270]  Well, it's a hydraulic elevator that has the pump system in the pit.
[06:06.510 --> 06:09.430]  Also known as, why does my hoist way smell like burning hydro fluid?
[06:12.630 --> 06:17.130]  So, the controller in the motor room is basically the brain of the entire system.
[06:17.490 --> 06:28.550]  All of the fixtures and sensors that are part of the elevator system and even the motor, of course, are tied back to this controller, which essentially is taking all of these inputs and making decisions and driving these different outputs.
[06:28.550 --> 06:35.610]  like the motor that actually provides the hoisting, the motor for the door that's opening and closing, pretty much everything that the elevator is doing.
[06:36.130 --> 06:36.290]  Yeah.
[06:36.450 --> 06:39.130]  This is what is controlling your direction of travel.
[06:39.270 --> 06:41.130]  This is what is choosing how to operate.
[06:41.310 --> 06:47.730]  This is what is deciding whether your call is a valid call or not, or whether you're going to bypass some security or not.
[06:48.210 --> 06:50.610]  And they're not all... I mean, this is kind of a newer setup.
[06:50.790 --> 06:51.930]  They can be pretty old, right?
[06:52.050 --> 06:53.570]  What are these people about to see on the next slide?
[06:53.690 --> 06:53.870]  Sure.
[06:53.990 --> 06:55.590]  This is going to trip out some of the old heads in the room.
[06:56.770 --> 06:56.850]  Yeah.
[06:57.010 --> 06:57.250]  Slide.
[06:58.070 --> 06:59.770]  This is a number five crossbar.
[07:00.690 --> 07:01.430]  No, I'm just kidding.
[07:01.530 --> 07:02.630]  This is actually an elevator controller.
[07:03.190 --> 07:04.430]  This is made by Otis.
[07:04.590 --> 07:06.270]  I believe it's a UAL controller.
[07:07.130 --> 07:15.310]  Basically, what you're looking at is an electromechanical decision-making machine that's just using a series of relays to decide where it wants to go and what it wants to do.
[07:15.490 --> 07:19.230]  And for decades, this is how all elevators result.
[07:20.110 --> 07:21.990]  This is a device called the selector.
[07:22.250 --> 07:32.270]  What you're actually seeing is that as the elevator is moving up and down, it's actually spinning those plates and it's making contact with various little copper contacts that are telling the elevator controller where the elevator is.
[07:32.790 --> 07:35.170]  Yeah, and this is not just something in a history museum.
[07:35.310 --> 07:38.850]  Like, there are still installs to this day that use RelayLogic.
[07:38.990 --> 07:41.670]  This particular controller was still in use in 2014.
[07:42.210 --> 07:42.690]  In where?
[07:42.890 --> 07:43.110]  Manhattan?
[07:43.290 --> 07:43.490]  In Manhattan.
[07:44.510 --> 07:53.810]  If you've ever, like, maybe done some urban exploring, how many of you have ever been up on maybe a high level of a building and you've loudly heard, maybe through a wall, relays clacking on and off?
[07:54.250 --> 07:56.190]  You're not hearing a traffic light box up there.
[07:56.450 --> 07:58.450]  You're hearing the elevator controller in that building.
[07:59.470 --> 08:01.890]  Now, some other interesting inputs that the controller gets.
[08:02.130 --> 08:06.830]  So, earlier you saw a selector that was spinning around mechanically and making contact.
[08:07.030 --> 08:10.190]  There are obviously solid-state versions of that as well.
[08:10.510 --> 08:15.210]  In this case, what you're seeing is there is a little silver doodad that's mounted on top of the car.
[08:15.410 --> 08:18.870]  And it is fixed there and it travels up and down as the car travels up and down.
[08:18.870 --> 08:23.970]  Now, there's also that black tape that's behind it that runs from the top of the hoistway to the bottom of the hoistway.
[08:24.550 --> 08:26.890]  And on that tape, there will be magnets mounted.
[08:27.110 --> 08:31.770]  So, there will be a solid-state magnetic sensor that's actually detecting when it's in line with those magnets.
[08:31.770 --> 08:39.370]  That allows it to send a message to the elevator controller saying, I'm level with the floor or I'm approaching the floor, things of that nature.
[08:39.810 --> 08:41.410]  So, if it ain't broke, fix it.
[08:41.530 --> 08:42.770]  What is the industry considering?
[08:42.990 --> 08:43.410]  Of course.
[08:43.630 --> 08:46.730]  Now, there are apparently QR code-based selector systems.
[08:47.870 --> 08:50.970]  Because a hoistway is so nice and clean, they would never get crudded up.
[08:51.130 --> 08:51.510]  Exactly.
[08:52.030 --> 08:52.130]  Yeah.
[08:54.250 --> 08:58.090]  So, there are also more primitive forms of this that still exist on modern systems.
[08:58.310 --> 08:59.870]  What you're looking at here are called limit switches.
[09:00.250 --> 09:04.110]  These generally exist only at the top and the bottom of the hoistway in modern elevators.
[09:04.110 --> 09:06.110]  And if you notice that there are actually four of them.
[09:06.670 --> 09:09.050]  The bottom two are called slowdowns.
[09:09.330 --> 09:11.310]  The third one up is the normal limit.
[09:11.470 --> 09:12.990]  And the top one is the final limit.
[09:13.330 --> 09:20.350]  What happens is, as this elevator is approaching the top floor, it will trip the first slowdown, it will trip the second slowdown, and then it will trip the normal limit.
[09:21.790 --> 09:26.770]  Obviously, as you might have guessed, that's telling the elevator controller, hey, it's time to slow down, you're approaching the end of your run.
[09:26.910 --> 09:30.870]  And finally, when you hit the normal limit, that's where you should stop for a nice, safe level landing.
[09:31.270 --> 09:33.450]  So, you might be wondering, well, why is there a final limit?
[09:34.410 --> 09:38.550]  Well... If you shoot past that normal limit, because something goes wrong... Right.
[09:38.690 --> 09:39.410]  Elevator is unhappy.
[09:39.630 --> 09:39.970]  Exactly.
[09:40.350 --> 09:47.270]  So that's a... as the name implies, again, it's the final switch that is there to indicate there is absolutely nowhere else for this elevator to run.
[09:47.830 --> 09:49.290]  Yeah, you're gonna crash in the ceiling.
[09:49.470 --> 09:50.610]  Jam on brakes now.
[09:51.170 --> 09:59.730]  So another thing to keep in mind also is that if you ever happen to find out this happens in your building, if the elevator is on the finals, you pretty much need an elevator mechanic to come reset it.
[10:00.150 --> 10:02.110]  Yeah, we witnessed one in a mall somewhere.
[10:02.310 --> 10:04.510]  And like, even I had hadn't fully learned all this yet.
[10:04.650 --> 10:05.270]  We're walking around.
[10:05.830 --> 10:08.170]  And Howard's like, oh, what do you think happened here?
[10:08.270 --> 10:10.230]  And he's like, on his radio, listening to the mall security.
[10:10.830 --> 10:11.590]  They're like, broken elevator.
[10:11.730 --> 10:13.610]  I'm like, wow, that thing, it's not platformed right.
[10:13.670 --> 10:14.910]  It's like, it's way too high.
[10:15.030 --> 10:16.270]  He's like, yeah, it's sitting on its finals.
[10:16.510 --> 10:18.150]  They have to send out a proper tech.
[10:18.370 --> 10:20.210]  You'll see later in the slides who they sent out.
[10:20.310 --> 10:21.330]  It was not a proper tech.
[10:22.870 --> 10:25.290]  But this is all part of the elevator safety system.
[10:25.410 --> 10:27.790]  I mean, in general, we love allaying fears.
[10:28.050 --> 10:31.590]  A lot of people, you know, just, there's this, oh, man, I don't know about elevators.
[10:31.690 --> 10:32.410]  Are they kind of dodgy?
[10:32.490 --> 10:32.910]  I'm scared.
[10:33.430 --> 10:35.290]  You should never really be afraid in an elevator.
[10:35.470 --> 10:38.350]  I mean, I guess if you're super claustrophobic, yes, it's a small box.
[10:38.550 --> 10:41.550]  But mechanically, elevators are really safe machines.
[10:41.830 --> 10:50.810]  Due mostly to pioneering advances here in America, go, you know, America, our engineers and all of our systems, we've, we've evolved the elevator industry a lot.
[10:50.970 --> 10:54.010]  And safety mechanisms work really robustly and reliably.
[10:54.330 --> 10:58.010]  Your classic governor setup, you have a Hollister Whitney governor here on the left.
[10:58.010 --> 11:11.350]  The idea of a separate set of ropes that are traveling with the car at all times, just monitoring the speed, monitoring how it's going, and they will engage braking systems if the elevator is traveling incorrectly.
[11:11.690 --> 11:18.670]  The Hollister Whitney governor you're seeing there can fire and trip and actually jam itself locked if the elevator starts speeding down.
[11:18.910 --> 11:19.990]  It can trip electrically.
[11:20.090 --> 11:24.870]  It even has a mechanical fly ball type system where the centrifugal force, boom, it'll jam mechanically.
[11:24.870 --> 11:26.630]  What do those roping systems do?
[11:26.790 --> 11:27.710]  You'll see in the next slide.
[11:27.930 --> 11:31.010]  Now there's another governor you can talk about, also HW on the side, right?
[11:31.290 --> 11:34.410]  Yeah, the device on the right is a newer form of safety.
[11:34.750 --> 11:36.950]  The governor prevents a free fall.
[11:37.330 --> 11:40.070]  Most people have a fear that the elevator is just going to drop, right?
[11:40.370 --> 11:49.370]  But actually, the fear should be that the elevator falls up, because what's happening is typically the counterweight that the elevator is attached to weighs more than the cab and its occupants.
[11:49.370 --> 11:55.590]  So if, for some reason, all hell broke loose and the elevator was moving uncontrollably, chances are it was going to move up, not down.
[11:55.850 --> 11:58.790]  And actually, there was a case in Chile, I think it was.
[11:59.030 --> 12:00.090]  There was a viral video.
[12:00.090 --> 12:00.450]  How many people saw that on YouTube?
[12:00.870 --> 12:03.690]  The elevator just rushes up out of control and it crashes into the overhead.
[12:04.330 --> 12:05.330]  That's exactly what happened.
[12:05.550 --> 12:08.490]  So the device on the right is called a rope gripper and it's intended to prevent that.
[12:09.030 --> 12:09.190]  Yeah.
[12:09.690 --> 12:17.950]  So elevator safety systems have been growing and evolving ever since Elijah Graves' Otis created the first rail gripper mechanism.
[12:17.950 --> 12:31.730]  And you're seeing this demonstrated here in this non-American, very British TV show, which you can tell not just because of the gentleman's teeth, but because of the fact that he is being raised up a not insubstantial amount on this elevator.
[12:31.890 --> 12:35.390]  And then they just kind of saunter over a workman to chop the line.
[12:35.810 --> 12:43.230]  But because of the positive force on the rail gripper, you're going to see the same demo that Elijah Otis used to do at various fairs.
[12:43.230 --> 12:46.110]  And they say, all right, this is going to work the right way, isn't it?
[12:46.250 --> 12:47.150]  Okay, I hope so.
[12:47.450 --> 12:49.450]  But sure enough, clunk, click.
[12:49.850 --> 12:51.270]  And then you just don't fall.
[12:51.470 --> 12:56.950]  And that's what Elijah Graves' Otis would do and he would famously shout down to the crowd, all safe fellows, you know.
[12:57.130 --> 13:04.270]  And this kind of idea, the idea of positive lock mechanisms, interlocks to prevent free fall, are how most elevators are built.
[13:04.630 --> 13:06.590]  We talked about the governor roping system.
[13:06.590 --> 13:08.750]  This is a side view of a hoist way.
[13:08.930 --> 13:10.650]  You can see the rail and the roller on the side.
[13:11.570 --> 13:14.170]  This roping setup, that's the governor rope.
[13:14.430 --> 13:16.290]  And again, we already told you, they're not ropes.
[13:16.450 --> 13:18.070]  They're not running on like hemp fiber.
[13:18.310 --> 13:19.310]  These are cables.
[13:19.610 --> 13:20.050]  They used to.
[13:20.330 --> 13:21.050]  They used to, yeah.
[13:21.210 --> 13:23.590]  Hemp is strong, man.
[13:24.630 --> 13:26.530]  You've had the wool pulled over your eyes.
[13:29.660 --> 13:32.240]  So yeah, this is the governor roping setup.
[13:32.460 --> 13:34.440]  And imagine that's traveling with the car.
[13:34.560 --> 13:36.720]  You can see the little swaging tool that's locked up there.
[13:36.720 --> 13:43.960]  Now, if the governor trips and jams shut, that rope will yank and actually pull on the safety mechanism.
[13:44.200 --> 13:48.200]  And they're all different styles of safety mechanism, but they're all doing the same thing.
[13:48.360 --> 13:51.740]  They're just, they're firing, they're jamming, you have wind-up safeties.
[13:52.060 --> 13:55.980]  There's a number of them, but they're all, their whole deal is, stop this car from plummeting.
[13:57.160 --> 14:03.540]  And if all else fails, you should still understand that these, there are additional mechanisms down in the pit.
[14:03.540 --> 14:08.240]  Whether you're talking about hydros or overheads, these are all pictures of pit buffers.
[14:08.800 --> 14:11.900]  And if you've ever seen, because maybe you were exploring somewhere, you shouldn't.
[14:12.220 --> 14:16.340]  The pit of an elevator system, you may have seen the spring buffer or the oil buffers down there.
[14:16.340 --> 14:23.480]  Some people just assume, they're like, oh, so when the elevator has done its travel, it's probably sitting on that, waiting at the bottom of the hoist weight.
[14:23.560 --> 14:23.720]  No.
[14:23.980 --> 14:28.320]  The elevator's never supposed to touch this, except during, you know, special tests that he can run.
[14:28.960 --> 14:33.940]  This is there just to absorb the full weight of the elevator at full rated travel speed.
[14:34.080 --> 14:36.200]  And they're completely going to survive that.
[14:36.320 --> 14:38.440]  You're going to see maybe some footage of that later, too.
[14:38.440 --> 14:43.000]  If you're in an elevator when that happens, you may be grievously injured, but you probably won't die.
[14:43.620 --> 14:43.660]  Yeah.
[14:44.200 --> 14:45.500]  Elevators want to keep you alive.
[14:45.800 --> 14:48.040]  And elevators do their job really well.
[14:48.540 --> 14:52.240]  If an elevator's running on automatic mode, you're going to be okay, right?
[14:52.760 --> 14:53.440]  Generally speaking.
[14:54.060 --> 14:54.160]  Yeah.
[14:55.020 --> 14:58.140]  What's the one type of thing you should not do when the elevator's on automatic mode?
[14:59.020 --> 15:00.200]  Mess with it in general.
[15:01.560 --> 15:03.620]  You shouldn't ride the car top.
[15:05.800 --> 15:06.240]  Yeah.
[15:06.260 --> 15:07.020]  I've done it before.
[15:07.320 --> 15:08.980]  This is actual surveillance footage.
[15:09.240 --> 15:09.440]  This is it.
[15:09.700 --> 15:10.160]  It's good fun.
[15:10.180 --> 15:11.480]  Genuine documentary footage.
[15:13.440 --> 15:14.100]  Come on.
[15:17.060 --> 15:18.020]  Turn that light on.
[15:26.590 --> 15:27.960]  Oh, this is brilliant.
[15:28.180 --> 15:28.960]  I can't believe it.
[15:29.710 --> 15:30.020]  Woo!
[15:31.970 --> 15:34.180]  Again, they're not in control of this all of it.
[15:34.400 --> 15:37.040]  They're just riding it, but someone else is driving it on automatic.
[15:47.370 --> 15:48.730]  Yeah, like...
[15:50.790 --> 15:52.070]  Don't be that guy.
[15:55.300 --> 15:57.840]  In all seriousness, this has happened.
[15:58.240 --> 16:00.100]  It's not just TV drama.
[16:00.460 --> 16:05.380]  There are actual cases where people working on the car tops have been fatally injured that way.
[16:05.720 --> 16:05.880]  Yeah.
[16:06.420 --> 16:09.020]  So, I mean, you guys are smart, right?
[16:09.620 --> 16:10.360]  You understand.
[16:10.440 --> 16:11.620]  This is fun stuff.
[16:11.820 --> 16:12.600]  It can be dangerous.
[16:12.920 --> 16:14.640]  Don't be like derp faces, right?
[16:15.960 --> 16:18.520]  So, we talked about automatic mode is very safe.
[16:18.760 --> 16:21.460]  Who is interested in finding out stuff that's not automatic mode?
[16:23.020 --> 16:25.840]  I think we have some people in the audience that would like to see that.
[16:26.040 --> 16:26.420]  Yeah, we have some hands.
[16:26.420 --> 16:28.180]  So, there's a lot of other special modes.
[16:28.800 --> 16:30.680]  Many of them apply to the work that I do.
[16:31.860 --> 16:33.100]  Independent service mode.
[16:33.100 --> 16:33.860]  Independent service mode.
[16:33.860 --> 16:40.000]  Far and away, one of the most useful things you can do with an elevator if you want to run it in a way that's not perhaps the standard.
[16:40.660 --> 16:45.620]  Independent service mode is something that will take the elevator out of the bank of normal operation.
[16:45.980 --> 16:48.840]  It is your elevator for as long as you're in the cab.
[16:48.840 --> 16:57.880]  If I flip an elevator to independent service mode and let's say I'm in a data center and I can't get up to like floors 8, 9, and 10 because I don't have a badge or whatever reason.
[16:58.280 --> 17:00.900]  Independent service mode gets me up to that floor usually.
[17:01.220 --> 17:01.500]  Usually.
[17:01.500 --> 17:01.920]  Yes.
[17:02.540 --> 17:05.540]  Let's say, however, that I'm not trying to get to any floor.
[17:05.540 --> 17:06.600]  Like all the floors are accessible.
[17:06.600 --> 17:08.520]  I just don't want to be found by security.
[17:09.040 --> 17:15.040]  So, as Babak and I can tell you stories, there's been plenty of times we've just like hid in disused offices.
[17:15.200 --> 17:16.780]  I've hid in a janitor's closet.
[17:17.160 --> 17:20.200]  The nicest place I've ever hid was in a f*cking elevator.
[17:20.660 --> 17:25.560]  Because if you flip independent service mode, not only do you drive it wherever you want, but it ignores all the hall calls.
[17:25.980 --> 17:32.040]  So, if you're in a big building with like 10 elevators, no one's going to notice, hey, how come elevator 7 hasn't been responding all day?
[17:32.160 --> 17:34.080]  No, they're just getting on whatever one shows up.
[17:34.220 --> 17:42.120]  I sat in an elevator for four hours with a nice little outlet and light and I could plug my phone in and just hang out till the office workday was done.
[17:42.340 --> 17:44.480]  Then I drove it back down to the lobby and let him in.
[17:47.040 --> 17:47.840]  Yeah, like...
[17:52.900 --> 17:54.960]  So, sometimes those are key switch operated.
[17:55.140 --> 17:56.820]  Sometimes those are toggle switch operated.
[17:56.960 --> 17:59.320]  There's a lot of things we'll tell you about little hidden panels.
[17:59.660 --> 18:04.860]  But independent mode far and away is what most people go for right away when they're trying to do funny things.
[18:05.140 --> 18:06.840]  That's not at all the only mode, right?
[18:07.380 --> 18:09.060]  Now, independent...
[18:09.520 --> 18:10.440]  Sorry, mic check.
[18:10.680 --> 18:11.140]  Check, check.
[18:11.440 --> 18:12.640]  Oh, this one.
[18:12.780 --> 18:12.980]  Sure.
[18:13.700 --> 18:16.340]  So, independent mode should not be confused with attendant mode.
[18:16.740 --> 18:19.860]  Attendant operation is very similar to independent, but they are in fact different.
[18:20.280 --> 18:27.800]  It harkens back to the days when there was actually a dude or a woman in the elevator that would run the cab and pick up passengers and manually control the elevator.
[18:27.800 --> 18:32.620]  And what they would actually have is usually a crank like this in a really old elevator.
[18:32.800 --> 18:35.600]  But in a more contemporary elevator, you might see something like this.
[18:36.020 --> 18:38.700]  So, what this actually is, it's behind a lock panel.
[18:39.240 --> 18:41.800]  If the attendant has the key, they put it on attendant service.
[18:41.980 --> 18:48.800]  And these controls allow the attendant to make decisions about how to proceed picking up the calls.
[18:48.800 --> 19:00.420]  So, for example, if it's the hotel pen and there was an attendant and a ton of people get on it one floor with a bunch of bags and the elevator is full, they might say, you know, we should reverse direction and just bring these people down to the lobby because it's full.
[19:00.600 --> 19:02.320]  There's no one else who's going to get in here, right?
[19:02.480 --> 19:04.920]  Or maybe there's a VIP or an emergency or something like that.
[19:05.000 --> 19:08.660]  So, the up and down buttons allow the attendant to say, it's time to reverse direction.
[19:09.020 --> 19:15.360]  The bypass button, sometimes the non-stop button, what that actually does is allows the attendant to make the decision to skip the hall of calls.
[19:15.360 --> 19:16.880]  It doesn't clear the hall of calls.
[19:17.000 --> 19:17.820]  It doesn't ignore them.
[19:17.940 --> 19:22.920]  It just temporarily skips them for until the duration of this particular ride is over.
[19:23.100 --> 19:27.140]  And then it'll continue to collect those calls as it resumes normal operation.
[19:27.620 --> 19:27.900]  Yeah.
[19:28.120 --> 19:29.540]  But it's expensive to have an attendant.
[19:29.700 --> 19:31.500]  It's expensive to, like, hire an attendant.
[19:31.700 --> 19:36.760]  And if you have various priority needs for your elevators, what if you want... here, you can use that one.
[19:37.080 --> 19:44.660]  What if you want to not have an attendant standing in the elevator anymore, but you still want to, let's say, prioritize some big shot or big wig?
[19:44.660 --> 19:47.220]  Well, tell them a little bit about executive mode.
[19:47.460 --> 19:47.720]  Sure.
[19:48.380 --> 20:00.980]  So, executive and express priority service, as the name implies, are various priority modes that allow an authorized person to register a call that the elevator controller will give priority to over normal plebeians.
[20:01.560 --> 20:08.180]  Basically, what it does is, if a person has a key, they might have a special key switch at the hall station where they'd register an up or down call.
[20:08.180 --> 20:14.420]  And when they insert the key and turn it, it tells the elevator controller, this person here is more important than any other call that you have.
[20:14.920 --> 20:16.220]  Service it as fast as possible.
[20:16.400 --> 20:23.580]  The basic difference between express service and executive service is that one will reverse direction of the cab and dump people out.
[20:23.720 --> 20:25.960]  The other one will just continue in the same direction.
[20:26.320 --> 20:26.740]  Now...
[20:26.740 --> 20:27.600]  He says, dump people out.
[20:27.720 --> 20:28.520]  He means that.
[20:28.700 --> 20:28.820]  Yeah.
[20:29.280 --> 20:34.600]  Otis, in particular, has a voice announce system that will actually say, this car is needed for some other purpose.
[20:34.860 --> 20:36.080]  Please exit at the next floor.
[20:36.360 --> 20:36.500]  Yeah.
[20:36.840 --> 20:37.160]  So, yeah.
[20:37.240 --> 20:37.960]  You are not important.
[20:37.960 --> 20:38.720]  You can leave.
[20:41.500 --> 20:42.460]  How about one...
[20:42.460 --> 20:48.480]  This is one that some people might find obscure, but there's actually a lot of elevators in the greater New York region that run on Sabbath mode.
[20:51.690 --> 20:58.190]  If you haven't actually been in one, you might have seen, like, religious where they talk about the Shabbat elevator, the Sabbath elevator.
[20:58.450 --> 21:10.250]  If you're not familiar with certain Orthodox religious practices where people aren't allowed to interact with any buttons or switches, this is a mode that was created, kind of just made up by elevator controllers and elevator programmers.
[21:10.550 --> 21:14.670]  And they said, well, maybe we can give some people the ability to not, you know, walk all the way up the stairs.
[21:15.070 --> 21:18.150]  Tell them what actually happens on the Sabbath in some of these elevators.
[21:18.150 --> 21:24.170]  In most cases, the elevator will go to the lowest landing, pick up its passengers, presumably it's the lobby.
[21:24.550 --> 21:26.630]  It will then proceed to the top floor.
[21:26.810 --> 21:27.610]  All the way up.
[21:27.850 --> 21:33.330]  And then stop at every single floor on the way down without any interaction from the user.
[21:33.510 --> 21:33.690]  Yeah.
[21:33.910 --> 21:36.030]  Giving you the opportunity to get off on your floor.
[21:36.850 --> 21:40.830]  And in a really high building, sometimes they'll skip, you know, every other floor.
[21:40.950 --> 21:41.970]  But that's the idea.
[21:42.090 --> 21:44.630]  That's the idea that, oh my gosh, I don't have to push any buttons.
[21:44.630 --> 21:46.030]  I can still get where I'm going.
[21:46.030 --> 21:49.170]  It's an interesting kind of end run around the man upstairs.
[21:53.010 --> 21:57.210]  Let's talk about a feature that is not also very common, but damn it should be.
[21:57.510 --> 22:00.790]  And you would be wishing for it maybe if you were at a conference like this one.
[22:01.150 --> 22:01.550]  Ventilation.
[22:07.270 --> 22:09.330]  He said ventilation is what Marpat said.
[22:09.510 --> 22:09.530]  Yeah.
[22:09.930 --> 22:12.150]  Ask us later about the air conditioners for elevators.
[22:12.390 --> 22:12.490]  Yeah.
[22:12.590 --> 22:13.550]  Or even just the story.
[22:13.650 --> 22:15.790]  You'll tell stories in the Q&A about the fan during inspections.
[22:16.210 --> 22:16.410]  Oh, sure.
[22:16.410 --> 22:16.630]  Yeah.
[22:16.890 --> 22:19.050]  But no, what we're talking about is load bypass.
[22:19.710 --> 22:20.930]  Oh my freaking God.
[22:21.210 --> 22:22.870]  Elevators have load sensors.
[22:23.210 --> 22:26.470]  If you've ever been in an elevator that was like angry, it was beeping at you.
[22:26.590 --> 22:27.950]  Oh my God, this car is overweight.
[22:28.210 --> 22:29.650]  How many people have ever had that happen?
[22:29.930 --> 22:31.390]  Because you're all fat hackers like me, right?
[22:31.930 --> 22:32.330]  Yeah.
[22:33.610 --> 22:39.310]  No, I mean elevators, they know how if they're too heavy, they can program additional features in.
[22:39.310 --> 22:43.290]  So the elevator can say, hmm, I've picked up a few, you know, call calls here.
[22:43.430 --> 22:44.330]  I've platformed.
[22:44.450 --> 22:45.950]  I am at capacity.
[22:46.210 --> 22:53.010]  It is stupid if I keep stopping on every floor on the way down opening my doors with people just staring at a full car.
[22:53.190 --> 22:55.050]  And it'll just prioritize straight down.
[22:55.310 --> 22:58.790]  Why the hell this is not enabled more often boggles my mind.
[22:58.790 --> 23:02.950]  If you're a building owner, hire an elevator service tech who can optimize your shit.
[23:03.190 --> 23:05.870]  And this will get people moving around the building faster.
[23:06.430 --> 23:07.770]  I think it comes down to money.
[23:13.550 --> 23:15.330]  You can also enable this while you're at it.
[23:16.370 --> 23:18.930]  Anti nuisance mode or no passenger detection.
[23:19.570 --> 23:34.230]  If somebody presses too many buttons in rapid succession, or if an elevator platforms at a number of floors answering calls that have been put in, and the safety edge detects nobody getting on or off, elevators can be programmed to say, well, somebody was being a jack wagon,
[23:34.410 --> 23:38.110]  and I should just dump all these calls and like get the hell where I was going.
[23:38.110 --> 23:41.770]  We accidentally found this in, I guess this was a shocker cot.
[23:42.090 --> 23:42.370]  Keep going.
[23:42.530 --> 23:43.010]  We were kind of drunk.
[23:43.510 --> 23:44.730]  And we go, oh, wow, look at that.
[23:44.790 --> 23:45.370]  That's kind of funny.
[23:45.770 --> 23:48.490]  And we just kept slamming buttons seeing how many we could press.
[23:48.630 --> 23:53.650]  And you'll notice if you press buttons too quickly, they'll start to decide just to dump out all the calls.
[23:53.650 --> 23:55.170]  That's anti nuisance mode.
[23:55.190 --> 23:55.870]  It's like they know we're here.
[23:56.550 --> 23:57.890]  It's like the hacker counter.
[23:59.930 --> 24:06.730]  But most of all, I mean, most optimization or extra, you know, efficiency, mostly all you're seeing is people talking about peak performance.
[24:07.550 --> 24:11.290]  Occasionally, especially in office buildings and hotels, you'll have peak demand.
[24:11.310 --> 24:14.730]  And they know what times of day people are trying to get up or trying to get down.
[24:15.570 --> 24:15.930]  Right.
[24:16.070 --> 24:19.790]  So at a hotel environment, obviously more people are going to be checking in in the evening and checking out in the morning.
[24:19.790 --> 24:23.770]  And in an office environment, they'll be arriving in the morning and leaving in the evening.
[24:24.050 --> 24:34.690]  So in terms of optimization, if you were to hire somebody like me to come and try and optimize your elevators, what we would generally do is model your building in highly sophisticated software.
[24:42.110 --> 24:43.730]  Now, you think I'm kidding.
[24:43.970 --> 24:49.930]  But actually, it turns out that Maxis did not really design this from the ground up.
[24:50.050 --> 24:55.830]  They actually found some guy in Japan that was working on a serious building simulator to model elevators.
[24:56.050 --> 24:57.890]  And that was the evolution of SimTower.
[24:59.110 --> 24:59.470]  Yeah.
[24:59.810 --> 25:01.810]  So in a nutshell, it's actually frighteningly accurate.
[25:01.970 --> 25:03.650]  If you want to talk about SimTower, I'd love to.
[25:03.950 --> 25:04.050]  Yeah.
[25:04.150 --> 25:04.490]  You can like...
[25:04.490 --> 25:06.090]  What did you tell me about the motor room in SimTower?
[25:06.190 --> 25:06.410]  Oh, yeah.
[25:06.490 --> 25:10.090]  If you double click the motor room, it gives you all kinds of programming options for the elevator.
[25:10.210 --> 25:14.090]  You can program it for different times of day and peak operation and all kinds of things.
[25:14.930 --> 25:15.090]  Yeah.
[25:16.650 --> 25:20.590]  Something that doesn't apply here as much as maybe our folk who are out in the West Coast.
[25:20.590 --> 25:20.910]  Sure.
[25:21.030 --> 25:22.250]  Well, actually, it does apply here, believe it or not.
[25:22.250 --> 25:22.270]  It can.
[25:22.390 --> 25:22.430]  Yeah.
[25:22.710 --> 25:23.870]  We're in what, Region 1 here, I guess?
[25:23.870 --> 25:24.170]  Zone 2.
[25:24.250 --> 25:24.530]  Zone 2.
[25:24.630 --> 25:31.050]  So basically, by code, elevators will be grouped into three different seismic categories depending on where they're located.
[25:31.630 --> 25:36.270]  So there's, for example, seismically stable regions, and then there's Southern California.
[25:37.230 --> 25:50.410]  So when you're in a seismically active region, because the elevator is obviously a moving object and Newtonian motion and all that fun stuff, if the building starts to sway, equal and opposite reaction, the elevator is going to start to move too.
[25:51.050 --> 25:54.610]  If the elevator is moving a little bit too much, there will be sensors.
[25:55.030 --> 25:57.770]  Sometimes it's just a little ring on a string that's traveling up and down.
[25:57.950 --> 26:01.670]  And if the ring makes contact with the string, it completes a circuit, things like that.
[26:02.050 --> 26:05.670]  And if that happens, it tells the elevator controller, all hell is breaking loose.
[26:05.830 --> 26:07.630]  You better get these people off this elevator immediately.
[26:08.150 --> 26:14.850]  Now, what's interesting about seismic mode is that unlike some of the other emergency modes we're going to talk about in a second, seismic mode can actually move you up.
[26:14.850 --> 26:19.370]  So, most people would think, well, why would an elevator bring me up in a building when an earthquake is happening?
[26:19.630 --> 26:32.670]  And the reason is actually that because the counterweight is also part of this mechanical system, the idea is to move the cab away from the counterweight whenever possible, so that if, for whatever reason, if the counterweight would manage to break free from the rails,
[26:32.890 --> 26:38.370]  you don't have this, you know, massive 2,500 pound weight swinging around, slamming into the car.
[26:38.370 --> 26:39.070]  Yeah.
[26:40.150 --> 26:42.710]  But perhaps, when he told me about that, I was blown away.
[26:42.830 --> 26:48.350]  I was like, oh my God, that's like the craziest piece, that's amazing, you know, tech mode, that's got to be one of the wildest things.
[26:48.530 --> 26:50.050]  Imagine hell breaking loose like that.
[26:50.470 --> 26:51.950]  There's another hell breaking loose, right?
[26:52.090 --> 26:52.210]  Sure.
[26:52.350 --> 26:55.090]  Instead of seismic unrest, there's also civic unrest, right?
[26:56.970 --> 27:09.670]  So, riot mode in a nutshell is designed to allow building owners, who of course own the means of production, to keep the proletariats from ransacking their fortresses of solitude in an event of civic unrest.
[27:09.990 --> 27:16.670]  So, let's just say that the rowdy Occupy movement was outside throwing bricks through windows and whatnot.
[27:17.050 --> 27:24.030]  What this mode does is basically locks out the lobby or other designated floors that might have access from the ground level.
[27:24.410 --> 27:29.510]  The idea being that the occupants of the building can actually still travel around inside the building undisturbed.
[27:29.510 --> 27:32.890]  Yeah, just like swirling their brandy and being...
[27:34.150 --> 27:35.210]  Nose in the air.
[27:35.470 --> 27:38.370]  Like, I heard the ruffians are very Twitter out there.
[27:41.810 --> 27:44.110]  Now, you may have probably never experienced riot mode.
[27:44.250 --> 27:48.430]  You may have seen or experienced even, depending on how your health has been, code blue mode.
[27:48.610 --> 27:52.910]  Has anybody ever seen, you know, medical service, medical emergency service in a building?
[27:53.090 --> 27:54.670]  Maybe you work in a hospital or something?
[27:55.330 --> 27:59.910]  Medical emergency or code blue mode, it's very similar to that VIP priority service.
[27:59.910 --> 28:07.710]  The idea being, if you are a doctor or someone in care with someone who has a life-threatening condition, you can seize one elevator out of the bank.
[28:07.990 --> 28:11.910]  The controller will prioritize immediately, even more so than with a VIP.
[28:12.210 --> 28:20.530]  It'll prioritize the absolute closest car, flip direction if necessary, make that announcement that says, this car is needed, you're not important, please get out.
[28:20.750 --> 28:26.370]  And then a doctor will wheel that gurney in and, you know, get someone up to obstetrics or get someone to the ICU or what have you.
[28:27.050 --> 28:31.250]  Another thing about hospitals and other medical modes, there's code blue, there's also code pink.
[28:32.150 --> 28:33.710]  Does anybody, not that code pink.
[28:34.070 --> 28:35.190]  Does anybody want to guess?
[28:35.350 --> 28:36.810]  Is my color shifted way off?
[28:36.930 --> 28:37.170]  I don't know.
[28:37.390 --> 28:38.650]  That should be very pink.
[28:38.930 --> 28:40.350]  Somebody guessed it, yes.
[28:40.970 --> 28:42.810]  No, code pink is baby theft mode.
[28:43.190 --> 28:58.150]  If you're not familiar with the security related to maternity wards in hospitals, the security of actually like the little baby LoJack, you know, they have all these interesting response procedures that happen in a building when a baby is moved in an unauthorized way.
[28:58.370 --> 29:02.770]  And some of those involved automatic door locks, some of those emergency alerts that go out over the PA.
[29:03.050 --> 29:06.690]  The elevators in a lot of big hospitals are part of the security operation.
[29:06.930 --> 29:10.730]  The elevators will behave in what is known as security recall mode.
[29:11.590 --> 29:17.510]  Security recall mode, which doesn't exclusively exist in hospitals, you can have big buildings that can manually trigger it if necessary.
[29:18.070 --> 29:20.750]  Security recall basically turns the elevator into a man trap.
[29:21.270 --> 29:38.990]  You can forcibly take control away from whoever's in the cab and deliver that passenger and any other occupants to a floor of your designation, the designated security recall floor, usually right by the desk, and then optionally either keep the doors shut and not let the person get out under any means,
[29:39.070 --> 29:46.430]  or forcibly cycle the doors, giving them no place to hide themselves while a bunch of people are standing there with guns saying, get out of my building, what are you doing here?
[29:47.550 --> 29:49.050]  So that's security recall mode.
[29:50.470 --> 29:53.930]  Not to be confused with security service, which is a catch-all term.
[29:54.410 --> 29:57.370]  A lot of times you'll see key switches that don't seem to make a lot of...
[29:57.370 --> 29:57.870]  Oh, what is this?
[29:58.010 --> 29:58.930]  Security, priority, whatever.
[29:59.150 --> 30:04.090]  Like this one, I was walking around a hotel, and I said, okay, well, what do you see about these three key switches?
[30:04.250 --> 30:07.530]  We've got our light and fan, our inspection service, and we've got security service.
[30:07.850 --> 30:13.030]  And I showed this to some tool people last night, and one of them said, well, one of them is keyed very differently, right?
[30:13.030 --> 30:13.890]  The keyway is different.
[30:14.190 --> 30:15.530]  And I said, you'd think it's different.
[30:15.890 --> 30:17.910]  It's actually all the same keyway.
[30:18.370 --> 30:20.190]  One of them has just been beat to hell.
[30:21.550 --> 30:24.870]  So I walk by the front desk, and I'm like, hey, you know, you seem pretty cool.
[30:25.030 --> 30:26.650]  I've been rapping with you every time I walk by.
[30:26.850 --> 30:27.390]  You're a nice guy.
[30:27.530 --> 30:30.130]  Just tell me, like, I do a lot of work with elevators.
[30:30.610 --> 30:34.350]  What's up with the security service that you apparently are using 20 times a day?
[30:34.550 --> 30:36.750]  Like, are you having security incidents all the time?
[30:36.970 --> 30:39.370]  And he's like, no, the maids use that to go to the basement.
[30:39.370 --> 30:41.950]  Like, you know, we just turn that on and disable the lockouts.
[30:42.410 --> 30:47.590]  So just because you think you see something you understand, it might not be doing what you expect it to do.
[30:47.730 --> 30:52.150]  And what a lot of people don't know what they expect it to do is the big one, fire service.
[30:53.470 --> 31:04.350]  So in the lobby of pretty much every building built in the 1980s and later, you're going to see a key switch just like this at the lobby or some other designated landing in super tall buildings.
[31:04.350 --> 31:07.070]  They'll have sky lobbies that'll have their own switches in those lobbies.
[31:07.510 --> 31:13.170]  And what this basically is, it allows a firefighter to manually put an elevator on fire recall mode.
[31:14.070 --> 31:19.570]  So you've probably seen signs near the elevator that say, do not use elevator in the event of a fire, use the stairs, right?
[31:19.890 --> 31:21.710]  And no one accompanied children, something like that here?
[31:21.890 --> 31:23.970]  Yeah, apparently that's the rule here with your elevators.
[31:24.190 --> 31:29.050]  The point being, though, that elevators do have ways of detecting when the building is on fire, sort of.
[31:30.390 --> 31:35.570]  The landings, the area immediately around where the elevators open up, will have a smoke and a heat detector usually.
[31:35.950 --> 31:40.690]  That will be tied back through the alarm system into the elevator, usually by use of dry contacts.
[31:41.590 --> 31:54.810]  What will happen is, if there's a fire or smoke condition that's in front of one of these landings, the elevator controller knows that there's an emergency and it takes the elevators out of automatic operation and brings them down to that designated landing where those key switches are.
[31:56.290 --> 32:01.170]  The point being that passengers should not be allowed to operate the elevator when a fire is happening.
[32:01.510 --> 32:07.970]  There's tons of cases of this where somebody ends up in an elevator during a fire situation and the doors open to a floor that's on fire.
[32:08.110 --> 32:09.710]  And it's obviously not a pleasant end.
[32:10.450 --> 32:12.050]  That's fire service mode one.
[32:12.550 --> 32:14.610]  Yeah, phase one is what we call it.
[32:14.790 --> 32:21.830]  So the thing is, if the fire is not at the landing, the elevator might not be in phase one by the time the firefighters get there.
[32:21.830 --> 32:26.230]  So they have a key that they can insert into that key switch and turn it to on.
[32:26.390 --> 32:29.530]  When they turn it to on, it'll manually bring all the elevators down to that...
[32:29.530 --> 32:30.030]  It forces phase one.
[32:30.190 --> 32:30.370]  Right.
[32:30.670 --> 32:30.990]  Exactly.
[32:31.270 --> 32:38.250]  It'll bring all the elevators in that bank down to the floor, lock them out, clear all the hall calls, passengers can't ride it, passengers can't call it, et cetera, et cetera.
[32:39.030 --> 32:45.010]  The difference between these two key switches is that one is at the landing, that's the one on the left, and one is in the cab, that's the one on the right.
[32:45.250 --> 32:47.810]  The one on the right is what's called phase two operation.
[32:47.810 --> 32:57.990]  This allows the firefighter to then go inside the cab, flip that key switch, and although the elevator thinks the building's on fire, it'll still run and allow the firefighter to do what they need to do.
[32:58.070 --> 33:10.930]  It's saying someone authorized is in this one particular cab who knows what they're doing, surely is a firefighter, not at all a pen tester, and I should take all the calls this person is giving me and I should take all the instruction that I should be told to do.
[33:10.930 --> 33:23.850]  Now, if you are not trained in fire service mode, the elevator is not behaving the way you think it will behave, you will possibly get yourself stuck in the elevator, you'll possibly not drive it the way you think you can, please don't screw around with this,
[33:24.090 --> 33:25.390]  even though we've done it a lot.
[33:27.870 --> 33:45.070]  So, as far as the operation of a fire mode phase two versus automatic operation, one thing to keep in mind is that because it's an emergency, an urgent emergency situation usually when there's a fire, firefighters essentially are allowed to override all the security that's inside these systems.
[33:45.210 --> 33:46.670]  And we're going to talk about that a little bit more later.
[33:46.950 --> 33:53.970]  But you might be thinking, okay, so you're disabling all these systems, what could possibly ever override fire service?
[33:54.190 --> 33:57.790]  Who could be more important in the elevator world than a fire person?
[33:58.030 --> 33:58.350]  Me!
[33:59.350 --> 34:00.290]  Elevator Spectre!
[34:02.290 --> 34:08.490]  So it's not like some sinister thing where we just are all egomaniacs, but the idea is actually... yeah it is.
[34:08.490 --> 34:14.450]  The idea is that if there is somebody that's on the car top, hopefully they are properly trained.
[34:14.790 --> 34:20.190]  And if there was an emergency situation, when they find that out, they will want to be the first ones out, I assure you.
[34:20.690 --> 34:27.890]  So, the idea being that generally they're trained, they know how to react to the situation, and they will want to get the hell out of there.
[34:28.130 --> 34:34.610]  Yeah, if you're running a hoistway inspection mode, if you're operating in the hoistway, you know it's the most dangerous place to be.
[34:34.610 --> 34:41.070]  Yeah, sorry, to clarify again, it's because the hoistway is an extremely dangerous place, it's not going to just automatically move the cab when someone's up there working.
[34:41.470 --> 34:51.530]  Yeah, and what you might find out later, and we're not going to answer too many questions about, there's a whole bunch of auxiliary controls that you can drive and run the car from in the hoistway outside of the car itself.
[34:52.230 --> 34:53.430]  We're not going to tell them about that though.
[34:53.970 --> 34:54.110]  No.
[34:54.870 --> 35:03.170]  What you need to realize is that this is an industry where if you're not from the industry, again, we keep kind of hitting this, you might not think something is working the way it's working.
[35:03.710 --> 35:07.490]  This was my favorite story when he started teaching me about all the different switching mechanisms.
[35:07.630 --> 35:09.250]  And I was like, oh, look at that, a shutdown switch.
[35:09.470 --> 35:15.410]  That's kind of funny, I guess like you could take them out of service for, I don't know why, like you've got to save power because you're a greener building initiative.
[35:15.410 --> 35:24.350]  But, you know, if there's a switch that says shutdown and on, which position has the elevator shut down and which one has it running?
[35:25.450 --> 35:26.370]  Break it down for them.
[35:26.510 --> 35:31.050]  Yeah, so in this case, to shut down the elevator, you turn shutdown to on.
[35:32.350 --> 35:32.750]  Yeah.
[35:34.310 --> 35:40.070]  So yeah, if you're not from this industry, like, ask us questions about why things aren't working the way they're supposed to work.
[35:40.430 --> 35:43.390]  Let's talk about some things that should work certain ways and then don't.
[35:43.390 --> 35:45.790]  Who would like to understand more about elevator security?
[35:46.250 --> 35:46.650]  Who?
[35:46.970 --> 35:48.370]  And then we're going to piss all over it.
[35:50.270 --> 35:54.530]  Simple elevator security, things like denying users the ability to make hall calls, right?
[35:54.930 --> 35:57.350]  So there are a couple of different ways of doing that.
[35:57.590 --> 35:58.470]  Talk to them about that.
[35:58.650 --> 35:58.990]  Sure.
[35:59.210 --> 36:03.030]  So what you're seeing on the left is a newer cutout, as it's called.
[36:03.210 --> 36:12.010]  What it basically is, is just a key switch that's wired in series, usually, that allows somebody with a key to complete the circuit by turning the key and then pushing the button.
[36:12.010 --> 36:13.390]  You're seeing the same thing on the right.
[36:13.550 --> 36:14.390]  It's just an older setup.
[36:15.410 --> 36:17.690]  Again, basically, it's generally very straightforward.
[36:17.930 --> 36:20.750]  It's usually just a simple key switch that's completing a circuit.
[36:21.130 --> 36:22.730]  Nothing really too complicated going on in there.
[36:23.750 --> 36:29.610]  Occasionally, you'll see serialization on like really super large jobs, but it's definitely the exception to the rule.
[36:29.610 --> 36:34.290]  But yeah, the idea of, has anyone ever been in a building where you couldn't register a call the normal way?
[36:34.410 --> 36:37.730]  Like maybe I found this button and I was like, oh, it must be an elevator, you know, push button.
[36:37.870 --> 36:38.450]  No, it's a light.
[36:38.710 --> 36:41.950]  The only way to register and latch a call was to use my room key.
[36:42.130 --> 36:43.150]  And then that made the call.
[36:43.230 --> 36:44.710]  But of course, what is right below that light?
[36:46.090 --> 36:46.950]  Fire service mode.
[36:47.230 --> 36:47.230]  Fire service mode.
[36:47.230 --> 36:47.370]  Yeah.
[36:48.250 --> 36:51.910]  That's very common though, the idea of denying people the ability to make hall calls.
[36:52.230 --> 36:56.130]  Denying people the ability to make floor calls from the elevator with cutout locks, right?
[36:56.130 --> 36:56.970]  Sure, absolutely.
[36:57.290 --> 37:00.990]  It's exactly analogous to locking out people from making hall calls.
[37:01.170 --> 37:07.270]  The idea being that inside the cab, there's a key switch that interacts with the button to prevent somebody from using it.
[37:07.690 --> 37:11.670]  Now, this is not actually wired in series the way that something in the hall might be.
[37:11.670 --> 37:13.050]  A lot of people think it just breaks the circuit.
[37:13.350 --> 37:13.670]  No.
[37:13.930 --> 37:14.030]  No.
[37:14.130 --> 37:14.750]  We'll get into that.
[37:16.150 --> 37:17.530]  This is another cutout key.
[37:17.710 --> 37:20.710]  It might be a different key than the ones you saw, those little wafer locks.
[37:20.870 --> 37:22.230]  Can anyone tell me what kind of lock this is?
[37:23.390 --> 37:24.330]  Oh yeah, Medeco.
[37:24.610 --> 37:28.270]  That floor seven is way more interesting than the floors apparently in the other photograph there.
[37:28.830 --> 37:30.870]  Here's another instance of a Medeco lock, right?
[37:31.490 --> 37:31.790]  Yes.
[37:32.110 --> 37:33.170]  But now something is different here, right?
[37:33.330 --> 37:33.510]  Right.
[37:33.770 --> 37:36.650]  So in this case, there's no button, right?
[37:36.730 --> 37:37.450]  It's just the key switch.
[37:38.450 --> 37:39.310]  Not a good idea.
[37:40.470 --> 37:42.110]  So why would that be not a good idea?
[37:42.230 --> 37:43.550]  Well, what's different about this?
[37:43.710 --> 37:45.370]  You know, they both have Medeco locks.
[37:45.670 --> 37:47.050]  Why would one not be code compliant?
[37:47.330 --> 37:48.550]  Shout it out if you think you got an idea.
[37:50.430 --> 37:51.350]  Yeah, they got it.
[37:51.430 --> 37:51.690]  Good audience.
[37:51.990 --> 37:55.930]  Who can not f*ck around with a billion keys when they're trying to operate the elevator?
[37:56.630 --> 37:57.350]  Fire personnel.
[37:57.730 --> 38:03.450]  They need every floor to have a button that they can register a call to and not screw around with individual key switches.
[38:05.290 --> 38:05.690]  So...
[38:06.570 --> 38:12.130]  Yeah, so all of this that you're about to see, these are all different ways that people try to secure an elevator.
[38:12.130 --> 38:13.890]  It's not really going to work.
[38:14.110 --> 38:15.970]  We're about to break it all down for you.
[38:16.370 --> 38:17.290]  Honestly, like...
[38:17.290 --> 38:18.350]  Well, I've seen one that worked.
[38:18.550 --> 38:20.550]  Yeah, you found one interesting locking setup.
[38:20.870 --> 38:24.070]  Whereas, you know, here's a picture of a hall call button and there's a big lock next to it.
[38:24.470 --> 38:25.930]  It's not locking the hall call.
[38:26.050 --> 38:27.070]  This is not a hall call cutout.
[38:27.610 --> 38:27.970]  No.
[38:28.210 --> 38:28.310]  No.
[38:31.690 --> 38:34.450]  So as you might guess, this is from a detention facility.
[38:34.450 --> 38:40.130]  Now, this is actually also not code compliant, although they were able to get a variance to be able to do this.
[38:40.290 --> 38:44.530]  Although it probably wasn't the greatest idea because somebody actually did end up getting injured as a result of that.
[38:45.350 --> 38:51.390]  So, with that being said, if you're trying to secure your elevator, this would be a great way to do it if you could.
[38:51.790 --> 38:56.230]  But I'm just going to go ahead and recommend vestibules and other forms of control around the elevator.
[38:56.370 --> 39:00.870]  Because as you're going to see from the next couple slides, there are a lot of different means.
[39:00.870 --> 39:07.370]  Yeah, if you're not physically securing the elevator area, you might as well think of your elevator as an open stairwell.
[39:08.110 --> 39:12.350]  Everything that you just saw, all of those different security practices, let's take a giant dump on them.
[39:12.430 --> 39:12.850]  How about that?
[39:15.130 --> 39:17.030]  So, how about when there were no hall call buttons?
[39:17.390 --> 39:18.890]  How are you going to get the elevator to show up?
[39:18.950 --> 39:20.390]  Oh no, I have no hall call buttons.
[39:20.570 --> 39:21.490]  But I do have a piece of paper.
[39:22.290 --> 39:22.610]  Click.
[39:26.410 --> 39:27.670]  What just happened there?
[39:28.770 --> 39:30.230]  Let's just try that again for a second.
[39:30.230 --> 39:31.450]  Oh, there's no hall call buttons.
[39:32.370 --> 39:32.730]  Click.
[39:32.970 --> 39:34.190]  I'm going to get to class on time.
[39:36.390 --> 39:38.070]  You could probably figure out what happened.
[39:38.210 --> 39:41.050]  The elevator was platformed at that lower level.
[39:41.150 --> 39:42.410]  That was its recall level.
[39:42.750 --> 39:44.690]  So somebody just tripped the safety edge.
[39:44.890 --> 39:47.910]  They just stuck something in that broke the IR beam.
[39:48.050 --> 39:50.750]  And the elevator said, oh, I got to bounce my doors open here.
[39:50.870 --> 39:51.770]  Somebody's trying to get in.
[39:52.370 --> 39:53.970]  That is not a universal trick.
[39:54.010 --> 39:55.670]  It just happened to work on that one elevator.
[39:55.950 --> 39:56.930]  But something to keep in mind.
[39:57.010 --> 39:58.130]  A lot of these tricks are like that.
[39:58.130 --> 40:01.350]  No, it's totally smart to stick things through hoistway doors when you don't know what's beyond there, right?
[40:02.890 --> 40:03.290]  Totally safe.
[40:03.290 --> 40:04.030]  You said it, not me.
[40:05.930 --> 40:09.490]  What really, what most of what we're about to show you though, I mean, that's just fun and hokey.
[40:09.730 --> 40:10.510]  But key switches.
[40:10.850 --> 40:12.650]  Key switches, key switches, key switches.
[40:13.550 --> 40:19.350]  Understanding the mechanical switching systems and understanding how to exploit them, how to get the right keys.
[40:19.910 --> 40:24.990]  This is what most of us do on a daily basis when we're trying to exploit elevator security.
[40:25.670 --> 40:27.870]  So on very, like there's a lot of different key switches.
[40:28.150 --> 40:31.490]  And there's a lot of different fixtures and brands that Howard's going to tell you about.
[40:31.910 --> 40:37.950]  And on jobs, an elevator tech will usually, you know, all right, I've got to open this key box and get the keys for that job.
[40:38.090 --> 40:40.770]  Or you go to the building manager and say, oh, we're here to do your inspection.
[40:40.910 --> 40:41.630]  All right, give me the keys.
[40:42.250 --> 40:47.370]  In the industry, very few people really collect these keys or monitor these keys.
[40:47.490 --> 40:48.670]  This was the key for this job.
[40:48.810 --> 40:49.490]  And then they hand it back.
[40:50.050 --> 40:54.290]  Now, if you've explored around, you might find like keys laying around and be like, oh, I got a check.
[40:54.390 --> 40:56.110]  I'm going to write this down or I'm going to use this key.
[40:56.670 --> 40:58.910]  That's something that like urban explorers might do.
[40:59.150 --> 41:10.270]  What Howard's been doing for the past years and years and years in this industry is not just like finding and writing down keys, but logging systematically every single key he's ever found.
[41:10.270 --> 41:13.370]  and every single key switch where it has worked.
[41:13.690 --> 41:22.350]  As far as I know, he's the only gentleman that's been maintaining a database of keys and a collection of keys with full knowledge of where to use them.
[41:22.650 --> 41:25.070]  Now, this was Howard's keys when I first met him.
[41:25.810 --> 41:27.250]  Would you like to see Howard's keys today?
[41:28.850 --> 41:29.670]  There's more of them.
[41:33.740 --> 41:35.520]  It's actually even bigger now.
[41:38.610 --> 41:39.350]  And I think I...
[41:39.350 --> 41:41.170]  It kind of puts into perspective those sets you can buy online.
[41:41.390 --> 41:42.910]  Yeah, I think I left one or two at home too.
[41:43.750 --> 41:48.130]  So yeah, talk to him about why you need this many and what you're seeing on jobs.
[41:48.710 --> 41:54.410]  The basic reason that there are so many different keys is because there are so many different manufacturers of elevator fixtures.
[41:54.790 --> 42:06.150]  I'm not going to get into all the details of this because I don't want to waste too much time on the differences between the fixtures, but what it really boils down to is that if you are attentive to what you're actually seeing, you'll start to notice patterns.
[42:06.670 --> 42:08.030]  Actually, if you could go back one.
[42:08.590 --> 42:08.990]  Yeah, sure.
[42:08.990 --> 42:11.070]  This is something you can recognize very easily usually.
[42:11.350 --> 42:14.450]  This is the Otis Chiclet or the Series 1 fixtures.
[42:14.630 --> 42:17.410]  We call them Chiclets because they look like little square Chiclets.
[42:17.530 --> 42:19.170]  And they're very recognizable in that way.
[42:19.710 --> 42:21.170]  They're almost always key to like.
[42:21.510 --> 42:26.190]  So if you happen to notice that the elevator is using those fixtures, you also pretty much know what key it's using.
[42:26.190 --> 42:31.410]  And that applies not just to that particular line of Otis fixtures, but to newer Otis fixtures as well.
[42:31.670 --> 42:34.050]  There's a company called GAL Manufacturing in the Bronx.
[42:34.250 --> 42:36.250]  They are also generally key to like.
[42:36.570 --> 42:39.310]  Innovation Industries, another huge manufacturer of generic fixtures.
[42:39.570 --> 42:40.130]  Again, usually key to like.
[42:40.130 --> 42:41.410]  These aren't elevator brands.
[42:41.630 --> 42:43.690]  These are resellers of aftermarket parts.
[42:43.810 --> 42:44.510]  Aftermarket parts, yeah.
[42:44.750 --> 42:45.690]  And they're all key to like.
[42:46.030 --> 42:48.390]  And again, I mean, we can do this all day.
[42:48.810 --> 42:51.030]  Adams is another provider of parts.
[42:51.150 --> 42:51.950]  They key them alike.
[42:52.370 --> 42:54.330]  I do this to him all the time.
[42:54.330 --> 42:55.790]  I send him photos from jobs.
[42:56.090 --> 42:57.330]  And I'm like, I'm in this building.
[42:57.570 --> 42:58.750]  I need to know what key this is.
[42:58.930 --> 42:59.710]  I really got to get up there.
[42:59.810 --> 43:00.510]  He's like, come on.
[43:00.710 --> 43:01.610]  It's a square button.
[43:01.810 --> 43:03.150]  It's not recessed.
[43:03.170 --> 43:03.530]  You know this.
[43:03.550 --> 43:04.410]  I'm like, no, I don't.
[43:04.490 --> 43:05.530]  Tell me what the hell this is.
[43:05.810 --> 43:06.590]  He's like, Schindler.
[43:06.710 --> 43:07.430]  I'm like, okay, fine.
[43:08.150 --> 43:08.710]  Security's coming.
[43:08.830 --> 43:09.530]  I got to get out of here.
[43:12.770 --> 43:14.830]  What's your answer invariably is always like.
[43:15.010 --> 43:18.310]  Sometimes he'll text me before the, like, he's like, the email hasn't loaded yet.
[43:18.450 --> 43:18.930]  I'm on my phone.
[43:19.050 --> 43:19.690]  It's probably Epco.
[43:22.250 --> 43:23.110]  Because everything's Epco.
[43:23.310 --> 43:25.010]  Yeah, Epco is definitely a very popular one.
[43:25.970 --> 43:28.850]  Now, when you see, like, when he rags on me all the time, right?
[43:28.910 --> 43:29.950]  Because he's like, you know this.
[43:30.230 --> 43:31.030]  What's the font?
[43:31.230 --> 43:31.630]  What is it?
[43:31.630 --> 43:32.790]  I'm like, I don't know, dude.
[43:33.010 --> 43:33.870]  Come on, tell me.
[43:33.970 --> 43:39.030]  But, like, if you actually compare, you might think, well, I mean, they're just round and they have a button and blah.
[43:39.170 --> 43:40.550]  But, like, look at them side by side.
[43:40.830 --> 43:43.770]  If you get into this, you'll start to learn how to distinguish.
[43:43.970 --> 43:45.650]  You'll start to learn various characteristics.
[43:46.010 --> 43:48.310]  And you can kind of, like, train spot them just like he does.
[43:49.170 --> 43:50.950]  We'll give you one that's really easy.
[43:51.150 --> 43:53.150]  How many people have seen buttons like this before?
[43:54.030 --> 44:01.010]  You've been probably in, like, a low-rise, a slow hydraulic elevator, like a Holiday Inn or something like that, right?
[44:01.530 --> 44:05.130]  This is your classic, classic low-rise elevator system by Dover.
[44:05.270 --> 44:09.350]  Yeah, Dover had this market cornered in, like, low-rise hydraulic elevators for the longest time.
[44:10.150 --> 44:12.850]  Dover ended up getting purchased by a company called ThyssenKrupp.
[44:13.330 --> 44:16.890]  ThyssenKrupp now makes their own fixtures, but for a while they were still installing Dover fixtures.
[44:17.630 --> 44:18.670]  But then this is great.
[44:18.890 --> 44:18.990]  Right.
[44:18.990 --> 44:20.210]  Just, like, talk through this one.
[44:20.350 --> 44:20.590]  Okay.
[44:20.790 --> 44:22.230]  So this is something I...
[44:22.230 --> 44:23.430]  We just had to show you this for a second.
[44:23.510 --> 44:25.530]  This is something I saw once on vacation, actually.
[44:26.250 --> 44:27.690]  Obviously, it's a Dover elevator, right?
[44:27.790 --> 44:28.550]  Because it says Dover.
[44:29.350 --> 44:31.810]  And just take my word for it, that's a Dover position indicator.
[44:31.990 --> 44:42.190]  It's just another one of the many fixtures that if you start to recognize them after a while, you'll know who made it and where it originated and, again, how it's wired and all the fun stuff about how it works.
[44:42.930 --> 44:44.630]  But this is where it starts to break down.
[44:45.650 --> 44:46.630]  This is not a button.
[44:47.090 --> 44:48.490]  This is the firefighter's jewel.
[44:48.650 --> 44:53.230]  This indicates to a firefighter when the building is on fire and the elevator's on phase one and two.
[44:53.230 --> 44:53.910]  Not the stock one, though.
[44:54.130 --> 44:57.250]  But it's weird because it certainly looks like a button from a distance.
[44:57.470 --> 45:02.310]  And if I had to guess, if you were paying attention to the other slide, it looks like an Adam's Survivor Plus fixture.
[45:02.790 --> 45:03.550]  It's just weird.
[45:03.550 --> 45:05.330]  It doesn't really seem to jive with the rest of the panel.
[45:05.850 --> 45:07.330]  And this is also pretty weird.
[45:07.550 --> 45:11.910]  This is actually a ThyssenKrupp key switch on a Dover, again, on a Dover panel.
[45:12.130 --> 45:14.430]  But it's a Dover compatible ThyssenKrupp key switch.
[45:14.610 --> 45:15.970]  Stop me if this is getting weird.
[45:16.430 --> 45:21.070]  But they're making parts that obviously fit the systems that they used to make.
[45:21.170 --> 45:22.730]  It's just a newer model of it.
[45:23.670 --> 45:28.650]  Now, again, they've got Adam's fixtures for the push buttons for most of these floors.
[45:28.950 --> 45:31.170]  Except apparently not for 4 or M.
[45:31.810 --> 45:34.190]  For some reason, they didn't need to make those vandal resistant.
[45:35.010 --> 45:42.090]  And then they have Epco Designer Line, I believe it's called, is the push bar right there that's custom engraved.
[45:42.330 --> 45:44.150]  But this is the one that drives me really nuts.
[45:44.750 --> 45:46.990]  The door open button has no light.
[45:47.470 --> 45:49.690]  The door close button has a light.
[45:49.690 --> 45:54.110]  So, just to, I guess, let you know that it's ignoring you when you push door close.
[45:54.270 --> 45:54.330]  Yeah.
[45:54.770 --> 45:59.850]  All of that shit on the Internet, by the way, about the door close button hack, how many people know that's bullshit?
[46:00.750 --> 46:04.350]  How many people are convinced it's not and they swear it worked when they tried it?
[46:05.050 --> 46:05.830]  All right, good.
[46:06.050 --> 46:07.150]  Very good skeptics in the room.
[46:07.290 --> 46:12.350]  How many people know that there is a sort of truth to it, but most people misunderstand it?
[46:13.550 --> 46:14.010]  All right.
[46:14.310 --> 46:17.070]  What is your theory for why people probably started that rumor?
[46:17.330 --> 46:18.050]  There's two things.
[46:18.290 --> 46:22.530]  The first is that on independent service, you have to hold the close door button to close the door.
[46:22.750 --> 46:24.390]  That's how the elevator knows when to close the door.
[46:24.490 --> 46:27.130]  Somebody's running it and it says, okay, I'm ready to close the door.
[46:27.270 --> 46:28.690]  They hit the close door button, the door's closed.
[46:28.950 --> 46:34.210]  So, I think somebody somewhere probably saw somebody running a car on independent and they said...
[46:34.210 --> 46:34.650]  Maybe non-stop or something?
[46:34.930 --> 46:35.090]  Yeah.
[46:35.090 --> 46:40.370]  And basically they said, well, he hit door close and the floor we were going to and it went right there.
[46:40.890 --> 46:43.450]  Which is pretty much independent service in a nutshell.
[46:43.670 --> 46:45.110]  No, but you weren't witnessing a hack.
[46:45.330 --> 46:46.710]  You were witnessing someone who had a key.
[46:46.970 --> 46:48.970]  But there's also, though, another thing.
[46:49.150 --> 47:07.090]  The sort of half-truth to the elevator hack with the door close button is that on older Relay Logic controllers, because there was such a limited amount of different states that the elevator could really exist in logically, there could be weird sort of unexpected consequences of doing things like holding the door close button for the duration of your ride.
[47:07.830 --> 47:17.010]  There is at least one model of Otis controller, Relay Logic, that if you are holding the door close button, it will still try to collect every call on the way up or the way down.
[47:17.150 --> 47:17.830]  It'll still stop.
[47:18.010 --> 47:22.630]  It'll stop, it'll level, and it'll wait as though the doors were opening and closing.
[47:22.810 --> 47:25.190]  But if you're holding door close, the doors simply stay closed.
[47:25.350 --> 47:26.350]  So you're just kind of being a dick.
[47:26.530 --> 47:27.250]  You're not being faster.
[47:29.950 --> 47:33.870]  But this is the kind of stuff, if you get into, you know, fixtures and identifying, you'll notice.
[47:34.230 --> 47:37.390]  Like, how many people ever used to build computers and swap out parts?
[47:37.670 --> 47:41.190]  And you could spot, be like, oh, when did you put a new CD drive in your computer?
[47:41.330 --> 47:43.370]  The beige isn't quite the same color, you know?
[47:44.270 --> 47:52.210]  These two call call buttons, most people wouldn't even notice, except an elevator guy instantly walks by and goes, oh, wow, they clearly swapped out this one.
[47:52.370 --> 47:54.870]  I'm super OCD, and this drove me nuts when I saw it.
[47:56.430 --> 47:57.990]  The one on the bottom is Helvetica.
[47:58.250 --> 47:59.850]  The one on top is a font called Gordon.
[48:00.530 --> 48:01.670]  There's a whole history to it.
[48:02.010 --> 48:03.190]  Talk to this guy and buy him drinks.
[48:03.310 --> 48:04.510]  He'll talk about this all night.
[48:04.690 --> 48:10.230]  The point being, though, actually, what happened here is this was in an office building where there happened to be more down demand from this floor than up demand.
[48:10.410 --> 48:12.030]  So at some point, the arrow broke.
[48:12.250 --> 48:14.410]  The one on top, I can just tell, is the original one.
[48:14.410 --> 48:15.830]  Somebody broke it eventually.
[48:16.130 --> 48:19.810]  And the mechanic that came out was like, well, I need another push button, right?
[48:19.990 --> 48:23.230]  So they probably called up Epco, and they said, hey, I need a down button.
[48:23.410 --> 48:24.910]  And they're like, well, which kind?
[48:25.090 --> 48:26.890]  And people in the industry aren't all like him.
[48:26.990 --> 48:27.470]  They don't care.
[48:27.690 --> 48:29.530]  And he was probably like, well, down.
[48:32.590 --> 48:33.550]  So you get Epco.
[48:34.610 --> 48:36.790]  But let's talk about something you should care about.
[48:36.950 --> 48:38.610]  And the industry should really care about more.
[48:38.810 --> 48:44.770]  And we're really shocked at how many people in this industry or pseudo in this industry are selling keys.
[48:45.510 --> 48:47.270]  And they're like bullshit sets of keys.
[48:47.930 --> 48:48.370]  Sure.
[48:48.850 --> 48:51.670]  So like I was saying, a lot of elevators are key to like.
[48:51.850 --> 48:55.590]  And there are some vendors that have taken advantage of this to various ends.
[48:56.030 --> 49:02.090]  It's primarily marketed towards firefighters and fire departments who have a need to have the keys on hand.
[49:02.630 --> 49:09.950]  So sometimes, even though there should be a Knox box or a key box somewhere in the building, or a building manager should have the keys, sometimes that's not always the case.
[49:09.950 --> 49:12.290]  And in an emergency, there's no time to waste.
[49:12.830 --> 49:14.450]  The firefighters want their own sets of keys, right?
[49:14.590 --> 49:14.750]  Yeah.
[49:14.910 --> 49:15.710]  So this set's popular.
[49:15.810 --> 49:16.970]  This is a $70 set.
[49:17.170 --> 49:18.010]  Get you eight keys.
[49:18.210 --> 49:20.790]  Those doing the math, that's like a little under nine bucks a key.
[49:21.250 --> 49:22.610]  Does it come free with the smoke though, right?
[49:22.730 --> 49:24.330]  The smoke is included in the package.
[49:24.330 --> 49:25.370]  It ships the UPS ground.
[49:25.930 --> 49:28.370]  There's another set that people sell for $200.
[49:28.990 --> 49:31.050]  17 keys, a little bit more per key.
[49:31.330 --> 49:33.090]  But of course, you know, you're getting more options, right?
[49:33.170 --> 49:33.530]  This is...
[49:33.530 --> 49:37.270]  A firefighter would really want this set because it's got so many options for them, right?
[49:37.430 --> 49:37.630]  Right.
[49:37.730 --> 49:43.490]  Well, what I like about this one is that the vendor very, very courteously decided to take nice, straight on photos of the keys.
[49:44.030 --> 49:44.310]  Yeah.
[49:46.850 --> 49:49.030]  So if you were in Josuevas' talk, exactly.
[49:50.110 --> 49:53.210]  And Howard was able to look at those and instantly identify most of them.
[49:53.210 --> 49:55.170]  And he realizes what a useful set this is.
[49:55.310 --> 50:00.670]  This set is probably one of the best values in the industry for fire departments.
[50:00.890 --> 50:07.990]  As long as your particular fire department serves a geographic area including Massachusetts, New Jersey, New Hampshire, New York, South Carolina, and Arizona.
[50:08.670 --> 50:09.010]  Yeah.
[50:09.230 --> 50:15.450]  So if that's where your truck is rolling through the streets all the time, all together somehow, I guess this is the set for you.
[50:15.610 --> 50:16.750]  Go ahead and drop the two hundo.
[50:17.670 --> 50:24.350]  Realistically, what probably happened was somebody just kept handing the vendor keys and saying, you know, I've seen this work for fire service on an elevator.
[50:24.570 --> 50:26.670]  And then they say, well, okay.
[50:26.670 --> 50:27.430]  Add it to the ring.
[50:28.690 --> 50:39.750]  Now, the thing about that, when people are not really discriminating what they're putting on these key sets, and they're not even very sharp on how they're duplicating these keys, you'll get situations like this from some suppliers.
[50:40.470 --> 50:45.850]  Where clearly, one was a nice original machine code cut key, and the other was just running a duplicator.
[50:46.010 --> 50:47.730]  And maybe a duplicate of a duplicate.
[50:48.130 --> 50:52.470]  So in the industry, thankfully, as we have learned, the key switches, they have...
[50:52.470 --> 50:53.990]  A lot of them have really bad tolerances.
[50:54.270 --> 50:56.450]  So all these keys will kind of work.
[50:56.890 --> 51:10.430]  But if you are interested in getting proper keys, keys that are made well, keys that are not just super sloppy, that's the difference between, you know, buying them from, let's say, elevatorkeys.com versus just going on eBay and saying, oh, I need the 2839 key.
[51:11.070 --> 51:11.450]  Yeah.
[51:11.570 --> 51:14.610]  And I can actually just tell you, definitely don't bother trying to order from that website.
[51:14.810 --> 51:18.510]  They will ID you and put you through endless verification processes.
[51:18.970 --> 51:19.230]  Yeah.
[51:19.710 --> 51:26.290]  But we'll talk about something now that some people might say, well, I've seen these systems where, forget key switches, they're not even buttons.
[51:26.730 --> 51:29.570]  I've just, I've seen destination dispatch, it's called.
[51:29.710 --> 51:31.430]  How many have ever ridden an elevator like this?
[51:31.650 --> 51:32.190]  All right.
[51:32.330 --> 51:32.590]  All right.
[51:32.650 --> 51:33.410]  So there's some around here.
[51:33.410 --> 51:34.230]  New modern idea.
[51:34.530 --> 51:38.890]  The idea being for super efficiency, you shouldn't tell passengers to select their floors.
[51:39.110 --> 51:42.370]  You should tell them to dictate, I want to go to 17.
[51:42.770 --> 51:46.030]  And it will tell you, oh, go to elevator A, go to elevator E.
[51:46.210 --> 51:49.070]  And the elevators will optimize those calls and collect them up.
[51:49.350 --> 51:54.750]  Well, in a destination dispatch system, if there's no control in the elevator, how does any of this work?
[51:55.150 --> 51:59.430]  What does every elevator have to have in its configuration package for emergencies?
[52:00.070 --> 52:00.670]  Fire mode.
[52:01.370 --> 52:02.730]  What's a fire person going to do?
[52:02.790 --> 52:05.230]  They're not going to bang on like a touch screen with giant gloves.
[52:05.610 --> 52:13.550]  No, there's almost always a hidden panel that you can key open with the fire keys in a destination dispatch elevator, and it will have the full bank of buttons.
[52:13.830 --> 52:16.090]  And as you learned, you don't even have to be on fire mode.
[52:16.190 --> 52:17.830]  Those are regular ball call buttons at that point.
[52:17.830 --> 52:19.730]  Yeah, this is a kind of weird situation.
[52:20.050 --> 52:32.310]  When the panel was opened, it was demonstrated to me that even though the elevator was not actually on firefighters operation, pushing that button, once you had the lock panel open, allowed it to sort of operate like a traditional automatic elevator.
[52:33.550 --> 52:36.830]  But this is a very modern, futuristic kind of system, right?
[52:36.910 --> 52:38.110]  Let's forget about the future for a minute.
[52:38.490 --> 52:42.230]  This is still an industry really stuck in the past in a lot of ways.
[52:43.270 --> 52:52.490]  So when we meet with people, right, and you know a lot about physical security from me, and I've learned elevators from you, tell them, you know, what did someone tell you when you were looking at the new key switch they were equipping?
[52:52.750 --> 52:54.530]  Yeah, this is actually from a casino.
[52:55.410 --> 53:03.570]  And we had the pleasure of interfacing with the building's architect, who had an incredible amount of personal involvement with selecting elevator components.
[53:04.430 --> 53:07.990]  And this topic of security obviously came up because it's a casino.
[53:07.990 --> 53:14.590]  And I remember very distinctly when he was describing to me how he picked the lock cylinders.
[53:14.890 --> 53:22.810]  And his exact words were, no one could ever subvert our security, because we use unpickable tubular locks.
[53:24.190 --> 53:24.750]  Yeah.
[53:25.670 --> 53:29.690]  So yeah, I mean, they think tubulars are the latest and greatest thing that ever came out.
[53:29.970 --> 53:33.450]  Somebody somewhere pushes Medeco keys in some instances.
[53:33.890 --> 53:35.890]  I got a big collection of them through him.
[53:35.890 --> 53:38.030]  I laid them all out and I said, well, that looks kind of funny.
[53:38.190 --> 53:39.790]  Baba, give me your screwdriver for a second.
[53:40.050 --> 53:42.430]  And I tightened it up on the screwdriver and I said, oh, well, okay.
[53:42.550 --> 53:47.410]  First of all, what you got here is keys that are the same bidding and same cut for half the damn blade of the key.
[53:47.710 --> 53:50.850]  And the rest are all just part of a mastered system.
[53:51.250 --> 53:52.770]  What did you learn from Yoast yesterday?
[53:52.850 --> 53:55.350]  And what did you learn from us if you ever talk about master keying?
[53:55.490 --> 53:59.170]  You can decode the top master key with a large enough sample data set.
[53:59.430 --> 54:01.830]  Not going to say we did, but you know, LOL, we did.
[54:03.750 --> 54:06.170]  I got this photo from him from a restaurant one day.
[54:06.370 --> 54:07.490]  He's like, check it out.
[54:07.630 --> 54:08.270]  I'm like, wow.
[54:08.370 --> 54:08.570]  Okay.
[54:08.670 --> 54:09.910]  You're on like a Dover job, right?
[54:09.950 --> 54:11.110]  Looks like a Dover impulse key.
[54:11.230 --> 54:13.170]  He's like, it is, but you won't believe where it is.
[54:17.240 --> 54:19.320]  So there's just a lot of key reuse.
[54:19.500 --> 54:24.660]  There's like people think these are unique keys and they're getting them from a supplier, from a supplier, from a supplier.
[54:25.000 --> 54:26.120]  Your keys are not.
[54:26.260 --> 54:26.360]  Yeah.
[54:26.360 --> 54:26.440]  Yeah.
[54:26.560 --> 54:29.000]  Mouse is saying voting machines have this same situation.
[54:29.440 --> 54:35.680]  Somebody who's not building the lock, they're just ordering a part, is probably ordering a part that is not as unique as they think.
[54:36.020 --> 54:41.660]  Ask him downstairs or during the Q&A what NEMA 7, you know, super destructo resistant, you know, fixtures.
[54:42.000 --> 54:43.200]  Explosion proof fixtures.
[54:43.440 --> 54:45.840]  Explosion proof fixtures have to do with gumball machines and they'll tell you a story.
[54:47.280 --> 54:48.120]  Here's another one.
[54:48.280 --> 54:51.160]  Just kind of the thinking, the behind the times thinking of the industry.
[54:51.160 --> 54:57.320]  This is the official instruction set from MCE, one of the elevator providers that does some Internet of things, remote connectivity.
[54:57.720 --> 55:04.340]  And they very specifically say, create an edge, you know, account and punch a hole in your firewall called MCE support.
[55:04.620 --> 55:06.600]  Make sure the password is MCE support.
[55:06.900 --> 55:10.540]  In fact, go ahead and take your admin password, change that to MCE support.
[55:10.720 --> 55:13.520]  Just make it all MCE support so that we can always get in.
[55:16.600 --> 55:20.320]  So you have, this is the latest generation of product, by the way, from MCE.
[55:20.320 --> 55:22.020]  The IQ and the iView systems.
[55:22.300 --> 55:25.860]  This is what they are now moving to for the idea of remote management.
[55:26.220 --> 55:30.280]  We're just going to let this video play and see what some people might think.
[55:31.000 --> 55:39.800]  Is, you know, would you want your elevators with all of this functionality being connected to the Internet with the same password on an XP box?
[55:41.060 --> 55:44.100]  Can they put the badging system on there too to make my life easier?
[55:44.400 --> 55:46.620]  Yeah, Josh wants the badges on the same system.
[55:46.740 --> 55:49.420]  You know, we could probably, they'd probably make a module for that, yeah.
[55:49.420 --> 55:55.100]  The good news is, although this was installed in 2014, I believe they paid for the extended XP support.
[55:55.620 --> 55:55.700]  Yeah.
[55:57.740 --> 55:59.880]  How many people were at the social engineering talk?
[56:00.980 --> 56:01.980]  Very, very groovy.
[56:02.200 --> 56:03.760]  How many people are going to laugh at this?
[56:04.120 --> 56:12.200]  As your building's requirements change, you can customize your elevator's operation to fit your specific needs with a simple telephone call to our elite engineers.
[56:12.820 --> 56:13.260]  Elite.
[56:13.480 --> 56:14.820]  I want to reserve one of our elevators.
[56:15.020 --> 56:15.860]  It won't be a problem.
[56:16.060 --> 56:19.720]  I'm going to take elevator number two from the bank and I'll reserve it for your move.
[56:19.800 --> 56:22.800]  You can restrict service to a floor under renovation in a hotel.
[56:23.040 --> 56:23.080]  That's right.
[56:23.080 --> 56:23.360]  I've got it reserved.
[56:23.360 --> 56:28.980]  Or place a car on independent service to use it for moving furniture or for the exclusive use of a VIP.
[56:29.400 --> 56:31.500]  It can all be done with a single phone call.
[56:34.000 --> 56:34.320]  Indeed.
[56:34.980 --> 56:35.300]  Yeah.
[56:35.880 --> 56:39.960]  So you can call up and say, oh yeah, I need this, I need elevator 10 to be on independent service.
[56:40.280 --> 56:50.900]  And there's supposedly, you know, a little owner card that has your credentials on it, which nobody could ever possibly bluff their way through and say, oh no, I don't have the card in front of me, but the VIP is coming right away.
[56:51.040 --> 56:52.160]  You got to do this for me, man.
[56:52.160 --> 56:53.620]  Yeah, I'm paying for a lead service.
[56:53.760 --> 56:55.420]  It's the OnStar of elevators, basically.
[56:57.240 --> 56:58.080]  How about this one?
[56:58.140 --> 56:58.560]  This is great.
[56:59.060 --> 57:03.760]  The FEOK1 is the most prevalent, ooh, it's the most prevalent, right, fire key?
[57:03.900 --> 57:04.040]  Yeah.
[57:04.320 --> 57:05.820]  Actually, let me take this slide, if you don't mind.
[57:06.200 --> 57:06.420]  Yeah.
[57:06.420 --> 57:12.040]  So in 2007, the elevator safety code was revised to include a standardized fire service key.
[57:12.280 --> 57:17.380]  The idea was to remove the need for firefighters carrying these massive key rings.
[57:17.500 --> 57:18.820]  They said, let's just make one key.
[57:18.820 --> 57:22.980]  And let's restrict it because we want to make sure this doesn't fall into the wrong hands.
[57:23.140 --> 57:24.500]  There's too much that could go wrong.
[57:24.700 --> 57:29.700]  So it makes sense that they put in the code, you shall not have this key, it must only be limited to firefighters.
[57:30.040 --> 57:31.480]  It makes a little less sense.
[57:31.740 --> 57:32.660]  That they publish the bidding.
[57:32.660 --> 57:36.620]  They put the direct bidding code in the freaking document.
[57:40.490 --> 57:40.930]  What?
[57:45.670 --> 57:50.670]  There's actually a funny backstory to this too, because the 2007 and 2008 code changed.
[57:50.890 --> 57:55.370]  In 2008, they clarified that the key was supposed to be cut clockwise with that bidding code.
[57:56.130 --> 57:58.230]  Somebody said, this is a bad idea.
[57:58.430 --> 58:01.650]  We should improve the security by cutting it counterclockwise.
[58:03.110 --> 58:05.030]  So you need two keys for FEOK1.
[58:05.630 --> 58:08.510]  But in general, I mean, it's all naked on the inside.
[58:08.810 --> 58:13.450]  We talk about all the key switches, we talk about the systems, but you know, these are just circuits.
[58:13.450 --> 58:18.250]  At the end of the day, most of the circuits are simply on or off.
[58:18.410 --> 58:20.210]  There's really nothing complex in there.
[58:20.430 --> 58:25.550]  And simply completing the circuit sends whatever desired message you're trying to send back to the controller.
[58:25.810 --> 58:32.170]  So if for some reason the panel is exposed to you, you essentially have root on that elevator.
[58:32.650 --> 58:32.790]  Yeah.
[58:33.430 --> 58:39.690]  So let's say you're in a situation where there's a floor that's locked out, and you say, I want to go up to the top floor and I can't.
[58:39.990 --> 58:46.390]  Well, if that elevator panel is something that you can get behind maybe, so the basement doesn't work, top floor doesn't work.
[58:46.530 --> 58:53.190]  But if we kind of, you know, flip this number and flip that number, and whoever was in the video doing this, they go, okay, well, what do we got here?
[58:53.570 --> 58:53.950]  Okay.
[58:54.150 --> 58:56.070]  So this is the independent service key switch.
[58:56.610 --> 58:57.650]  What's right behind it?
[58:57.790 --> 58:59.790]  Well, simple freaking wire contacts.
[59:00.230 --> 59:07.410]  So if we go ahead and take those wires off and bridge them together, the elevator thinks the independent mode switch has been flipped.
[59:08.050 --> 59:09.290]  Do not do this.
[59:09.490 --> 59:13.990]  If we do not, if we didn't make it clear earlier, these are live mains back here.
[59:14.190 --> 59:16.130]  These are live 120 volt current.
[59:17.690 --> 59:19.390]  And we'll show you something later.
[59:19.610 --> 59:20.010]  Yeah, we'll show you later.
[59:20.230 --> 59:23.750]  But sure enough, independent mode on, go where you want to go.
[59:23.870 --> 59:29.770]  You just have to stand there for the entire travel of the, you know, the zone holding hot leads together.
[59:29.770 --> 59:32.050]  So that person was kind of a dumbass.
[59:33.990 --> 59:36.790]  But sure enough, yeah, duct tape, of course, that would be the way to do it.
[59:37.870 --> 59:40.070]  But there you go, you know, get up to the top floor, et cetera.
[59:40.270 --> 59:40.470]  Why?
[59:40.670 --> 59:47.210]  Because that swing panel was able to be popped open with no detection whatsoever and no real prevention whatsoever of that happening.
[59:48.690 --> 59:53.450]  Other security that you may see in, let's say, a big building like that, we couldn't get up there because we didn't have the key card.
[59:53.890 --> 59:56.990]  No, I mean, whoever was in that video couldn't get up there because they didn't have the key card.
[59:57.110 --> 59:57.790]  I thought you were saying.
[59:57.910 --> 59:59.990]  It was that guy who I did that thing that time.
[01:00:00.470 --> 01:00:05.090]  So key card systems, again, this could be an entire talk on its own.
[01:00:05.350 --> 01:00:08.010]  It actually already is an entire talk on its own.
[01:00:08.530 --> 01:00:11.590]  Watch Major Malfunction's old talks about MagStripe hacking.
[01:00:11.810 --> 01:00:20.230]  If you want to ask us more about how the MagReader or how the CardReader or the RFReader in the cab is interacting with the controller, ask us later or ask us downstairs.
[01:00:20.650 --> 01:00:22.410]  For the most part, you can clone them.
[01:00:22.510 --> 01:00:25.470]  You can get around these systems or just tell them to turn off.
[01:00:25.470 --> 01:00:28.730]  I've seen elevators where there's a key switch that says CardReader Enable Disable.
[01:00:29.190 --> 01:00:31.470]  Just disable it and then the CardReader doesn't care that it's there.
[01:00:32.030 --> 01:00:33.510]  Would it surprise you that they're keyed alike also?
[01:00:33.910 --> 01:00:34.290]  Yeah.
[01:00:35.410 --> 01:00:38.670]  So for pen testing and for getting around security, what do we do?
[01:00:39.010 --> 01:00:40.670]  Again, it's all about the key switches.
[01:00:40.970 --> 01:00:43.910]  It's all about independent service and having the right key rings.
[01:00:44.250 --> 01:00:50.350]  Through working with Howard, we've optimized our sets of keys through like how common they can be.
[01:00:50.350 --> 01:00:52.750]  So we have the, this key ring is really rare.
[01:00:52.910 --> 01:00:53.550]  Leave it in the car.
[01:00:53.770 --> 01:00:55.830]  Then we have this key ring is pretty common.
[01:00:55.970 --> 01:00:57.170]  Let's keep it in the red teamer bag.
[01:00:57.430 --> 01:00:59.270]  And then this key ring is really common.
[01:00:59.410 --> 01:01:00.410]  Let's keep that in my pocket.
[01:01:00.630 --> 01:01:07.590]  So using independent keys, cut out keys or sometimes fire keys, you can do fun things like, well, maybe this.
[01:01:08.310 --> 01:01:12.330]  Let's say you have a building and at the front of this building is a security desk.
[01:01:12.570 --> 01:01:16.030]  And if you're going into the building, you're supposed to interact with that security desk.
[01:01:16.030 --> 01:01:18.950]  But this building also has a rear exit.
[01:01:19.310 --> 01:01:23.110]  There's people that can come down an elevator and exit through a rear door.
[01:01:23.410 --> 01:01:25.790]  That's a rear door you're not supposed to be able to get back in.
[01:01:26.590 --> 01:01:27.270]  Guess what?
[01:01:27.350 --> 01:01:27.590]  You can.
[01:01:28.030 --> 01:01:31.830]  But if you get to this elevator even then, they figured, well, you know, what's anybody going to do?
[01:01:31.910 --> 01:01:35.630]  This elevator is not going to respond to any calls because people don't have the badge.
[01:01:36.430 --> 01:01:43.410]  If you take control of this elevator, then maybe drive it in fire mode somewhere else into the building and get off.
[01:01:43.410 --> 01:01:49.850]  You have effectively bypassed the downstairs security just by having the right keys and a little bit of know-how.
[01:01:50.190 --> 01:01:51.930]  You're going to see a video of that happening.
[01:01:52.110 --> 01:01:55.530]  We might even play it twice if you don't catch it all because it's really fast.
[01:01:55.950 --> 01:01:59.490]  You're going to hear Howard and I say things like phase one, phase two.
[01:01:59.790 --> 01:02:08.930]  What we're doing is very quickly, with our own duplicate set of keys, flipping one mode, the next mode, registering a call, and I'm jumping on the cabinet.
[01:02:09.650 --> 01:02:12.430]  This is us getting in the back entrance of the facility.
[01:02:12.430 --> 01:02:14.050]  You can see the security cam.
[01:02:14.210 --> 01:02:14.970]  Door is locked.
[01:02:16.050 --> 01:02:17.190]  Door is not locked properly.
[01:02:19.170 --> 01:02:20.050]  Here's the elevator.
[01:02:21.110 --> 01:02:26.350]  We can get it to open its doors for us, but the only way we're getting to drive it up is with keys.
[01:02:27.690 --> 01:02:28.570]  I'm outside.
[01:02:28.730 --> 01:02:29.150]  He's inside.
[01:02:30.710 --> 01:02:31.390]  Phase one.
[01:02:31.650 --> 01:02:32.170]  Phase two.
[01:02:33.210 --> 01:02:34.190]  Call is registered.
[01:02:34.370 --> 01:02:37.010]  I can pull my key, join him in the car.
[01:02:37.570 --> 01:02:39.870]  Bobic and I have done this at various facilities before.
[01:02:40.650 --> 01:02:47.230]  And also, when you're doing that, you're not throwing all of the elevators into, you know, fire service panic where they all drop down.
[01:02:47.230 --> 01:02:55.830]  Well, just to clarify, for at least the moment that you've put the car on phase one, it is the bank of elevators will be on phase one.
[01:02:56.090 --> 01:03:08.450]  Now, in this case, we simply just turned it on that one car into phase two, and then yank the key from the outside, effectively turning off immediately, you know, within seconds, you know, to not disturb people within the building, right?
[01:03:08.450 --> 01:03:08.930]  Yeah.
[01:03:09.370 --> 01:03:14.690]  So everyone else did briefly experience that jewel flash on and off, but hopefully they, you know, didn't panic.
[01:03:14.950 --> 01:03:22.850]  And if we can just do another quick disclaimer, we feel like we're trained professionals, and there is a whole story to this particular job where we filmed this.
[01:03:23.090 --> 01:03:25.970]  We accidentally took this elevator out of service, and it was a big deal.
[01:03:26.310 --> 01:03:28.670]  Yeah, it took us like 20, 30 minutes of monkeying around.
[01:03:28.970 --> 01:03:29.830]  It was like phone calls.
[01:03:29.990 --> 01:03:31.130]  I don't know what I broke.
[01:03:31.130 --> 01:03:32.610]  Yeah, the controller got unhappy.
[01:03:32.830 --> 01:03:36.130]  So again, like this is a really cool end run around security.
[01:03:36.510 --> 01:03:37.950]  Be aware of how that works.
[01:03:37.950 --> 01:03:46.270]  Be aware that you shouldn't just maybe look at the New York Post and get the keys like Yost talked about in his talk, and be like, well, I'm gonna get some fire keys.
[01:03:46.490 --> 01:03:48.990]  And New York Post said, there's no way anyone could ever do that.
[01:03:49.450 --> 01:03:53.950]  So yeah, just because you think you can get the keys from a little low res photo...
[01:03:54.870 --> 01:03:56.310]  Oh, f*ck low res photos, right?
[01:03:56.410 --> 01:04:04.010]  So this is a really high res photo of the New York City fire key, the infamous 2642 key.
[01:04:04.970 --> 01:04:08.250]  Would you be interested to know that A, this is an unrestricted blank.
[01:04:08.450 --> 01:04:09.830]  This is a standard Yale key.
[01:04:10.290 --> 01:04:14.950]  Or as Yost found out when he was looking at the photos, it's also the same blank, you know, that ABUS uses.
[01:04:15.190 --> 01:04:17.550]  So he cut a nice little ABUS just looking at this.
[01:04:17.850 --> 01:04:22.070]  And as he was, you know, looking and cutting and measuring, he's like, that is not right.
[01:04:22.390 --> 01:04:22.970]  Is this right?
[01:04:23.350 --> 01:04:25.250]  And I said, oh, yeah, I found out about that.
[01:04:25.650 --> 01:04:28.070]  Would you like to know the bidding code for this key?
[01:04:29.630 --> 01:04:41.030]  Would you believe that I'm not really breaking security here when I tell you that 2642 is the name of the key for years, because 26420 is the f*cking bidding code for the New York City fire key?
[01:04:42.570 --> 01:04:44.830]  So they could yell at that one guy on eBay all they want.
[01:04:44.990 --> 01:04:47.770]  Like everyone has had the name and the bidding of this key forever.
[01:04:48.970 --> 01:04:58.050]  Yeah, and what's really weird about it though, it just goes to show you how slow things can change in this industry, is that that post article ran in like 2008, I think.
[01:04:58.330 --> 01:04:58.590]  Yeah.
[01:04:58.630 --> 01:05:03.930]  And this has been going on for years before that even, that people were selling these keys online and on eBay.
[01:05:04.190 --> 01:05:11.230]  And just to be clear, I'm pretty sure that NYPD treats unauthorized possession of this key as possession of burglar's tools.
[01:05:11.490 --> 01:05:12.230]  Probably, probably.
[01:05:12.390 --> 01:05:13.490]  So you probably shouldn't carry this.
[01:05:13.550 --> 01:05:18.790]  You probably also shouldn't carry the one that works in all of New Jersey, all of New Hampshire, in all of Massachusetts.
[01:05:19.590 --> 01:05:20.930]  That's the 3502 key.
[01:05:21.150 --> 01:05:22.870]  Which is also an unrestricted blank.
[01:05:23.310 --> 01:05:25.650]  And which also has a really stupid bidding code.
[01:05:27.510 --> 01:05:27.990]  No.
[01:05:28.510 --> 01:05:28.810]  Just kidding.
[01:05:28.810 --> 01:05:28.830]  All right.
[01:05:28.910 --> 01:05:30.550]  So the tool... they're already freaking yelling at us.
[01:05:30.670 --> 01:05:32.490]  That's clearly... that's not the bidding code.
[01:05:32.630 --> 01:05:34.530]  That would be too... that's actually the real bidding code.
[01:05:36.430 --> 01:05:37.970]  Yeah, get the video later, I guess.
[01:05:40.110 --> 01:05:43.570]  One more thing about fire service and interesting fire operations.
[01:05:43.590 --> 01:05:47.010]  It involves the BACnet, the Building Automation Control Network.
[01:05:47.430 --> 01:05:50.190]  Brad Bowers did an amazing talk about this a couple of places.
[01:05:50.670 --> 01:05:55.070]  It has to do with the network-enabled communication in a building where...
[01:05:55.070 --> 01:06:00.510]  Like, as Howard said, if there's a fire, but it's not in, like, the lobby, the fire service might not trip.
[01:06:00.770 --> 01:06:05.490]  Well, a big building owner might want the elevators to go on a fire service if there's a fire anywhere else.
[01:06:05.610 --> 01:06:07.830]  There are ways of communicating between systems.
[01:06:08.050 --> 01:06:09.230]  Hey, there's this condition.
[01:06:09.370 --> 01:06:10.190]  Hey, there's that condition.
[01:06:10.330 --> 01:06:11.550]  The HVAC is having a problem.
[01:06:11.630 --> 01:06:12.710]  There's a fire sensor here.
[01:06:13.230 --> 01:06:19.450]  Learning how to sniff and spoof stuff on the BACnet can cause very interesting things to happen in a big building.
[01:06:19.790 --> 01:06:27.230]  And actually, if I'm not mistaken, I mentioned that dry contacts and just simply completing a circuit is the primary means by which elevators will use to enable these various modes.
[01:06:27.230 --> 01:06:31.990]  But actually, NFPA 2012 requires that dry contacts not be used.
[01:06:32.470 --> 01:06:35.610]  And Brad gets into that extensively in that talk, so it's worth checking out.
[01:06:35.690 --> 01:06:36.450]  Yeah, check out his talk.
[01:06:36.570 --> 01:06:37.130]  He's an awesome guy.
[01:06:38.390 --> 01:06:44.010]  The last most powerful thing you can do to get around a building, and again, we're not advocating it.
[01:06:44.090 --> 01:06:47.550]  We're just gonna, you know, look cool while not dying and doing it.
[01:06:48.450 --> 01:06:49.270]  Hoistway access.
[01:06:49.270 --> 01:06:52.670]  As we said, who is more powerful than a fire operator?
[01:06:52.870 --> 01:06:53.930]  An elevator operator.
[01:06:54.370 --> 01:06:57.790]  Somebody driving the car from in the hoistway itself.
[01:06:58.130 --> 01:07:04.530]  Would you like to see what it looks like to get to a restricted floor by doing something that my mom thought was way too unsafe and got upset?
[01:07:06.930 --> 01:07:08.950]  Here we have a secure building.
[01:07:09.490 --> 01:07:12.650]  The footage on the lower right is the floor where we're all standing.
[01:07:12.950 --> 01:07:16.970]  The footage on the upper right is the destination we want to be.
[01:07:17.750 --> 01:07:18.830]  What are we going to do?
[01:07:19.010 --> 01:07:24.790]  Well, we're going to seize the top of the elevator by catching the, you know, the cab in between floors.
[01:07:25.970 --> 01:07:32.490]  Getting on top of that elevator where only two of the three people in this footage have any business being.
[01:07:33.070 --> 01:07:35.630]  And somehow they didn't kick me out and let me come along.
[01:07:37.050 --> 01:07:40.100]  There is, as we said, there are car top run controls.
[01:07:40.950 --> 01:07:44.990]  And people at, let's say, MIT have known this for years.
[01:07:44.990 --> 01:07:47.990]  How many people have ever heard of the late night elevator rides at MIT?
[01:07:48.630 --> 01:07:50.130]  Yeah, this is what's happening.
[01:07:50.790 --> 01:07:51.690]  This is what you're doing.
[01:07:51.850 --> 01:07:54.350]  You're actually taking the elevator out of operation.
[01:07:54.350 --> 01:07:59.450]  You're running it on inspection mode and doing whatever the hell you want.
[01:07:59.910 --> 01:08:01.130]  There's floor lockouts?
[01:08:01.370 --> 01:08:01.790]  F*ck you.
[01:08:02.210 --> 01:08:03.310]  There's badge for this elevator?
[01:08:03.430 --> 01:08:03.930]  F*ck you.
[01:08:04.130 --> 01:08:05.910]  There's a fireman who wants to use the elevator?
[01:08:06.070 --> 01:08:06.550]  F*ck you.
[01:08:07.550 --> 01:08:10.910]  I'm running it from the car top and I can go any direction we want.
[01:08:11.290 --> 01:08:12.830]  We can go any direction up or down.
[01:08:12.970 --> 01:08:13.770]  We can go, here we are.
[01:08:13.950 --> 01:08:15.930]  And sure enough, Howard's driving it up.
[01:08:16.050 --> 01:08:17.270]  We get to the next floor.
[01:08:17.910 --> 01:08:22.270]  What kind of security locks do you think exist inside the hoistway doors?
[01:08:22.270 --> 01:08:22.390]  There we go.
[01:08:23.010 --> 01:08:23.290]  On three.
[01:08:23.590 --> 01:08:24.230]  Basically zero.
[01:08:25.550 --> 01:08:26.310]  There we are.
[01:08:26.490 --> 01:08:27.890]  Now, actually...
[01:08:27.890 --> 01:08:29.730]  And we step out.
[01:08:30.890 --> 01:08:36.910]  Now, the NYFD actually allows you to use a lock to secure your hoistway door.
[01:08:37.430 --> 01:08:39.790]  It just has to be the 2642 key.
[01:08:42.650 --> 01:08:44.410]  So yeah, hoistway rides, right?
[01:08:44.910 --> 01:08:47.450]  Now, were we using any special keys at all?
[01:08:47.690 --> 01:08:48.010]  Yes.
[01:08:48.450 --> 01:08:49.870]  We were using a different kind of key though, right?
[01:08:50.570 --> 01:08:50.830]  Sure.
[01:08:51.210 --> 01:08:55.410]  So, if you ever see that little hole in the corner of the door, that's what's called an escutcheon hole.
[01:08:55.410 --> 01:08:58.970]  And an elevator mechanic will use a tool like this, a drop key.
[01:08:59.710 --> 01:09:01.470]  And essentially, they're just reaching inside.
[01:09:01.710 --> 01:09:08.150]  When that metal flag drops down, they can rotate the key, lift up on the flag that's attached to the release mechanism, the door opens.
[01:09:08.850 --> 01:09:10.470]  There are all kinds of different keys.
[01:09:10.730 --> 01:09:15.350]  It's really not worth getting into the different distinctions between all of these, but every door has a key.
[01:09:15.510 --> 01:09:16.190]  Let's just put it that way.
[01:09:16.350 --> 01:09:19.810]  And some people who weren't authorized were using these keys interesting ways, right?
[01:09:20.050 --> 01:09:20.490]  Absolutely.
[01:09:20.490 --> 01:09:27.510]  So, New York City Housing Authority is the single largest owner of elevators in the world, according to my understanding.
[01:09:28.030 --> 01:09:33.070]  And they have a unique experience with unauthorized use of hoist away door keys.
[01:09:34.410 --> 01:09:41.210]  And as this slide might suggest, what people were doing was hiding drugs inside elevator doors.
[01:09:41.650 --> 01:09:44.150]  Because I guess they figured, hey, you know, who's going to look there?
[01:09:44.550 --> 01:09:45.990]  Well, besides an elevator mechanic, right?
[01:09:46.150 --> 01:09:48.690]  But they probably knew, hey, no one's taking care of these elevators anyway.
[01:09:49.970 --> 01:09:58.150]  So, what people would do is they'd have a door key, they'd open it up, they would tape the drugs to the inside of the door where no one else could get to it, and then say, hey, I left it in that spot.
[01:09:58.510 --> 01:10:00.210]  Yeah, it's in that place I put that thing that time.
[01:10:00.330 --> 01:10:02.970]  So, of course, there's a solution for this, right?
[01:10:04.530 --> 01:10:07.510]  So, the industry came out with escutcheon hole locks.
[01:10:07.790 --> 01:10:14.150]  They said, all right, you've got this little hole, and you don't want people sticking things through it, we'll make you a little lock that will fit right in.
[01:10:14.270 --> 01:10:21.830]  It'll have this mounting collar, and then if you slip the lock through, it'll just plug up the hole and will give you, you know, that nice high-security tubular key, right?
[01:10:22.750 --> 01:10:25.710]  So, we have the tubular key, opens the lock.
[01:10:25.850 --> 01:10:32.210]  It's just a little rotating tailpiece, just this little tail bit interacting with the fat collar on the other side.
[01:10:32.390 --> 01:10:37.810]  And if you don't catch what's happening there, you can see back here, the tailpiece is clear or the tailpiece is blocking.
[01:10:38.090 --> 01:10:40.470]  Very simple mechanism, really neat idea, right?
[01:10:41.350 --> 01:10:43.950]  Now, as I said, you know, tubular locks are what?
[01:10:44.370 --> 01:10:46.270]  Tubular locks are awesome, right?
[01:10:46.790 --> 01:10:48.330]  No, tubular locks are pretty bad.
[01:10:49.070 --> 01:10:51.890]  Here's the nice tubular pick that Tool happens to have downstairs.
[01:10:52.730 --> 01:10:53.810]  Try it, try it, try it.
[01:10:54.650 --> 01:10:56.230]  All right, well, that's kind of turning.
[01:10:56.990 --> 01:10:58.710]  And now that looks pretty turned all the way.
[01:10:59.630 --> 01:11:02.710]  The hardest part, just getting the lock out of the hole.
[01:11:02.910 --> 01:11:03.610]  There we go.
[01:11:04.410 --> 01:11:06.930]  Now, you might think that, like, oh, man, that's terrible.
[01:11:07.070 --> 01:11:12.810]  I guess they should use, like, an Ace, you know, 2, or a really nice quality tubular lock, or maybe something better than a tubular.
[01:11:13.230 --> 01:11:21.610]  Well, there's a much more fundamental problem that Howard realized as soon as he, you know, bought one of these to play with it, and he showed it to me, and I was like, no way, that can't happen this way, can it?
[01:11:22.970 --> 01:11:28.470]  So, if you go to the next slide, you'll see that there's a, there's a tapered edge on the side that faces the general public.
[01:11:28.610 --> 01:11:31.710]  So, grabbing it with a tool from the outside is actually a little bit difficult.
[01:11:31.850 --> 01:11:31.950]  Right.
[01:11:31.950 --> 01:11:33.150]  Unless that tool...
[01:11:33.150 --> 01:11:34.470]  Do you see how this installs, right?
[01:11:34.610 --> 01:11:37.450]  You see the collar has got two halves that screw together?
[01:11:38.330 --> 01:11:43.770]  So, if you're outside, and you have the real key, you interact with the lock plug.
[01:11:44.290 --> 01:11:45.990]  That's called the speedy key.
[01:11:46.870 --> 01:11:55.970]  If you happen to have any other tubular key ever, it won't interact with the tailpiece the right way.
[01:11:56.170 --> 01:12:01.930]  What it'll do with the application of a little bit of extra torque is just start unscrewing the whole mounting collar.
[01:12:08.610 --> 01:12:12.390]  So, yeah, this is the slower key, because you've got to turn it a whole bunch of times.
[01:12:15.230 --> 01:12:17.270]  So, there's your, there's your escutcheon hole lock.
[01:12:17.470 --> 01:12:17.590]  Open.
[01:12:17.670 --> 01:12:18.170]  Yay, open.
[01:12:18.170 --> 01:12:19.050]  Yeah.
[01:12:21.630 --> 01:12:25.990]  But ultimately, beyond that, forget getting in the hoist way.
[01:12:26.430 --> 01:12:26.530]  Yeah.
[01:12:26.910 --> 01:12:27.230]  Hi there.
[01:12:28.130 --> 01:12:29.250]  Getting in the machine room.
[01:12:29.590 --> 01:12:34.150]  Getting in the motor room is absolutely the end-all be-all for a lot of this stuff.
[01:12:34.150 --> 01:12:34.750]  Right.
[01:12:34.910 --> 01:12:38.770]  So, everybody here is probably in information security or has some kind of IT experience.
[01:12:38.990 --> 01:12:40.910]  So, we've come up with this kind of analogy.
[01:12:41.610 --> 01:12:48.670]  That we've explained, you know, people with keys obviously have privileges, and, you know, administrators and service people within the building have escalating privileges as you go up the line.
[01:12:48.950 --> 01:12:55.770]  But when you're in that machine room, there's a fundamental difference between being on top of the car, where you can control it without any exception.
[01:12:56.070 --> 01:13:01.730]  And that, the only exception being that someone in the machine room could literally just disconnect the run box that you're controlling.
[01:13:01.730 --> 01:13:02.150]  Yeah.
[01:13:02.250 --> 01:13:05.610]  So, to that extent, somebody in the machine room sort of has hypervisor access.
[01:13:05.750 --> 01:13:09.830]  They could actually change the parameters of the universe as the elevator controller sees it.
[01:13:10.550 --> 01:13:18.930]  Now, whether it's through a direct interface like you're seeing here, there are actually monitors, keyboards, and mice that are connected to modern elevators that are solid-state controlled.
[01:13:19.230 --> 01:13:25.590]  What you're seeing there was a group controller, so it is showing you all of the elevators in a particular bank and how they're interacting with the demand.
[01:13:27.310 --> 01:13:33.990]  But again, if there's just dry contacts, somebody in that motor room can do a whole heck of a lot with just a single piece of wire.
[01:13:34.430 --> 01:13:37.030]  And, as it turns out, we do that all the time.
[01:13:37.550 --> 01:13:44.230]  In fact, part of our job very frequently would involve jumping out various safety circuits during testing, which we'll get into in a second.
[01:13:44.430 --> 01:13:46.790]  Like, an elevator's never supposed to run if the doors are open.
[01:13:47.270 --> 01:13:50.790]  Really, in the beginning, an elevator's never supposed to run if it's on its finals.
[01:13:51.030 --> 01:13:53.490]  If it hits the final limit, that elevator's dead, right?
[01:13:53.490 --> 01:13:55.990]  What does an elevator mechanic come out and fix?
[01:13:56.550 --> 01:13:57.750]  He jumps out the final.
[01:13:58.170 --> 01:14:00.370]  He just says, no, that circuit's not actually tripped.
[01:14:01.150 --> 01:14:02.790]  And then drives the elevator manually.
[01:14:03.030 --> 01:14:04.830]  There's a lot of interesting things.
[01:14:05.010 --> 01:14:09.770]  And when I started looking at some of the stuff you showed me in elevator rooms, you really start seeing notes everywhere.
[01:14:10.010 --> 01:14:15.070]  Yeah, so it's hard to memorize all the different places you have to connect the wires to do various different things.
[01:14:15.210 --> 01:14:20.050]  So there's sort of a trend in the industry to use elevator graffiti, as they like to call it.
[01:14:20.050 --> 01:14:26.390]  And basically, you write down, for the guy that's coming in behind you, what contact points you're working on.
[01:14:26.550 --> 01:14:31.290]  Yeah, you can see the governor jumper's here, the door locks are here, the car station's here.
[01:14:31.650 --> 01:14:34.050]  All the interlocks, they're just listing them on this graffiti site.
[01:14:34.210 --> 01:14:42.390]  But what's interesting is, whoever did this was obviously a little bit concerned that this information shouldn't be leaked to the general public, because they put it on the inside of the mainline disconnect switch.
[01:14:42.710 --> 01:14:45.350]  You know, because who's going to open up the mainline disconnect switch, right?
[01:14:45.530 --> 01:14:46.250]  Well, an elevator guy.
[01:14:46.250 --> 01:14:46.690]  I guess.
[01:14:46.970 --> 01:14:47.090]  Yeah.
[01:14:47.190 --> 01:14:48.450]  Actually, you're really never supposed to.
[01:14:48.690 --> 01:14:48.970]  Really?
[01:14:49.110 --> 01:14:49.350]  Really.
[01:14:49.490 --> 01:14:51.830]  Only if you have to, like, recycle the power because you're some bozo.
[01:14:51.830 --> 01:14:52.070]  That's for the electricians.
[01:14:53.210 --> 01:14:59.830]  But this is what people like Howard do to drive an elevator way beyond normal operation.
[01:15:00.110 --> 01:15:03.510]  When you do, like, a five-year test, what do you end up doing?
[01:15:03.510 --> 01:15:07.850]  It's a full load, full speed hit into the buffer, right?
[01:15:07.850 --> 01:15:08.030]  Yeah.
[01:15:08.890 --> 01:15:22.890]  When you have a traction elevator, a cable-driven elevator, every five years, you're going to put the capacity of the car plus a little bit extra, usually lead test weights, somebody will card them in, put it inside the cab, and at full speed, you'll then allow the car...
[01:15:22.890 --> 01:15:24.610]  At full speed, you'll crash into the buffer.
[01:15:24.810 --> 01:15:26.250]  But you also have to test the governor.
[01:15:26.670 --> 01:15:27.510]  You test the safeties.
[01:15:27.710 --> 01:15:32.730]  So you'll actually overspeed the car and force it to trip electrically and mechanically.
[01:15:32.730 --> 01:15:33.970]  So think about that for a second.
[01:15:34.310 --> 01:15:34.430]  Yeah.
[01:15:34.550 --> 01:15:37.430]  You overspeed it once, make it trip electrically, it should stop.
[01:15:37.690 --> 01:15:42.550]  Then you have to bypass the electrical portion of the safety, and then actually make it trip mechanically.
[01:15:42.690 --> 01:15:44.090]  It is a fantastic sight to see.
[01:15:44.130 --> 01:15:45.110]  Yeah, the idea...
[01:15:45.110 --> 01:15:51.650]  You know how many people you talk to your friends about having good backups, and you say, well, have you ever actually, like, tried to restore from your backups?
[01:15:51.750 --> 01:15:54.030]  Have you ever wiped your system and seen if the restore worked?
[01:15:54.110 --> 01:15:55.990]  And I was like, no, that would freak me out.
[01:15:56.350 --> 01:15:58.210]  The elevator industry does this, man.
[01:15:58.370 --> 01:15:59.970]  They actually run these tests.
[01:15:59.970 --> 01:16:03.230]  What you're about to see looks like a catastrophic accident.
[01:16:03.710 --> 01:16:04.970]  This is not an accident.
[01:16:05.510 --> 01:16:16.210]  Everything you're seeing bypassing any number of safety mechanisms, which have all been jumped out by someone in the machine room, is crashing an elevator down into the pit buffer after 40 floors.
[01:16:17.470 --> 01:16:18.550]  And here we come.
[01:16:22.880 --> 01:16:26.320]  Someone like him manually was doing that from the machine room.
[01:16:27.260 --> 01:16:31.140]  And it's actually cool, because that's what you're trying to do in the situation.
[01:16:31.140 --> 01:16:33.560]  You want to make sure that the buffer is able to take a hit at that speed.
[01:16:35.020 --> 01:16:38.620]  You should not be doing this if you don't know what you're doing in the machine room.
[01:16:39.800 --> 01:16:42.400]  This guy is a 35-year industry vet.
[01:16:42.680 --> 01:16:47.280]  He's explaining that he came up with a clever solution for a clutter of spaghetti wiring.
[01:16:48.360 --> 01:16:51.580]  He's like, okay, I got my wires, and these wires carry what kind of current?
[01:16:53.020 --> 01:16:55.000]  They carry very nice heavy current.
[01:16:56.780 --> 01:16:59.740]  Oh, jeez, what the hell is that?
[01:17:03.540 --> 01:17:11.100]  Yeah, if you don't know what you're doing, jump ring contacts, if you don't know what you're doing at all in the machine room, you probably shouldn't be in the machine room.
[01:17:11.480 --> 01:17:11.960]  Right.
[01:17:12.240 --> 01:17:13.580]  Close this section out with that fun story.
[01:17:13.580 --> 01:17:13.980]  Sure.
[01:17:14.240 --> 01:17:21.620]  So, we were saying before that somebody in the motor room can sort of change the parameters of the universe as it exists to the elevator controller.
[01:17:22.180 --> 01:17:27.900]  Now, anybody from New York City knows that when POTUS comes to town, everything shuts down.
[01:17:28.280 --> 01:17:28.560]  Right?
[01:17:28.740 --> 01:17:30.140]  Like, gridlock everywhere.
[01:17:30.600 --> 01:17:35.000]  You know, no one can do anything, because, you know, the big man's in town.
[01:17:35.620 --> 01:17:39.960]  The point being, though, that the president never just gets on an elevator.
[01:17:40.480 --> 01:17:42.200]  It's not just that simple, right?
[01:17:42.400 --> 01:17:56.340]  In terms of actually securing it, I know that somewhere, somebody's got a pretty good idea that motor rooms need to be secured, because when he comes to town and he has to ride an elevator, there will be a secret service agent in the motor room with an elevator mechanic.
[01:17:56.880 --> 01:18:01.360]  I don't want to say that the mechanic's kind of at gunpoint, but, you know, if he, you know, pretty much.
[01:18:01.720 --> 01:18:03.320]  Anything goes wrong with that elevator.
[01:18:03.460 --> 01:18:05.660]  It stops between floors or what's going on.
[01:18:05.740 --> 01:18:06.620]  They're on the radios.
[01:18:06.620 --> 01:18:09.920]  They're saying, get this thing moving down to the parking deck now.
[01:18:09.920 --> 01:18:11.840]  I don't care what you have to jumper out.
[01:18:12.060 --> 01:18:13.000]  Kill all those safeties.
[01:18:13.200 --> 01:18:14.380]  Move, move, move, move, move.
[01:18:14.700 --> 01:18:20.100]  The last verifiable elevator entrapment involving a president that I'm aware of was Lyndon B.
[01:18:20.200 --> 01:18:20.420]  Johnson.
[01:18:21.620 --> 01:18:22.980]  That must have sounded hilarious.
[01:18:23.300 --> 01:18:24.460]  I can just picture his voice.
[01:18:25.500 --> 01:18:32.120]  Speaking of listening to people's voices and talking and stuff in elevators, we're going to hit really quick on a little freaking section for you, if you don't mind.
[01:18:33.040 --> 01:18:33.480]  Sure.
[01:18:34.420 --> 01:18:34.720]  So...
[01:18:34.720 --> 01:18:35.200]  Talk about phones.
[01:18:35.460 --> 01:18:36.920]  Elevators have phones, right?
[01:18:37.820 --> 01:18:40.200]  Two-way voice communication shall be required.
[01:18:40.620 --> 01:18:42.480]  That's part of the elevator safety code.
[01:18:42.840 --> 01:18:48.040]  The idea is that if you're in an emergency situation, you can simply hit a button.
[01:18:48.500 --> 01:18:51.180]  And I'm sorry, actually, I may have said voice communication shall be required.
[01:18:51.320 --> 01:18:54.260]  It's actually voice communication shall not be required, to clarify.
[01:18:54.260 --> 01:18:58.600]  The idea being that if you're unable to communicate, maybe you just don't speak English.
[01:18:59.160 --> 01:19:12.760]  You know, but for whatever reason, if you're not able to communicate the circumstances that there is an emergency, there's usually a pre-programmed message on those phones that, when you hit the button, gets a dial tone, dials out, plays the message.
[01:19:13.080 --> 01:19:16.140]  Sometimes they dial 911, so don't just hit the button willy-nilly.
[01:19:16.980 --> 01:19:21.540]  Now, what you're seeing here is an example of a non-compliant emergency phone.
[01:19:21.540 --> 01:19:28.260]  Now, not only do you need hands to operate this, but you need to be able to speak.
[01:19:28.480 --> 01:19:28.600]  Yeah.
[01:19:29.080 --> 01:19:30.560]  Now, here's the right kind of phone.
[01:19:30.720 --> 01:19:33.620]  It's just installed behind a panel that you need hands for.
[01:19:33.840 --> 01:19:35.340]  So, like, maybe that's compliant.
[01:19:35.340 --> 01:19:36.000]  I don't really know.
[01:19:36.820 --> 01:19:40.640]  But in general, understand that these are real phone lines.
[01:19:40.800 --> 01:19:44.200]  The elevator has a phone line running through its traveler cable to every car.
[01:19:44.200 --> 01:19:54.120]  If you can get to those phone lines, either up in the machine room or maybe on the phone itself, who wouldn't want, like, just an unsecured phone line that they could do almost whatever they want with?
[01:19:54.220 --> 01:19:58.000]  There's nobody in this room would ever think of things they could, like, box on that phone line, right?
[01:19:58.920 --> 01:20:00.280]  Beige block or something?
[01:20:00.280 --> 01:20:00.380]  Yeah.
[01:20:00.560 --> 01:20:04.340]  So, most of these lines are sometimes limited to local calls only.
[01:20:04.540 --> 01:20:06.640]  But it's not about always dialing out.
[01:20:07.080 --> 01:20:11.600]  It's about dialing in, where we start to get interested in some of the intelligence fields.
[01:20:12.000 --> 01:20:17.860]  So, learning that phone line, like, calling and IDing that line, or the old 258 trick might used to work.
[01:20:18.040 --> 01:20:21.840]  Or just, you know, looking inside the panel, finding the phone number from there.
[01:20:21.840 --> 01:20:26.660]  Or looking at the freaking, like, the sign outside of an elevator, why this is here?
[01:20:27.840 --> 01:20:29.100]  Anybody's guess is as good as mine.
[01:20:29.280 --> 01:20:35.340]  The only thing I came up with was that there were just such a frequent amount of entrapments that the building owner said, hey, let's put up a sign.
[01:20:35.340 --> 01:20:38.360]  So this way, when someone's stuck, we can just call and find out what's going on.
[01:20:39.200 --> 01:20:49.120]  Most of these phones, however, elevator phones are designed to automatically pick up, silently, and be on speaker after one ring, if you call them.
[01:20:49.720 --> 01:20:56.840]  So, if you were to call the elevator number, maybe you're just a real freaking big troll, and you want to make people think they're hearing voices all the time.
[01:20:58.280 --> 01:21:00.860]  And you just be like, I'm the elevator, I'm watching you.
[01:21:01.020 --> 01:21:02.820]  Help, help, they've turned me into an elevator.
[01:21:06.970 --> 01:21:14.230]  But, the bigger problem than people being, you know, Jackie with this kind of stuff, is calling an elevator phone and not saying anything at all.
[01:21:14.730 --> 01:21:17.270]  And listening to what's being said in the elevator.
[01:21:17.270 --> 01:21:23.850]  This is an actual concern, whether it's based on the phone system, or even some just have intercoms up in the machine room.
[01:21:24.190 --> 01:21:38.110]  When big people come to town, and let's say down in the Beltway, people who officially don't work for the phone company, but kind of work for the phone company, and have a lot of clearance, are at the phone company, monitoring certain lines, saying, why is there activity on that line?
[01:21:38.270 --> 01:21:39.290]  Is somebody stuck in an elevator?
[01:21:40.650 --> 01:21:42.810]  Tell somebody to trace whatever's going on with that line.
[01:21:42.950 --> 01:21:44.570]  Somebody shouldn't be calling that elevator right now.
[01:21:44.570 --> 01:21:46.090]  Who's listening in, et cetera.
[01:21:47.110 --> 01:21:50.030]  But, understanding how these phone systems work, you can do...
[01:21:50.030 --> 01:21:51.710]  If you're interested in this stuff, you can do a lot.
[01:21:52.350 --> 01:21:52.490]  Yeah.
[01:21:52.950 --> 01:21:59.490]  So, one of the most concerning things, when I started researching elevator emergency phones, was that I needed to change the combination on my luggage.
[01:22:03.010 --> 01:22:04.070]  So, but it's okay.
[01:22:04.250 --> 01:22:07.010]  Because, obviously, this is, you know, security through obscurity.
[01:22:07.190 --> 01:22:08.690]  It's not like this information is published...
[01:22:08.690 --> 01:22:09.090]  Oh.
[01:22:11.110 --> 01:22:11.530]  Slide.
[01:22:11.530 --> 01:22:17.430]  So, again, even if it wasn't published online, right, it's not like they're just putting the instruction manual in the phone.
[01:22:17.570 --> 01:22:18.790]  In the phone cabinet, right?
[01:22:19.570 --> 01:22:19.890]  Shit.
[01:22:20.310 --> 01:22:20.370]  Yeah.
[01:22:20.830 --> 01:22:21.430]  So, there's that.
[01:22:21.710 --> 01:22:22.090]  Like...
[01:22:22.090 --> 01:22:23.930]  Not even Nicolas Cage can believe this.
[01:22:27.690 --> 01:22:29.530]  Let's talk about some other unbelievable stuff.
[01:22:30.190 --> 01:22:33.110]  Let's talk about, for a minute, everything that's wrong in movies.
[01:22:33.450 --> 01:22:35.810]  Because Hollywood loves them some elevators, man.
[01:22:35.910 --> 01:22:36.810]  They're a great plot device.
[01:22:37.230 --> 01:22:39.590]  How many people have seen, you know, like, bulletproof elevators?
[01:22:39.970 --> 01:22:42.230]  Like, oh, they gotta get away, and they're shooting at me.
[01:22:42.290 --> 01:22:45.490]  But the elevator door has that nice dimpling on the inside, right?
[01:22:45.550 --> 01:22:46.590]  Where the bullets are striking.
[01:22:47.270 --> 01:22:48.670]  That's all f*cking bollocks.
[01:22:48.910 --> 01:22:49.270]  That's nonsense.
[01:22:49.270 --> 01:22:50.850]  It penetrates the outer door, but not the inner door.
[01:22:51.350 --> 01:22:52.970]  Because it slows down from the outer door.
[01:22:53.210 --> 01:22:55.510]  Like, the detective is chasing a criminal down the hall.
[01:22:55.650 --> 01:22:57.730]  And we know why movies like elevators, right?
[01:22:57.750 --> 01:22:58.450]  It's that suspense.
[01:22:58.450 --> 01:23:00.170]  So, is the door gonna close on time?
[01:23:00.290 --> 01:23:00.950]  Is he gonna get it?
[01:23:01.050 --> 01:23:01.730]  Oh, he's got his gun.
[01:23:01.830 --> 01:23:02.190]  BAM!
[01:23:02.750 --> 01:23:03.110]  No.
[01:23:03.430 --> 01:23:08.870]  Like, if he was a half-step slower, he still would've shot right through that door and mowed down anyone inside.
[01:23:09.470 --> 01:23:10.750]  Elevators are not bulletproof.
[01:23:10.970 --> 01:23:14.290]  Please don't hide from an assailant in an elevator if you're in the middle of a gun battle.
[01:23:15.990 --> 01:23:23.050]  Everything you've ever seen with an elevator that involves, like, a crazy box and clipping wires, and I'm gonna hack-sore the box-sore and the Gibson...
[01:23:23.050 --> 01:23:23.970]  No, like...
[01:23:24.450 --> 01:23:25.470]  What's he clipping to here?
[01:23:25.470 --> 01:23:29.350]  This is 3,000 miles to Graceland, and this is the scene where he's hacking the elevator in the casino.
[01:23:29.350 --> 01:23:32.450]  He needs to, you know, get to some floor and not let security know he's there.
[01:23:32.450 --> 01:23:33.770]  So, it's interesting.
[01:23:33.970 --> 01:23:42.810]  He clips his alligator clips onto a timing crystal, right there, and onto the outside of an electrolytic capacitor there, on the emergency phone.
[01:23:43.290 --> 01:23:43.650]  Yeah.
[01:23:44.650 --> 01:23:48.450]  But he's got his big seven-segment display and everything, so he's, you know, he's rocking it out.
[01:23:48.470 --> 01:23:51.530]  And then he's gonna cut off the emergency phone that he just clipped to, so he's good.
[01:23:53.790 --> 01:23:58.110]  But yeah, all of these boxes that you see, I mean, this doesn't exist, it's all Hollywood magic.
[01:23:58.430 --> 01:24:03.550]  The only thing that's real in that scene is that he blacked out the camera, because most elevators, you know, have cameras nowadays.
[01:24:03.550 --> 01:24:05.130]  He didn't have to do that.
[01:24:05.290 --> 01:24:12.210]  If you're interested to know about a lot of elevator cameras, there's way easier ways than using stickers or black paint to disable them.
[01:24:12.450 --> 01:24:16.650]  One of the most popular ones in the industry, the Drakacam, you check the manual for this.
[01:24:16.870 --> 01:24:19.930]  The manual will show you it has a little remote control.
[01:24:20.210 --> 01:24:21.430]  Do you know what that remote control does?
[01:24:21.750 --> 01:24:26.090]  It turns the camera off if you just like, bloop, it's like a TV be gone for cameras.
[01:24:31.200 --> 01:24:33.120]  How about everybody's favorite elevator movie, right?
[01:24:33.520 --> 01:24:34.260]  Especially mine.
[01:24:35.080 --> 01:24:36.420]  Yes, speed, of course.
[01:24:37.140 --> 01:24:42.460]  So there are so many interesting things right and wrong about this movie that we would just wind up sounding like these guys.
[01:24:42.800 --> 01:24:45.460]  Buy us a drink later or ask us in the Q&A or ask us downstairs.
[01:24:46.220 --> 01:24:47.800]  We, like, Howard nerded out.
[01:24:47.880 --> 01:24:50.380]  We were watching the rate of plummet and doing some math.
[01:24:50.480 --> 01:24:53.240]  And they actually, it's funny, ask us about speed later.
[01:24:54.100 --> 01:24:57.840]  Everyone, however, has probably seen this plot device at some point or another in a movie.
[01:24:58.080 --> 01:25:01.620]  The idea of, oh, this person, get him in the elevator and, you know, lobby security.
[01:25:01.700 --> 01:25:04.080]  I got someone coming down, arrest that man.
[01:25:04.080 --> 01:25:07.600]  But what does someone in an elevator do when they don't want to go out the normal way?
[01:25:07.840 --> 01:25:11.080]  Well, they flip the stop switch on their Otis Series 1 chiclet fixtures.
[01:25:12.080 --> 01:25:14.400]  And then what's the... they got the secret panel, right?
[01:25:14.520 --> 01:25:20.920]  They got the panel in the roof, which is never locked for some reason in movies and TV, even though it's always locked in real life from the outside.
[01:25:21.160 --> 01:25:22.000]  It's usually locked.
[01:25:22.120 --> 01:25:22.760]  Usually, maybe.
[01:25:23.740 --> 01:25:26.800]  But of course, you know, I'm just going to go up and now they can't find me.
[01:25:26.980 --> 01:25:27.600]  Where'd he go?
[01:25:28.620 --> 01:25:29.640]  He's on the elevator.
[01:25:29.760 --> 01:25:30.400]  They're looking there.
[01:25:31.560 --> 01:25:33.820]  There's nothing else in that hoist way that you can get to.
[01:25:33.920 --> 01:25:35.340]  There's no ladders in the hoist way.
[01:25:35.520 --> 01:25:40.740]  There's no ducts that take you somewhere else to the basement where you find Marvin and get the radio to listen to the terrorists.
[01:25:41.920 --> 01:25:45.980]  The other thing about opening that top hatch is the safety string circuit.
[01:25:46.660 --> 01:25:51.340]  Elevators, as we said, have many different circuits of safety and many different ways of error conditioning.
[01:25:51.640 --> 01:25:58.960]  If anything goes wrong with the elevator that it thinks a door is open or an interlock is open, it'll stop the elevator completely right that moment.
[01:25:59.100 --> 01:26:00.140]  It'll say, whoa, something's not right.
[01:26:00.240 --> 01:26:00.780]  This ain't good.
[01:26:01.260 --> 01:26:03.520]  The top hatch is usually part of this string circuit.
[01:26:03.700 --> 01:26:04.820]  The door locks, et cetera.
[01:26:04.960 --> 01:26:07.140]  So you have, like, Terminator 2, right?
[01:26:07.760 --> 01:26:11.360]  They're running down the hall having a battle, of course, with their bulletproof elevator.
[01:26:11.720 --> 01:26:13.500]  Boom, boom, boom, boom, boom, boom, boom, boom, boom, boom.
[01:26:13.500 --> 01:26:14.040]  Oh, we're safe.
[01:26:14.240 --> 01:26:15.120]  We got in there.
[01:26:15.120 --> 01:26:16.340]  We got to stop those bullets.
[01:26:16.780 --> 01:26:19.120]  But the T-1000 says, well, that's not going to stop me.
[01:26:19.220 --> 01:26:21.160]  I'm going to make my hands claw this thing open.
[01:26:21.400 --> 01:26:23.620]  Right at this moment, that elevator is not running.
[01:26:23.940 --> 01:26:29.900]  Because if the doors, the hoistway doors, put, you know, part open like this, the safety string is broken, the cab is stopped.
[01:26:29.960 --> 01:26:31.740]  But in Hollywoodland, you know, that doesn't happen.
[01:26:31.880 --> 01:26:34.800]  You have an epic gun battle on top of the cab, et cetera, et cetera.
[01:26:35.600 --> 01:26:45.200]  They could have made this scene accurate if the T-1000 had turned his cybernetic alloy fingers, whatever, into a wire jumper, and he had completed the circuit, and they would have kept running.
[01:26:45.480 --> 01:26:45.580]  Yeah.
[01:26:45.780 --> 01:26:46.920]  Maybe that was happening out of picture.
[01:26:47.060 --> 01:26:47.600]  We don't know.
[01:26:49.140 --> 01:26:51.580]  So, like, this is also popular whenever you see...
[01:26:51.580 --> 01:26:52.920]  How many people love this movie, right?
[01:26:53.020 --> 01:26:53.720]  It's a great movie.
[01:26:56.460 --> 01:27:00.820]  So, they got one thing right, like, elevator screwarounds are dangerous in the hoistway.
[01:27:01.520 --> 01:27:03.060]  The rest of this is wrong, though.
[01:27:03.220 --> 01:27:09.060]  Like, other than River Phoenix almost dying, there's no such, you know, there's no pushbacks and setbacks in the elevator.
[01:27:09.280 --> 01:27:11.760]  There's no corridors that take you somewhere else.
[01:27:12.380 --> 01:27:14.960]  There's no lights on the car top, usually like that.
[01:27:15.020 --> 01:27:15.840]  Well, not like that.
[01:27:16.280 --> 01:27:20.720]  And also, there's no door roller, there's no release rollers on the door, so it's a fake hoistway for Hollywood, too.
[01:27:21.300 --> 01:27:26.880]  Pretty much the only movie that really got anything realistic I thought about an elevator was Usual Suspects.
[01:27:27.260 --> 01:27:28.200]  Because another great...
[01:27:28.200 --> 01:27:29.580]  Who likes Usual Suspects as a movie, right?
[01:27:31.580 --> 01:27:36.720]  So, here you're actually going to see why someone as an elevator guy could be a cool assassin.
[01:27:36.940 --> 01:27:38.500]  He's even dressed like an elevator guy.
[01:27:38.860 --> 01:27:41.540]  Secondary career for you, like taking out Kobayashi's lawyers, right?
[01:27:42.060 --> 01:27:44.760]  So, if someone is... because why is this realistic?
[01:27:44.940 --> 01:27:47.120]  Because he's on the car top, he's riding the car top.
[01:27:47.380 --> 01:27:50.020]  So, he can do pretty much whatever he wants with that elevator.
[01:27:50.260 --> 01:27:54.020]  He could absolutely let it platform, let it pick up this call.
[01:27:54.400 --> 01:27:57.940]  From the car top, McManus could go ahead and he could kill the lights.
[01:27:57.940 --> 01:27:59.500]  That would be totally feasible.
[01:28:00.440 --> 01:28:05.040]  McManus could open the top hatch and jumper out that safety string from the car top.
[01:28:05.260 --> 01:28:06.060]  So, that would be plausible.
[01:28:07.000 --> 01:28:10.960]  He could even, if he wanted to, drive this to where he wants to go.
[01:28:11.280 --> 01:28:11.980]  But instead...
[01:28:11.980 --> 01:28:12.380]  Press 20, do it now.
[01:28:12.500 --> 01:28:13.660]  He says, press 20, do it now.
[01:28:13.840 --> 01:28:18.240]  Because maybe he's smart enough to know that inspection travel is much slower than automatic mode.
[01:28:18.400 --> 01:28:21.160]  So, he wants to go really fast up there while they slap Kobayashi around.
[01:28:22.000 --> 01:28:25.700]  But in general, like, I mean, we kind of dropped that in because we thought some of those stories were funny.
[01:28:25.700 --> 01:28:27.640]  I don't know if you think that's realistic or not.
[01:28:27.820 --> 01:28:30.020]  But a lot of things in movies are not true.
[01:28:30.220 --> 01:28:32.860]  Ask us more stories if you want to know more about that.
[01:28:33.120 --> 01:28:40.460]  If you want to know what really is not good in real life, however, we're going to flip it back to Howard in ways you, as a building owner, can stay out of legal hot water.
[01:28:41.740 --> 01:28:43.300]  Does anybody recognize this screenshot?
[01:28:44.400 --> 01:28:44.800]  Okay.
[01:28:45.020 --> 01:28:46.780]  From PBS Nova, Trapped in an Elevator.
[01:28:47.020 --> 01:28:48.500]  The story of a guy named Nicholas White.
[01:28:48.680 --> 01:28:50.940]  He was trapped in an elevator for something like 48 hours.
[01:28:50.940 --> 01:28:52.500]  He pushed the alarm button.
[01:28:52.640 --> 01:28:53.380]  He pushed the phone button.
[01:28:53.620 --> 01:28:54.520]  Nobody came to help him.
[01:28:55.120 --> 01:28:58.540]  Now, there's supposed to be 24-7 monitoring for the phone.
[01:28:58.780 --> 01:29:02.200]  There's supposed to be an alarm bell that's within earshot of somebody in the lobby.
[01:29:02.500 --> 01:29:04.300]  In this case, things just broke down.
[01:29:04.380 --> 01:29:09.260]  For some reason, nobody was able to get his call for help, and he was stuck there for an extended amount of time.
[01:29:09.440 --> 01:29:17.760]  But with that being said, testing the alarm bells and testing the emergency phones is something that most building owners can actually do on their own, especially if they're providing their own internal monitoring.
[01:29:18.040 --> 01:29:23.900]  If your elevator emergency phone goes to the security desk, especially, you should be testing it on a regular basis to make sure that it works.
[01:29:24.040 --> 01:29:26.480]  Because, for some reason, they actually go bad pretty frequently.
[01:29:26.820 --> 01:29:26.940]  Yeah.
[01:29:27.280 --> 01:29:34.720]  And if your first responders are showing up to an actual emergency, entrapment or otherwise, and they find that you're not following code, like...
[01:29:34.720 --> 01:29:43.760]  I don't know the section of the code that deals with writing on the key switch in Sharpie for the fire service key switch, but I will research that and get back to you guys.
[01:29:43.760 --> 01:29:44.220]  Yeah.
[01:29:44.900 --> 01:29:49.660]  A lot of times, you will see local regions that think they are immune to code, that think they're beyond the law.
[01:29:49.940 --> 01:29:54.180]  So you'll see situations where, again, this was the transit authority where I live in Philadelphia.
[01:29:54.340 --> 01:29:55.360]  This is SEPTA's elevators.
[01:29:55.520 --> 01:29:57.960]  They don't have a proper button on the platform level.
[01:29:58.100 --> 01:29:59.120]  They put a key switch in.
[01:29:59.660 --> 01:30:01.380]  I don't know if they have a variance for that or not.
[01:30:01.440 --> 01:30:04.860]  I bet they don't because they just, oh, whatever, we just don't want people screwing with this.
[01:30:04.940 --> 01:30:05.540]  This is cheaper.
[01:30:05.640 --> 01:30:06.240]  Throw it in this way.
[01:30:06.500 --> 01:30:11.420]  If you are having a perfectly normal day and your elevators are fine, who cares, right?
[01:30:11.420 --> 01:30:11.740]  Whatever.
[01:30:12.020 --> 01:30:13.240]  You're skirting the law, I guess.
[01:30:13.400 --> 01:30:14.700]  You saved yourself $6.50.
[01:30:15.320 --> 01:30:20.640]  If you have a problem, if you actually have an incident, this is kind of the stuff that comes back on you.
[01:30:20.700 --> 01:30:25.580]  If you're a building owner or if you're the controller of this facility, they're going to say, why are you not following code?
[01:30:25.760 --> 01:30:27.240]  Who the hell let this slide by?
[01:30:27.420 --> 01:30:29.580]  And you're facing serious fines and problems.
[01:30:29.920 --> 01:30:36.540]  If your emergency phone is not a phone but a freaking speaker, and at least it says right on there, this is not correct phone.
[01:30:36.700 --> 01:30:37.000]  F*ck you.
[01:30:38.320 --> 01:30:41.040]  I've never heard of an emergency speaker to something else.
[01:30:41.340 --> 01:30:41.620]  Right.
[01:30:42.260 --> 01:30:44.060]  I guess you could be like, help, help, help.
[01:30:44.180 --> 01:30:45.080]  I hope someone's hearing me.
[01:30:45.200 --> 01:30:45.340]  Help.
[01:30:46.420 --> 01:30:57.300]  But yeah, those alarm bells, the alarm bells which usually would go off if you press or flip a stop switch, which you normally shouldn't be able to do because these are not always called the stop switch.
[01:30:57.300 --> 01:31:01.240]  There's an interesting history to stop switches in the elevator industry.
[01:31:02.140 --> 01:31:13.980]  There were a number of different revisions in elevator code spanning from the 1970s through the 2000s where they required the stop switch, then they had to make it a keyed stop switch.
[01:31:14.120 --> 01:31:16.960]  They wanted it to have an alarm bell, then it didn't have to have an alarm bell.
[01:31:17.100 --> 01:31:22.900]  And getting through the exact differences in the different code requirements is a nightmare to explain.
[01:31:23.060 --> 01:31:26.520]  But emergency stops won't always behave exactly the same way.
[01:31:26.520 --> 01:31:28.340]  A lot of times they're toggle switches.
[01:31:28.740 --> 01:31:32.680]  And if there's a toggle switch in an elevator that you're riding in, you should feel a little bit less safe.
[01:31:32.920 --> 01:31:38.300]  Because historically, I think there was a sort of level of security that the stop switch provided.
[01:31:38.440 --> 01:31:42.720]  People didn't really trust that an elevator, you know, was safe and that was why they were there.
[01:31:43.020 --> 01:31:50.280]  But the reality is that more often than not, they were actually used by bad people to do bad things to nice people that were inside the elevator.
[01:31:50.280 --> 01:31:55.940]  So, I don't know if anybody had seen, there was a video with Jay-Z, he gets assaulted in an elevator, right?
[01:31:56.700 --> 01:31:58.400]  Someone is throwing punches at him, right?
[01:31:58.460 --> 01:31:59.900]  Yeah, his girlfriend's sister or somebody, right?
[01:32:00.020 --> 01:32:00.880]  I don't recall the details.
[01:32:01.020 --> 01:32:01.660]  I don't watch TMZ.
[01:32:03.160 --> 01:32:05.260]  But the stop switch is involved in that video.
[01:32:05.420 --> 01:32:06.140]  She punched it.
[01:32:06.300 --> 01:32:09.360]  Yeah, if you haven't seen it, watch it again in that context.
[01:32:09.360 --> 01:32:11.400]  And it changes what you're seeing because...
[01:32:11.980 --> 01:32:15.080]  The security guard, his security detail couldn't like pull the button back out.
[01:32:15.380 --> 01:32:18.280]  Yeah, the security guy is like frantically trying to get to the stop switch and he can't.
[01:32:18.740 --> 01:32:18.900]  Yeah.
[01:32:19.600 --> 01:32:25.420]  But also, things like just not properly, forget not securing the stop switch, not securing your hoistways and motor rooms.
[01:32:25.700 --> 01:32:29.520]  If you have, and a lot of facilities are not proper in this regard, man.
[01:32:29.680 --> 01:32:34.640]  And people who certainly weren't us have explored a lot of facilities and seen things awful.
[01:32:35.940 --> 01:32:40.360]  Like, the air duct that just actually does go into the hoistway for some reason.
[01:32:40.460 --> 01:32:41.620]  Yeah, completely not compliant.
[01:32:41.800 --> 01:32:46.260]  You should never be able just to get into a hoistway from a non-hoistway door space.
[01:32:46.520 --> 01:32:47.860]  Like, no, no, no, no, no, no.
[01:32:48.460 --> 01:32:54.700]  You should never, if you're in a hoistway from the wrong space, be this f*cking guy.
[01:32:55.800 --> 01:32:59.660]  You've heard of elevator surfing, like from MIT, but this is counterweight surfing.
[01:32:59.660 --> 01:33:01.000]  He's riding the counterweight.
[01:33:02.300 --> 01:33:03.700]  This is insane.
[01:33:03.700 --> 01:33:04.180]  No nuts.
[01:33:04.460 --> 01:33:07.140]  And if you know who this is, he'll buy you like two drinks.
[01:33:07.340 --> 01:33:07.500]  Yes.
[01:33:09.260 --> 01:33:11.560]  We told you we'd tell you a story about a motor room door, right?
[01:33:12.360 --> 01:33:14.400]  Motor room doors by code have to be what, Howard?
[01:33:14.700 --> 01:33:16.660]  Self-closing, self-locking.
[01:33:17.180 --> 01:33:19.220]  Is this self-closing and self-locking?
[01:33:20.660 --> 01:33:21.020]  No.
[01:33:21.860 --> 01:33:23.880]  But this elevator was on its finals, right?
[01:33:24.020 --> 01:33:29.060]  So they had to send somebody out with the right keys to go mess around in the motor room and, you know, hello IT, turn it off and on.
[01:33:29.320 --> 01:33:29.500]  Right.
[01:33:29.500 --> 01:33:31.820]  So, obviously, it was an elevator mechanic.
[01:33:31.960 --> 01:33:32.540]  Oh, no.
[01:33:32.740 --> 01:33:34.760]  That's a security guard.
[01:33:35.120 --> 01:33:35.220]  Yeah.
[01:33:35.700 --> 01:33:37.000]  Gotta make it $10 an hour.
[01:33:37.500 --> 01:33:41.080]  There's no way this guy is gonna be able to repair what's wrong with this elevator.
[01:33:41.340 --> 01:33:43.360]  Now, again, he probably didn't even know what was wrong.
[01:33:43.500 --> 01:33:47.820]  So, from the building perspective, you know, security just knows that the elevator was out.
[01:33:47.820 --> 01:33:54.840]  And their standard operating procedure, in this case, was to simply send a guy up, throw the mainline disconnect switch, put it back in.
[01:33:55.040 --> 01:33:56.920]  If it fixed it, then all was good.
[01:33:57.180 --> 01:33:57.580]  Right?
[01:33:57.660 --> 01:33:58.680]  And they probably wouldn't call anyone.
[01:33:58.800 --> 01:33:58.960]  Right.
[01:33:59.000 --> 01:34:01.820]  They would just ignore it and say, hey, I don't know what happened, but, you know, it's working now.
[01:34:01.820 --> 01:34:02.540]  Glad we're up and running.
[01:34:03.300 --> 01:34:04.900]  So, there's a funny story to this.
[01:34:06.320 --> 01:34:06.840]  D.V.
[01:34:06.840 --> 01:34:07.160]  Oops.
[01:34:08.020 --> 01:34:12.000]  Basically got banned from this facility for life for taking this picture.
[01:34:12.800 --> 01:34:17.240]  What happened was, as soon as he took it, the guy turns around and is like, what are you doing?
[01:34:17.480 --> 01:34:19.400]  And I'm like, I'm taking a picture of that lock.
[01:34:19.420 --> 01:34:20.160]  It's fascinating.
[01:34:21.440 --> 01:34:26.840]  And I remember, the security guard turns to you and goes, there's nothing fascinating about it.
[01:34:26.960 --> 01:34:28.000]  It's a master lock.
[01:34:31.330 --> 01:34:31.730]  Yeah.
[01:34:31.930 --> 01:34:35.550]  So, I mean, I found that totally fascinating that that was on that door.
[01:34:35.630 --> 01:34:36.870]  That's like way, way wrong.
[01:34:37.270 --> 01:34:37.510]  Okay.
[01:34:37.510 --> 01:34:38.890]  There's like nine things wrong with that photo.
[01:34:39.070 --> 01:34:41.330]  But this situation escalated extremely quickly.
[01:34:41.330 --> 01:34:45.890]  And before we knew it, we were surrounded by a cabal of security guards.
[01:34:46.150 --> 01:34:47.910]  We SC'd our way out of it, but like, whatever.
[01:34:48.170 --> 01:34:48.490]  Well, yeah.
[01:34:48.570 --> 01:34:50.650]  What was interesting was, so go to the next slide here.
[01:34:51.850 --> 01:34:57.490]  Instead of focusing on the fact that they didn't want us photographing in their building, I just kept arguing, what the hell is this guy doing going up there?
[01:34:57.710 --> 01:34:59.190]  He's clearly not trained, right?
[01:34:59.350 --> 01:35:01.130]  And they kind of didn't want to answer the question.
[01:35:01.350 --> 01:35:04.230]  They were just, you know, trying to make it, hey, no, you're breaking our rules.
[01:35:04.370 --> 01:35:05.630]  And I'm like, no, you're breaking the rules.
[01:35:05.730 --> 01:35:07.590]  And this is just going back and forth for like a half hour.
[01:35:07.730 --> 01:35:07.890]  Yeah.
[01:35:08.110 --> 01:35:09.490]  You know, in a very public place.
[01:35:09.670 --> 01:35:10.630]  It was a very big scene.
[01:35:10.630 --> 01:35:10.930]  Yeah.
[01:35:11.110 --> 01:35:12.450]  And they read us the trespass deck.
[01:35:12.670 --> 01:35:12.930]  Whatever.
[01:35:13.410 --> 01:35:15.250]  But I mean, you know, you should know who...
[01:35:15.250 --> 01:35:17.210]  Ultimately, you shouldn't be sending your security guard up there.
[01:35:17.370 --> 01:35:19.310]  You should know who your contractors are.
[01:35:19.450 --> 01:35:21.510]  You should know what they're doing in the building.
[01:35:21.990 --> 01:35:22.410]  You shouldn't...
[01:35:22.410 --> 01:35:23.990]  Like, clearly these are elevator guys, right?
[01:35:24.090 --> 01:35:24.310]  Right, yeah.
[01:35:24.310 --> 01:35:25.090]  They belong there.
[01:35:25.550 --> 01:35:25.890]  You know,
[01:35:41.980 --> 01:35:42.260]  like...
[01:35:42.740 --> 01:35:43.100]  What?
[01:35:43.160 --> 01:35:44.440]  No, we totally have to...
[01:35:44.440 --> 01:35:45.840]  We have to fix the system, sir.
[01:35:45.840 --> 01:35:46.920]  I belong in the motor room.
[01:35:47.040 --> 01:35:47.340]  F*ck off.
[01:35:47.340 --> 01:35:47.960]  You're not authorized.
[01:35:53.150 --> 01:35:56.830]  So there's a lot of different kinds of people that would wear shirts like us.
[01:35:56.830 --> 01:35:57.250]  Yeah.
[01:35:58.310 --> 01:36:04.130]  So, bottom line is though, if you're a building owner, chances are your first line of defense is just your internal facilities and operations people.
[01:36:04.710 --> 01:36:06.270]  They probably should not be in the motor room.
[01:36:06.350 --> 01:36:09.410]  If you're sending them up there for any reason, they really don't belong there.
[01:36:10.470 --> 01:36:12.270]  Now, you should have an elevator contractor.
[01:36:12.270 --> 01:36:14.430]  If you don't, God help you.
[01:36:14.870 --> 01:36:16.790]  Yeah, why is there not one on file if you don't?
[01:36:16.970 --> 01:36:17.290]  Yeah.
[01:36:17.290 --> 01:36:21.890]  Now, if you have an elevator contractor, but you're super cheap, you might have what's called a parts oil and grease contract.
[01:36:22.310 --> 01:36:28.910]  That's the equivalent of waiting for your transmission to blow in your car before you ever, you know, change your oil or something like that.
[01:36:29.010 --> 01:36:30.950]  You know, waiting for the engine to seize before you change your oil.
[01:36:31.150 --> 01:36:31.790]  Not a good idea.
[01:36:32.010 --> 01:36:40.550]  You should have a full service contract, have someone coming in there on a periodic basis, making sure everything's okay, doing preventive maintenance, doing the tests on schedule.
[01:36:41.230 --> 01:36:43.790]  Now, that doesn't mean there aren't other kinds of contractors, too.
[01:36:43.990 --> 01:36:44.210]  Sure.
[01:36:44.350 --> 01:36:45.130]  Like this guy right here.
[01:36:45.290 --> 01:36:45.630]  So, right.
[01:36:45.770 --> 01:36:47.570]  So, I don't actually work on elevators anymore, really.
[01:36:47.730 --> 01:36:48.550]  I'm a consultant now.
[01:36:48.710 --> 01:36:49.830]  So, what do consultants do?
[01:36:49.990 --> 01:36:54.330]  Well, primarily, we keep tabs on what the contractors are doing on behalf of our clients.
[01:36:54.610 --> 01:37:01.050]  So, if you own, let's say, 30 elevators, you have a pretty large elevator maintenance bill at the end of the month.
[01:37:01.950 --> 01:37:14.630]  And some building owners will allocate a specific percentage of their budget for it to have a consultant come in and sort of keep an eye on things and make sure that they're getting their money's worth, that the work is performed up to spec, that, in general,
[01:37:14.710 --> 01:37:16.010]  the systems are performing up to spec.
[01:37:16.150 --> 01:37:19.290]  Because you don't want this category of people to show up and tell you bad things.
[01:37:19.550 --> 01:37:29.310]  So, inspection is distinctly different from testing in that an inspector is generally just there to witness that the test was performed and that the result was satisfactory.
[01:37:29.850 --> 01:37:37.750]  There are a lot of different arrangements for that, but basically, half this country doesn't actually really have dedicated elevator inspectors.
[01:37:37.990 --> 01:37:40.310]  It's sometimes the elevator company will do their own tests.
[01:37:40.550 --> 01:37:41.370]  And I like to say...
[01:37:41.370 --> 01:37:41.810]  That's great.
[01:37:42.050 --> 01:37:45.710]  Well, I like to say, I mean, if I could inspect my own car, I'd probably pass emissions every time.
[01:37:46.630 --> 01:37:46.990]  Yeah.
[01:37:48.010 --> 01:37:51.630]  So, now, there's also things like AHJ.
[01:37:51.770 --> 01:37:55.310]  That's where, you know, you have an actual state inspector who will come in and witness the test.
[01:37:55.510 --> 01:37:57.270]  So, a state like Connecticut, for example.
[01:37:57.430 --> 01:37:57.530]  Yeah.
[01:37:57.750 --> 01:38:03.230]  Now, if you notice, though, if you're ever in an elevator in Connecticut, the inspection certificates are almost always out of date.
[01:38:03.850 --> 01:38:04.290]  Yeah.
[01:38:04.630 --> 01:38:06.990]  And that's because they're just so woefully understaffed.
[01:38:08.110 --> 01:38:08.390]  Yeah.
[01:38:08.690 --> 01:38:09.290]  So, the whole...
[01:38:09.730 --> 01:38:16.790]  Again, ask us questions later if you're really interested in inspection and testing and how the industry does or doesn't keep up with its practices correctly.
[01:38:17.050 --> 01:38:22.350]  If you are a building owner, ask us about how to check up on your own MCP.
[01:38:22.490 --> 01:38:24.770]  Like, how to see if someone's doing the right maintenance controls.
[01:38:25.090 --> 01:38:25.330]  Yeah.
[01:38:25.490 --> 01:38:31.850]  So, basically, the elevator industry generates a ton of paperwork that's indicating what they did, when they did it, you know, that it was performed on schedule.
[01:38:32.550 --> 01:38:35.130]  Your maintenance control program should look like this.
[01:38:35.310 --> 01:38:36.050]  Oh, no.
[01:38:36.230 --> 01:38:36.790]  Not like this.
[01:38:36.910 --> 01:38:37.530]  This one's blank.
[01:38:37.890 --> 01:38:39.610]  Actually, if yours looks like that, that's a problem.
[01:38:39.710 --> 01:38:39.790]  Yeah.
[01:38:39.870 --> 01:38:41.110]  This wasn't downloaded from the Internet.
[01:38:41.310 --> 01:38:42.970]  This was somebody's MCP on site.
[01:38:43.170 --> 01:38:47.750]  This actually, believe it or not, came from a site where there was an incident.
[01:38:47.930 --> 01:38:53.110]  And they had months to, you know, fix the elevator and do all kinds of other things.
[01:38:53.170 --> 01:38:56.950]  And they just left the blank records there for us to...
[01:38:56.950 --> 01:38:57.330]  To find.
[01:38:57.390 --> 01:38:58.050]  To find, yeah.
[01:38:58.050 --> 01:38:58.430]  Yeah, it's...
[01:38:58.430 --> 01:38:59.250]  This one I loved.
[01:38:59.470 --> 01:39:01.970]  And anybody who does forensic handwriting analysis loves this.
[01:39:02.390 --> 01:39:03.850]  So, oh, we got your test logs.
[01:39:04.330 --> 01:39:07.150]  So, what someone did is they just said, oh, crap.
[01:39:07.270 --> 01:39:08.810]  We haven't been filling out the test log at all.
[01:39:08.970 --> 01:39:11.010]  Maybe somebody was, like, coming over as an inspection.
[01:39:11.590 --> 01:39:14.170]  So, you could see... tell them about... so the pen was, like, dry.
[01:39:14.370 --> 01:39:18.390]  You could clearly see that, like, when they started writing that the pen wasn't flowing very well.
[01:39:18.530 --> 01:39:22.030]  And as he was actually filling it out, it started flowing better.
[01:39:22.030 --> 01:39:27.070]  And then in 2006, he's decided, you know, this has taken way too long to fill this out.
[01:39:27.150 --> 01:39:28.430]  I'm gonna stop writing my middle initial.
[01:39:29.430 --> 01:39:30.330]  And then he changed it.
[01:39:30.370 --> 01:39:31.830]  He's like, well, it shouldn't all be the same pen.
[01:39:31.930 --> 01:39:32.290]  That's dumb.
[01:39:32.490 --> 01:39:34.470]  Let me change pens for a minute right at the end.
[01:39:36.210 --> 01:39:37.570]  So, like, jumper logs?
[01:39:37.890 --> 01:39:39.370]  You saw a jumper log once?
[01:39:39.510 --> 01:39:39.590]  Yeah.
[01:39:39.590 --> 01:39:41.230]  How long is the jumper supposed to be installed?
[01:39:41.590 --> 01:39:41.990]  Seconds.
[01:39:42.110 --> 01:39:45.690]  It should only be there while the trained technician is doing whatever they need to do.
[01:39:45.710 --> 01:39:46.750]  And that's the end of it.
[01:39:47.030 --> 01:39:48.430]  When was this jumper put on and off?
[01:39:48.610 --> 01:39:50.250]  I believe it was sometime in 2012.
[01:39:50.970 --> 01:39:51.410]  And then?
[01:39:51.690 --> 01:39:53.930]  Removed sometime in 2013.
[01:39:54.590 --> 01:39:55.570]  What the f*ck?
[01:39:57.770 --> 01:40:00.450]  So, yeah, there's a lot of collusion that can go on.
[01:40:00.450 --> 01:40:11.490]  The idea, as Howard said, if the person doing your inspection is also responsible for doing the work, if someone says, oh, I don't know, those roping cables, they're looking kind of tired, you probably need to replace those.
[01:40:11.490 --> 01:40:13.310]  It would be a shame if they failed inspection.
[01:40:14.010 --> 01:40:15.270]  Well, here's the sort of problem.
[01:40:15.430 --> 01:40:16.710]  Who are you gonna ask?
[01:40:16.830 --> 01:40:21.730]  If you're asking maintenance contractors, they have a vested interest in selling you maintenance, right?
[01:40:21.950 --> 01:40:25.850]  So, sometimes you'll encounter situations like this.
[01:40:25.850 --> 01:40:33.290]  When tests are performed, tags are permanently affixed to the elevator components that were tested that indicate when it was tested, what the result was.
[01:40:33.610 --> 01:40:37.570]  In this case, Otis indicated that Otis performed the test.
[01:40:37.730 --> 01:40:43.310]  Like, no, it's supposed to be, unless the guy's name was Otis, this is bullshit.
[01:40:44.210 --> 01:40:48.390]  And the other thing that's weird is that it's an annual test from 1996.
[01:40:49.290 --> 01:40:50.430]  And the tag's still there.
[01:40:50.470 --> 01:40:51.230]  What is it doing there?
[01:40:51.410 --> 01:40:51.690]  Yeah.
[01:40:51.690 --> 01:40:54.890]  And I remember when this came up, they were like, well, you know...
[01:40:54.890 --> 01:40:56.070]  We never really cleaned up the old tags.
[01:40:56.070 --> 01:40:57.170]  Yeah, we forgot to clean it.
[01:40:57.550 --> 01:41:00.050]  It's like, oh, I didn't remove my luggage tags, you know, six years ago.
[01:41:00.050 --> 01:41:00.890]  Well, what happened to the new tag?
[01:41:01.130 --> 01:41:01.350]  Yeah.
[01:41:01.570 --> 01:41:02.350]  Oh, we cleaned that one.
[01:41:04.470 --> 01:41:05.310]  Here's another one.
[01:41:05.490 --> 01:41:14.210]  So, there was a very high-rise building that had very expensive ropes as a result, because the more rope you need, the higher the price tag gets.
[01:41:14.530 --> 01:41:22.830]  The building owner was not particularly careful about monitoring their expenses when they had this contractor in there.
[01:41:22.950 --> 01:41:30.370]  And over the course of just a couple years, they were told that their ropes were going bad over and over again, and they were being billed to replace the ropes.
[01:41:30.470 --> 01:41:31.530]  There's one problem with this.
[01:41:31.950 --> 01:41:37.430]  Just like when you tag a test, you tag the ropes, and other certain semi-permanent components.
[01:41:38.110 --> 01:41:40.530]  The last time these ropes were replaced was 1972.
[01:41:41.770 --> 01:41:43.970]  How much did that cost every time they had new roping?
[01:41:44.150 --> 01:41:46.330]  Tens of thousands of dollars per cab.
[01:41:46.910 --> 01:41:49.810]  Well worth it if you're a building owner to stay on top of this stuff.
[01:41:50.170 --> 01:41:56.190]  And if you're not staying on top of things, if you wind up red-tagged, that is a bad frickin' day, man.
[01:41:56.610 --> 01:41:57.970]  This is a little unusual, too.
[01:41:58.310 --> 01:42:02.050]  So, this is actually an escalator at a casino in Atlantic City.
[01:42:02.350 --> 01:42:04.130]  What happened here is a little unclear to me.
[01:42:04.350 --> 01:42:07.470]  The state of New Jersey only has eight different types of tests.
[01:42:08.450 --> 01:42:10.370]  This is a number nine type of test.
[01:42:11.150 --> 01:42:13.090]  Your guess is as good as mine as to what that means.
[01:42:13.090 --> 01:42:14.310]  They're just like all of the above.
[01:42:14.530 --> 01:42:15.070]  All wrong.
[01:42:15.450 --> 01:42:16.170]  You fail.
[01:42:17.450 --> 01:42:23.430]  Speaking of things failing, like doing elevator tests and doing them properly, it matters a lot.
[01:42:23.930 --> 01:42:29.270]  Would you like to see some fun footage of an elevator test that thankfully no humans were hurt being performed?
[01:42:29.730 --> 01:42:30.930]  No, you want to see humans hurt?
[01:42:31.070 --> 01:42:32.070]  Sorry, we don't have that footage.
[01:42:33.190 --> 01:42:33.890]  All right, ready?
[01:42:33.970 --> 01:42:35.930]  We're gonna trip a governor and see if the brakes work.
[01:42:41.120 --> 01:42:43.000]  Let's watch that one more time.
[01:42:52.950 --> 01:42:54.730]  That's super fail, right?
[01:42:56.070 --> 01:42:57.730]  Have your tests done.
[01:42:58.070 --> 01:42:59.670]  Have qualified people come in.
[01:42:59.890 --> 01:43:05.830]  Have that happen when no one's in the car so that your ass is not getting sued to oblivion.
[01:43:06.570 --> 01:43:09.130]  And of course, follow your typical building procedures.
[01:43:09.530 --> 01:43:15.970]  If Deve and I show up at your location wearing these T-shirts and Tissen happens to be your contractor, that does not mean we work for Tissen.
[01:43:16.210 --> 01:43:19.590]  But we can probably spin a pretty good line of bullshit and work our way in if you're not careful.
[01:43:20.030 --> 01:43:22.470]  So with that being said, just make sure that people are following procedures.
[01:43:22.690 --> 01:43:31.490]  I can tell you from personal experience that just showing up on a site and saying, I'm the consultant, I'm the inspector, and actually believing it, people will pretty much let you in.
[01:43:31.590 --> 01:43:35.610]  And it's also very common to go through service entrances when you're a contractor like that.
[01:43:35.750 --> 01:43:37.350]  Yeah, you're walking around in the back areas.
[01:43:37.350 --> 01:43:40.050]  No one really notices why you're there because clearly you belong there.
[01:43:40.050 --> 01:43:43.010]  What's the one place that actually you could not like just breeze in?
[01:43:43.770 --> 01:43:48.830]  So the one most secure facility in my memory, it didn't even have an elevator.
[01:43:49.110 --> 01:43:52.730]  It was a wheelchair lift, like a little platform lift that only goes up about three feet.
[01:43:53.730 --> 01:43:58.010]  And when I entered the building, as immediately when I entered, somebody comes up to me and goes, who are you?
[01:43:58.050 --> 01:43:58.570]  What are you doing here?
[01:43:58.830 --> 01:44:00.570]  I'm like, oh, hey, I'm the elevator inspector.
[01:44:01.030 --> 01:44:03.090]  And they're like, okay, can I see some ID?
[01:44:03.350 --> 01:44:04.130]  You know, and they carded me.
[01:44:04.230 --> 01:44:06.330]  And this actually happened about three or four times.
[01:44:06.590 --> 01:44:08.750]  It was the Church of Latter-day Saints.
[01:44:09.490 --> 01:44:09.810]  Yeah.
[01:44:12.190 --> 01:44:16.210]  So if you're a non that's trying to get in there and cause mayhem, like elevator ain't the route to do that, I guess.
[01:44:16.430 --> 01:44:18.170]  But mad props, they followed their procedures.
[01:44:18.450 --> 01:44:18.730]  Right on.
[01:44:19.350 --> 01:44:21.010]  So what does this all break down to, right?
[01:44:21.130 --> 01:44:21.490]  What now?
[01:44:21.650 --> 01:44:29.850]  If you're concerned that your elevators are going to be, you know, a mechanism of attack or something is bad in your security because you're like, oh my God, I have elevators.
[01:44:30.710 --> 01:44:36.950]  Understand that there is a difference between your average elevator tech and a security consultant tech.
[01:44:37.230 --> 01:44:44.650]  Understand that there's different levels of people in the industry and getting to interact with someone like Howard, getting to meet you and getting to learn about this.
[01:44:44.650 --> 01:44:53.010]  And if you're a building owner, asking him the kind of questions that you can't ask, your general, you know, just contractor guy is an incredible resource to have.
[01:44:53.190 --> 01:44:54.850]  So reach out to people who know.
[01:44:55.050 --> 01:44:58.830]  Reach out to people who can give you the right details for odd situations.
[01:44:59.310 --> 01:45:03.670]  Here's one little fun final couple of tips we'll give you if you're ever stuck in an elevator.
[01:45:03.850 --> 01:45:09.790]  Now, when you ignore us and our disclaimers when you leave here, I just want you to keep in mind that you may find yourself entrapped.
[01:45:10.250 --> 01:45:14.330]  Please do not try to escape the car by prying the doors open or using the top emergency exit.
[01:45:14.450 --> 01:45:15.070]  That's the first thing.
[01:45:15.250 --> 01:45:20.030]  There are a couple things you can probably do that may actually get you out of that situation.
[01:45:20.170 --> 01:45:23.750]  The first, of course, is don't panic and remember to bring a towel, of course.
[01:45:24.250 --> 01:45:28.950]  But you don't have to hit the emergency phone the second you get stuck, like if you're on a red team job or something like that.
[01:45:29.750 --> 01:45:33.590]  If the lights inside the cab are off, there's a separate emergency light usually.
[01:45:33.870 --> 01:45:36.470]  If the emergency light's on and the main lights are off, the power's out.
[01:45:36.710 --> 01:45:37.810]  That's nothing you can control.
[01:45:38.030 --> 01:45:38.550]  You're screwed.
[01:45:38.670 --> 01:45:39.390]  Hit the emergency phone.
[01:45:41.170 --> 01:45:44.490]  If the main lights are still on, you still have a couple options.
[01:45:45.250 --> 01:45:46.950]  The first thing, it's pretty simple.
[01:45:47.110 --> 01:45:47.750]  Just hit door open.
[01:45:48.070 --> 01:45:49.610]  Some people panic and don't think to.
[01:45:49.970 --> 01:45:59.270]  Yeah, but if you actually, in some of the 24-7 monitoring services that exist to provide that emergency phone answering service, they have a script that they follow.
[01:45:59.390 --> 01:46:02.530]  And one of the things they tell the people is, well, did you try hitting the door open button?
[01:46:02.770 --> 01:46:04.410]  Yeah, you'd be surprised so often that works.
[01:46:04.910 --> 01:46:05.910]  If that doesn't work...
[01:46:05.910 --> 01:46:09.950]  If that doesn't work, they'll tell you, well, try hitting door close and then hitting the door open button again.
[01:46:10.170 --> 01:46:12.450]  Sometimes the door operator just gets a little confused.
[01:46:14.110 --> 01:46:16.130]  You can try placing a call to another floor.
[01:46:16.310 --> 01:46:24.170]  Sometimes the lobby will be not locked out, but maybe guest floors in a hotel will be locked out and you just are located somewhere where you can't open the doors.
[01:46:24.410 --> 01:46:25.970]  So make sure you try, of course, all the different buttons.
[01:46:26.710 --> 01:46:26.870]  And then...
[01:46:26.870 --> 01:46:27.450]  Try all your badges.
[01:46:27.690 --> 01:46:28.530]  Yep, try your badges.
[01:46:28.670 --> 01:46:31.810]  If you are an authorized user, you can try some key switches.
[01:46:32.190 --> 01:46:32.330]  Yeah.
[01:46:32.990 --> 01:46:36.210]  And if all of that still doesn't work, there's one other thing maybe you could do.
[01:46:37.010 --> 01:46:44.950]  And I say this with extreme hesitance and caution, but if you take the palm of your hand and touch it to the flat surface of the door, see if it's moving at all.
[01:46:45.090 --> 01:46:46.030]  Don't try to pry it open.
[01:46:46.510 --> 01:46:47.610]  Don't stick your hand in the gap.
[01:46:47.610 --> 01:46:50.730]  If it's a bi-parting door that splits in the middle, do not stick your hand in there.
[01:46:51.310 --> 01:46:52.990]  But just see if the door is moving at all.
[01:46:53.230 --> 01:46:56.310]  If it does move, try to slide them closed together gently.
[01:46:57.730 --> 01:46:59.110]  Occasionally the door just isn't closed.
[01:46:59.270 --> 01:47:01.230]  And if the door's not closed, the elevator won't run.
[01:47:01.750 --> 01:47:04.490]  And if none of that works, yeah, go ahead and call for help.
[01:47:04.790 --> 01:47:08.550]  If none of that works, don't try the f*cking top hatch.
[01:47:09.090 --> 01:47:13.190]  I don't care if someone who's a bozo like, I don't know, Ross and Friends or somebody did it once.
[01:47:13.290 --> 01:47:13.950]  I don't frickin' know.
[01:47:14.330 --> 01:47:15.970]  But like, don't go out the top hatch.
[01:47:15.970 --> 01:47:18.450]  Even if you think you can get it open or push it open.
[01:47:18.550 --> 01:47:19.750]  Or, oh my god, this one's unlocked.
[01:47:19.970 --> 01:47:21.550]  It's not getting you anywhere useful.
[01:47:21.730 --> 01:47:23.410]  Yeah, or the side exit if applicable.
[01:47:23.890 --> 01:47:25.230]  Yeah, some elevators have side exits.
[01:47:25.370 --> 01:47:26.210]  Ask him later about that.
[01:47:26.330 --> 01:47:26.910]  It's a funny story.
[01:47:28.090 --> 01:47:29.730]  Don't exit a misleveled car.
[01:47:30.870 --> 01:47:31.150]  Absolutely.
[01:47:31.270 --> 01:47:31.870]  Rule of thumb.
[01:47:31.990 --> 01:47:33.850]  If you have to jump, it is too far.
[01:47:33.990 --> 01:47:36.170]  And I know, like, oh my god, this elevator's not working right.
[01:47:36.270 --> 01:47:37.430]  And I can make it.
[01:47:37.490 --> 01:47:37.990]  It's right there.
[01:47:37.990 --> 01:47:39.330]  I really want to get out of this elevator.
[01:47:39.410 --> 01:47:40.150]  I'm panicking, man.
[01:47:40.150 --> 01:47:42.190]  What was that one lady that...
[01:47:42.190 --> 01:47:43.890]  It was a case at Caltech.
[01:47:44.230 --> 01:47:46.650]  There was a woman named Annette Lujan who was fatally crushed that way.
[01:47:46.770 --> 01:47:47.810]  The elevator had stalled.
[01:47:48.130 --> 01:47:49.850]  She was able to get the doors open from the inside.
[01:47:50.110 --> 01:47:52.590]  And then two bystanders said, Hey, we can help you out.
[01:47:53.010 --> 01:47:54.090]  You know, grab our hands.
[01:47:54.110 --> 01:47:54.770]  We'll pull you out.
[01:47:54.930 --> 01:47:57.170]  The elevator moved unexpectedly and she was fatally crushed.
[01:47:57.510 --> 01:47:57.670]  Yeah.
[01:47:58.130 --> 01:47:59.770]  Stay inside the elevator itself.
[01:48:00.050 --> 01:48:04.390]  Even if you might not be comfortable, the safest place to be is in the elevator, believe it or not.
[01:48:04.390 --> 01:48:05.990]  The elevator wants to keep you alive.
[01:48:06.370 --> 01:48:07.610]  We wanted to keep you alive.
[01:48:07.890 --> 01:48:09.050]  We hope you learned a lot.
[01:48:09.210 --> 01:48:10.030]  We hope you had fun.
[01:48:10.410 --> 01:48:11.090]  Thank you very much.
[01:48:23.810 --> 01:48:25.690]  So do we actually have a minute or two for questions?
[01:48:25.790 --> 01:48:26.430]  Are we booting off?
[01:48:27.030 --> 01:48:27.890]  Somebody give us a lighter.
[01:48:28.050 --> 01:48:29.710]  Oh, we got a guy right at the mic and we got a hand.
[01:48:29.790 --> 01:48:30.570]  I don't know what you're waving at.
[01:48:31.750 --> 01:48:32.350]  That's a way...
[01:48:32.350 --> 01:48:33.070]  I guess that's...
[01:48:33.070 --> 01:48:33.910]  What is your question, sir?
[01:48:34.350 --> 01:48:35.470]  My question is...
[01:48:35.470 --> 01:48:38.010]  So there's a lot of stuff that you say, don't try it at home.
[01:48:39.530 --> 01:48:42.970]  What are the safest things you can do to mess with an elevator?
[01:48:43.890 --> 01:48:45.690]  You see that in movies a lot or TV.
[01:48:46.010 --> 01:48:48.490]  People push the emergency stop button or pull it or whatever.
[01:48:49.790 --> 01:48:57.290]  Is that going to usually trigger grievous responses of alarms and things happening?
[01:48:57.610 --> 01:48:59.450]  Most run-stop switches are alarms.
[01:48:59.690 --> 01:49:00.570]  So avoid it if you can.
[01:49:01.050 --> 01:49:08.070]  Now, the other thing to keep in mind is actually hitting the run-stop switch will bring the elevator to a very abrupt stop and it is possible to cause mechanical damage by doing that.
[01:49:08.250 --> 01:49:10.450]  So if you don't know the job, I would definitely avoid doing that.
[01:49:10.450 --> 01:49:13.750]  In terms of the quote-unquote safest thing to do?
[01:49:13.850 --> 01:49:14.270]  Yeah, I mean...
[01:49:14.270 --> 01:49:15.410]  That's a tough question to answer.
[01:49:15.610 --> 01:49:18.650]  But pretty much anything inside the cab, usually you're still at least safe.
[01:49:19.350 --> 01:49:19.690]  Thanks.
[01:49:21.590 --> 01:49:22.450]  Are the Hotel Pennsylvania elevators safe?
[01:49:22.450 --> 01:49:24.270]  Are the Hotel Pennsylvania elevators safe?
[01:49:25.790 --> 01:49:26.570]  No comment.
[01:49:27.610 --> 01:49:30.070]  So I was in Canada, eh?
[01:49:30.690 --> 01:49:34.830]  And the elevator had a light on it that said shuffle.
[01:49:35.110 --> 01:49:38.870]  And it also had an indicator that would say servicing other floors.
[01:49:39.230 --> 01:49:39.690]  Yes.
[01:49:39.950 --> 01:49:43.630]  I believe you're referring to Toronto somewhere?
[01:49:43.930 --> 01:49:44.170]  Yes.
[01:49:44.490 --> 01:49:45.930]  I've seen pictures of that.
[01:49:46.090 --> 01:49:50.250]  I believe what that is, there's again a mythos to it online.
[01:49:50.250 --> 01:49:54.770]  And what people have explained is that, well, it's for Otis guys to get on top of the car.
[01:49:54.970 --> 01:49:56.050]  That is absolutely false.
[01:49:56.370 --> 01:49:59.770]  First of all, Otis never talks about their proprietary technology if they can avoid it.
[01:49:59.870 --> 01:50:01.350]  So they would never make a statement like that.
[01:50:01.630 --> 01:50:04.990]  The second thing is, I believe those are double-deck elevators.
[01:50:06.290 --> 01:50:10.050]  What the shuffle button is, as it was explained to me, was that somebody could press the button.
[01:50:10.170 --> 01:50:13.210]  It would actually allow them to switch whether they were going to an odd or an even floor.
[01:50:13.810 --> 01:50:15.330]  Because it would only serve odd or even floors.
[01:50:15.330 --> 01:50:17.430]  Oh, okay, I gotcha, because it's two caps.
[01:50:17.710 --> 01:50:17.950]  Right.
[01:50:18.050 --> 01:50:22.730]  So in other words, it would basically let you off, shift up a bit, and then actually allow you to step on the other side.
[01:50:23.250 --> 01:50:24.490]  Or the other cap, excuse me.
[01:50:24.590 --> 01:50:25.210]  Two minutes left.
[01:50:25.370 --> 01:50:25.810]  Make them good.
[01:50:26.030 --> 01:50:29.550]  So you guys talked about movies, but not television shows.
[01:50:29.770 --> 01:50:34.250]  And 80s sitcoms would have me believe if I'm desperately in labor, I'm going to get stuck between floors.
[01:50:34.590 --> 01:50:39.490]  So how common actually is that, to be stuck in between a floor for hours and hours?
[01:50:39.710 --> 01:50:41.810]  Well, entrapments are fairly common, I would say.
[01:50:41.810 --> 01:50:46.690]  Most buildings will experience them a couple times a year if it's a large enough place.
[01:50:46.870 --> 01:50:51.550]  A place like the Hotel Penn actually probably has to happen at least on a weekly basis, just on the number of elevators that they have.
[01:50:51.830 --> 01:50:52.710]  And that's just speculation.
[01:50:53.230 --> 01:50:57.890]  But the long and the short of it is, yes, a disproportionate number of babies are born in elevators.
[01:51:00.890 --> 01:51:01.510]  Yes, sir.
[01:51:02.070 --> 01:51:02.690]  That too.
[01:51:02.910 --> 01:51:03.230]  Hi.
[01:51:03.430 --> 01:51:06.670]  On cameras in elevators, are they normally closely watched?
[01:51:06.850 --> 01:51:10.970]  And does anyone notice if you do turn them off using some sort of little device?
[01:51:10.970 --> 01:51:11.130]  Yes, sir.
[01:51:11.390 --> 01:51:13.050]  Cameras in elevators, are they being watched?
[01:51:13.170 --> 01:51:15.790]  No more or less than most cameras in buildings.
[01:51:16.010 --> 01:51:18.270]  Most of the time they're for reconstruction after an incident.
[01:51:18.410 --> 01:51:29.770]  There are also local cameras that are not connected to a central, you know, station in the building, where it'll just have a little SD card in it that's just constantly looping so that when an event happens, they're able to go pull the SD card and see what actually happened.
[01:51:29.950 --> 01:51:35.590]  So if you put a key in, there's not going to be someone just rushing the door likely to, you know, watching.
[01:51:35.810 --> 01:51:37.030]  It didn't happen at all this weekend.
[01:51:37.150 --> 01:51:37.750]  Depends where you are.
[01:51:39.630 --> 01:51:41.230]  One minute left or less, your question.
[01:51:41.370 --> 01:51:43.970]  Then everybody else, we're going to talk to you downstairs in the lockpick village.
[01:51:44.150 --> 01:51:45.850]  We're going to set all this up in the lockpick village.
[01:51:46.010 --> 01:51:46.630]  What is your question?
[01:51:46.830 --> 01:51:47.110]  Go ahead.
[01:51:47.330 --> 01:51:48.050]  I'm going to ask later.
[01:51:48.190 --> 01:51:48.510]  Downstairs?
[01:51:48.770 --> 01:51:48.950]  All right.
[01:51:49.150 --> 01:51:50.050]  You, sir, the last question.
[01:51:50.450 --> 01:51:50.770]  Okay.
[01:51:50.850 --> 01:51:51.250]  Make it good.
[01:51:51.590 --> 01:51:53.410]  I was a naughty boy when I was...
[01:51:53.410 --> 01:51:53.450]  Don't suck.
[01:51:54.810 --> 01:52:03.530]  When I was moving, I had a box holding the elevator as I was unloading it because there was no mode for like a freight elevator.
[01:52:03.650 --> 01:52:03.830]  Yes.
[01:52:04.650 --> 01:52:15.010]  The elevator very slowly went up and tipped the box into the floor very politely as the door stayed open as I could see the shaft and the elevator slid all the way up.
[01:52:16.310 --> 01:52:20.350]  What's... how many errors occurred there and why did the elevator slide away?
[01:52:20.350 --> 01:52:22.190]  It's possible that the brakes were bad.
[01:52:22.330 --> 01:52:24.550]  It's possible that the brake tension wasn't high enough.
[01:52:25.030 --> 01:52:26.990]  It's a little bit more common than you might think.
[01:52:27.110 --> 01:52:35.250]  There's a specific video on YouTube that I'll refer you to that actually shows a situation where an elevator mechanic was inside a cab when that exact type of situation occurred.
[01:52:35.430 --> 01:52:37.470]  That's what those rope gripper safeties are intended to prevent.
[01:52:37.610 --> 01:52:37.690]  Yeah.
[01:52:37.810 --> 01:52:44.990]  He was talking about the floor was actually pushing his possessions, not nudging, which the elevator will do more and more angrily if you keep holding a door open.
[01:52:45.110 --> 01:52:45.310]  Correct.
[01:52:45.670 --> 01:52:49.530]  And that also meant that the building owner went and corrected it.
[01:52:49.530 --> 01:52:54.330]  He went up into the tower and pressed a reset button or something to regain the control of the elevator.
[01:52:56.150 --> 01:52:57.030]  No, no, no, no.
[01:52:57.050 --> 01:52:58.550]  Because that's how they closed the door.
[01:52:58.850 --> 01:52:59.830]  That's my answer to that.
[01:53:00.250 --> 01:53:00.330]  Yeah.
[01:53:01.050 --> 01:53:01.270]  All right.
[01:53:01.350 --> 01:53:02.210]  Thank you so much.
[01:53:02.370 --> 01:53:03.770]  Thank you to Ted for recording this.
[01:53:03.950 --> 01:53:04.910]  We'll have DVDs of it.
[01:53:05.050 --> 01:53:06.490]  He wants, you know, show your friends.
[01:53:06.650 --> 01:53:07.150]  We had fun.
[01:53:07.710 --> 01:53:09.850]  First time he gave a talk at a con right here.
[01:53:09.950 --> 01:53:11.090]  Howard Payne, ladies and gentlemen.
[01:53:11.090 --> 01:53:11.130]  Thank you, man.
[01:53:11.830 --> 01:53:12.390]  That's
[01:53:18.550 --> 01:53:18.830]  my friend.
[01:53:18.830 --> 01:53:20.830]  Thank you.