For what it's worth

It never seems a clever idea to have a lock, or keys, delivered to the address where they are going to be used.

So I was angry at Screwfix for sending me a lock in a plain (not tamper-evident) box, with the key numbers engraved on the keys so that security was at risk from interception at the despatch warehouse.

I sent the lock back, and carefully ordered a lock from another supplier (key code still engraved on the keys, but with a password system to restrict copying) - and had it sent to a friend. Having made an AI enquiry, I reckoned it was OK to pay by Paypal as they would not share my address.

So, dismay when I opened the package to find the lock and an invoice - in my name with my address. Asking AI again, it looks as if Paypal does share identity information!

So if you want to be totally sure of buying a lock that people can't relate to your property, perhaps there is no easy alternative to paying cash in a shop and avoid using any loyalty card.

# posted by John Geddes @ 7:40 am 0 comments

 I ordered one of these - the highest-security level of Euro lock -  online from Screwfix, and was alarmed at their lax security, on two fronts.

Firstly, the key code (which allows a new key to be ordered) is not on a separate card (which appears to be the norm for other makes) but is - according to Screwfix when I called them - the number that is engraved on the key. So anyone who I lend a key to (or anyone who can get sight of my key) can note the number, get a key made, and they then have access to my house whenever they want it.

Secondly, the lock comes in an ordinary cardboard box which can be opened and reclosed without evidence that this has happened. Perhaps this was OK in a shop in the days when customers were anonymous, but a complete no-no for mail order (or for shops that collect customer email or address). All it would take would be for someone to open the box, record the key code, then note the customer address and then they can get a key cut with a good chance that this will offer front-door access to the address they have. Tamper-evident packaging would sort this problem very simply.

I would recommend not buying this online from Screwfix until they sort out these two issues. Even buying the lock for cash in a store (Screwfix, or - I think - B&Q) has the risk of the engraved key code - and a risk (albeit less than for mail order) that someone might record the key codes for the locks in a store and then match them up to addresses captured at the point of sale.

# posted by John Geddes @ 1:09 pm 0 comments