How I Socially Engineer Myself into High Security Facilities

https://motherboard.vice.com/amp/en_us/article/qv34zb/how-i-socially-engineer-myself-into-high-security-facilities

by wallflower • 8 years ago

25 17 8 years ago

motherboard.vice.com

hguhghuff• 8 years ago

Dunno, I just didn’t get the sense that this had the ring of truth to it.

It reads more like fiction.

aw3c2• 8 years ago

Probably is, considering it's vice.com.

1337biz• 8 years ago

Sad but true. What's coming post-Vice?

avip• 8 years ago

Fake until proven otherwise. Flag it.

chirau• 8 years ago

Francesca Abagnale :)

berbec• 8 years ago

Hired by Hom Tanks?

caminante2• 8 years ago

2017 blog post.

Gross. The author explicitly brags about being "a terrible human being."

Aside from the sociopathy and embellishment, I get unease about the legality of the means used, considering the agent was contracted.

I could've audited the security controls and arrived at the same deficiencies without abusing people.

stale20022• 8 years ago

I mean, the company pays them to do this. Thats the whole point of pen testing.

Nobody is going to pay attention to a 10 page report. They are instead going to pay attention to the fact that the person successfully got into the building.

navbaker• 8 years ago

Nothing get attention faster than showing up in the office of the person who hired you to do the pen test!

caminante2• 8 years ago

You're assuming that a "10 page report" will not elicit a response? Are you addressing a hypothetical or the situation as described in the post?

If so, then that's mismanagement. Poor managers suddenly "paying attention" are unlikely capable of implementing proper controls.

Also, you're assuming these poor managers can contract well.

bootlooped• 8 years ago

I think they went a little overboard on gifs for this article.

m0nty• 8 years ago

Today's equivalent of meaningless clipart? But a whole order of magnitude more annoying.

volkisch• 8 years ago

This reads like some bootleg Mr. Robot episode.

jsnell• 8 years ago

This was discussed 8 months ago (221 comments): https://news.ycombinator.com/item?id=15516526

jbuzbee• 8 years ago

High Security? I suppose it depends on context. But for real high security facilities, a visitor is not getting past the first guard desk without an ID check with the visitor's name being on a list that is maintained via secure communication channels - facility to facility. And there are often multiple levels of guard stations to pass through where this is repeated.

jenhsun• 8 years ago

Kevin Mitnick said that too.

How I Socially Engineer Myself into High Security Facilities

Related Stories