20 ms·
So you need to be on the door controller network to exploit it... and the network is behind the door. As opposed to paying a pickpocket $50 to swipe a HID card
by peterwwillis 11y ago
So you need to be on the door controller network to exploit it... and the network is behind the door.
As opposed to paying a pickpocket $50 to swipe a HID card from any of a thousand employees. Or, I dunno, using a passive reader to clone any of them from across the parking lot. Both of which are less traceable than, say, a spear-phishing malware attack.
- TheOtherHobbes 11y agoYou don't need even need a pickpocket. Although it is a cheap option. http://qz.com/649996/one-in-five-employees-would-sell-their-work-passwords-some-for-less-than-100/ http://qz.com/649996/one-in-five-employees-would-sell-their-...
- woodman 11y agohttp://www.exfiltrated.com/queryport.php?Port=4070 http://www.exfiltrated.com/queryport.php?Port=4070 All those IPs are on networks behind doors.
- rcthompson 11y agoOn the other hand, you can perform the spear-phishing attack from anywhere in the world.
- 13of40 11y agoThe trick is to follow someone in and have your wallet out to slide against the reader. Beyond that, have a little device in your wallet that goes "bip!" when you push it against the reader.