3 ms·

I've been in a semi high security environment and seen casuals given too much independent access by well meaning staff. Examples ... 1. Guy allowed to come in

I've been in a semi high security environment and seen casuals given too much independent access by well meaning staff. Examples ... 1. Guy allowed to come in and check our microwave for 'radiation leakage'. May have been a simple money scam but obviously a way to listen to staff conversations. 2. Casual cleaners employed to sanitise desk phones .. after a scare saying that's where a lot of bacteria collects. I noticed these cleaners being way too slow and too likely to let their gaze linger on computer screens. They didn't last.

Johnny555 6y ago
We hired a physical pentester and he got in the first day by convincing the night janitorial staff that he was an employee that left his badge on his desk and just needed to go pick it up. He wore a jacket with our logo to make himself look more legit. He hid out in a conference room and had unfettered access to the office all night, he left behind a network device plugged in to a spare network jack behind a printer.