4 ms·
>Going by hacker stereotypes, it’d be pretty easy to physically identify anyone committing an act of digital crime. A combination of pallid skin, hoody and lapt
by patcheudor 11y ago
>Going by hacker stereotypes, it’d be pretty easy to physically identify anyone committing an act of digital crime. A combination of pallid skin, hoody and laptop is the biggest giveaway.
Our pen-testing group has members who fit that exact stereotype. We've found that people don't care, even when acting suspicious. In fact, it gets more interesting. Awhile back we all picked up blue prison work jumpsuits from a local surplus store that say "Work Crew" on the back in faded lettering. When combined with a small red toolbox it seems prison jumpsuits are as good as a firefighters uniform for gaining access to places. I've become bold enough while wearing mine that I've openly picked locks on doors in busy offices. I haven't been caught yet & the assessment photos really hit home far more in the end-of-review report. It's pretty easy for a manager to dismiss a compromise by someone dressed as a fire fighter but not so much when its some dude in a prison jumpsuit.
- spacemanmatt 11y agoI love this. You have taken pen-testing to a level of security-shaming.
- jacquesm 11y agoStandard trick to enter a building you have no business being in: carry a large cardboard box while walking up to the door just behind someone else. Better than even money they'll hold the door open for you.