Slashdot Mirror
Card Locks Thwarted by Shopping Club Card
hal9000(jr) writes "A recent column ('Social Engineering, the Shoppers' Way') on darkreading.com shows how easy it is for a pen test team to walk into a supposedly secure facility using a shoppers club card because the man trap feature was enabled. Man-traps allow people to enter an outer door but not an inner door similar to ATM kiosks. Once inside, of course, they had the run of the place." Lessons: after writing down your password, eat your sticky notes rather than leave them on the monitor.
Should have used caltraps instead of mantraps.
Argh.
And what's more, the security system added frequent shopper rewards to their card! Those lucky bastards are going to save so much money on their next purchases of orange juice and cat food.
Slashdot Burying Stories About Slashdot Media Owned
I work in a secured building - it's a federally protected building right above a train hub and across from the sears tower. Anyway - security is similar to what was described - barely flashing anything that resembles a photo ID card with a splash of red on it is sufficient to get in. I keep fighting the urge to do it, but what I really want to do is just draw a half assed I.D. card with crayon and construction paper and see if it gets me through.
www.wildpad.com
they could just use the transporter and beam into any secure area, all they need are the coordinates and blammo, they're in.
But, you forgot, after you beam down there could be an extremely attractive woman just waiting to suck all the salt out of you!
He who knows best knows how little he knows. - Thomas Jefferson
It would trap a particular kind of sea bird, or a not very smart person. Or maybe it's something else entirely.
Web 2.0 == Giant Blogspam Circle Jerk
Better get a receipt every time you go to the bathroom
Well, of course they would. Everybody is thinking of the kids.
I prefer the "u" in honour as it seems to be missing these days.
I've worked a national laboratory and even the janitorial staff had to have secret or top-secret clearance to be allowed access to the respective secure areas. In fact, now that I think about it, most of the janitorial staff had higher clearance than I did...
Do they taste 50% better than M&M's?
-- 3 events that reshaped the world in the 20th century: WW1, WW2, and WWW
I don't know about the grandparent poster, but my student cards has a magnetic stripe that isn't used for anything. The library uses the barcode printed on the front of the card, the financial office just enters your student number manually (since it's not encoded into barcode number), and door locks use a different card.
http://outcampaign.org/