Slashdot Mirror


Card Locks Thwarted by Shopping Club Card

hal9000(jr) writes "A recent column ('Social Engineering, the Shoppers' Way') on darkreading.com shows how easy it is for a pen test team to walk into a supposedly secure facility using a shoppers club card because the man trap feature was enabled. Man-traps allow people to enter an outer door but not an inner door similar to ATM kiosks. Once inside, of course, they had the run of the place." Lessons: after writing down your password, eat your sticky notes rather than leave them on the monitor.

2 of 361 comments (clear)

  1. This is NOT a man trap by rbanzai · · Score: 0, Redundant

    A man trap lets you into a vestibule but does NOT let you into the main area without authentication of some kind.

  2. Re:insecurity 101 by tomlouie · · Score: 1, Redundant

    Make sure to get a receipt after every trip to the lavatory. Paraphrased from D. Adams.