Slashdot Mirror
First-Person Account of a Social Engineering Attack
darkreadingman writes, "A penetration tester tells how he broke into a bank's network dressed as a copier repairman. Some good lessons here — many companies spend millions on network security, but don't teach their employees how to challenge a stranger in the building. Social engineering at the company site can be one of the most difficult attacks to defend against." From the article: "Before departing scenes like these, we try to document the effort and provide proof of our success. I usually leave something behind and then contact the person who hired me and direct them to the mark. In this case I wrote his password on a ream of paper and tucked it under the machine."
You know, I was wondering why that guy needed my password to fix the copier.
Some attitudes replaced or by cgi optimizes
There are way too many first person games in the U.S.
penetration tester. now that's a job! is it somehow related to the porn industry?
GetOuttaMySpace - The Anti-Social Network
In this case I wrote his password on a ream of paper and tucked it under the machine. :)
That seems like an awful lot of effort, when you could just write it on one sheet.
thanks! I looked under my keyboard and found the jumpdrive I had been trying to find for weeks!
...I could be a penetration tester. On Jenna Jameson. ;P
-"...bad old ideas look confusingly fresh when they are packaged as technology" - Jaron Lanier (Digital Maoism on Edge.o
"Gentlemen, your communication lines are vulnerable, your fire exits need to be monitored, your rent-a-cops are a tad undertrained. Outside of that everything seems to be just fine. You'll be getting our full report and analysis in a few days but first, who's got my check?"
Slashdot Burying Stories About Slashdot Media Owned
"Think about it Derek. Male models are genetically constructed to become assassins. They're in peak physical condition. They can gain entry into the most secure places in the world. And most important of all, models don't think for themselves. They do as they're told."
Some of us are blind you insensitive clod! We have a hard enough time with regular money, cards are completely useless!
Unless you're an executive, in which case it's called "pretexting".
"Are you sure you want to replace 'Teh Money.xls', size $13.28, modified 11/21/2006, with 'Teh Money.xls', size $1,000,000.00, modified 11/30/2006? [OK] [Cancel]"
Which is why you should bang your mistress in the back of the theater.
Awesome furniture, accessories and cabinetry in Santa Rosa, CA: http://humanity-home.com/
what the hell is a man-trap?
Sometimes, life itself is sarcasm...
That is why all your coworkers hate you behind your back
Or, transfer it into your own, separate account on the same bank, then use Log Modifier to change the destination account in the transaction record to someone you hate (or someone you're being paid to discredit), and Log Deleter to delete the record on your end. Disconnect before they trace you, and BOOM! Watch your Uplink rating smash through the roof...
You'll probably need a level 5 Firewall Disable (or Firewall Bypass) and version 3 of Decypher. And don't try to hack into the Uplink Corporation's bank; yours is the only account.
Wait, we are talking about Uplink, right?
-:sigma.SB
WARN
THERE IS ANOTHER SYSTEM
I don't know about anyone else but I feel I have the best password creation system. . . I go and look at half a dozen other employee's sticky notes then I bolt them up like Voltron to form my own superpassword.
disclaimer: I've been known to store numbers in my ass for which to dig out when quantities are required.
A silver briefcase on wheels?!
Damn. What a giveaway. If you see two guys walking into a building with that you know something bad is about to go down.
Dont they show Die Hard in the training inductions?
------
beware he who would deny you access to information, for in his mind he dreams himself your master
YuL1P3729? That's the combination on my luggage!
Mmmm... Salted hash!
When our name is on the back of your car, we're behind you all the way!