Slashdot Mirror

← Back to Stories (view on slashdot.org)

How To Sneak In To a Security Conference

Posted by Soulskill on from the equip-yourself-with-a-fake-beard dept.

jfruh writes "You'd think that, of all events, security conferences would have tight security. But one anonymous human pen tester managed to sneak into the RSA conference without credentials, using tried and true techniques like waving a badge from another conference at security guards and slipping in through exits."

17 of 189 comments (clear)

  1. Body language is an effective tool by Anonymous Coward · · Score: 5, Interesting

    It's easy to avoid notice if you act like you know what you're doing, where you're going and that you belong where you are. Never stand still or look around.

    1. Re:Body language is an effective tool by SJHillman · · Score: 5, Funny

      This is why I keep my lab coat from college. A lab coat says you know what you're doing. Throw in a clipboard and you're gold.

    2. Re:Body language is an effective tool by vinehair · · Score: 5, Insightful

      It's easy to avoid notice if you act like you know what you're doing, where you're going and that you belong where you are. Never stand still or look around.

      Bingo. Simple tactics and social engineering are usually all you need if you really want to get at something.

      The weakest link in any security chain is always the people, and people are easy to deceive.

    3. Re:Body language is an effective tool by PatPending · · Score: 5, Funny

      A construction site... or when you're trying to go backstage at a Village People concert.

      --
      What one fool can do, another can. (Ancient Simian Proverb)
    4. Re:Body language is an effective tool by Anonymous Coward · · Score: 5, Funny

      whenever I go out shopping for something I end up being asked "do you work here"

      Do you always look bored and slightly retarded?

    5. Re:Body language is an effective tool by CanHasDIY · · Score: 5, Interesting

      This.

      When I was doing gig work, I learned the easiest way to get backstage at a show is to appear on the loading dock a few hours before the event, wearing all black, and start helping the crew do their load-in (industry term for "take the shit off the trucks and set it up on stage"). Once load in is complete just hang around the backstage area until the show.

      The downside is, since you're dressed like a stagehand, you'll probably be treated like one, so don't expect to spend the whole show standing around with your thumb up your ass.

      --
      An enigma, wrapped in a riddle, shrouded in bacon and cheese
    6. Re:Body language is an effective tool by Anonymous Coward · · Score: 5, Funny

      Getting backstage at a Village People tribute doesn't necessitate stealth, just willingness.

    7. Re:Body language is an effective tool by cptdondo · · Score: 5, Funny

      Long ago I learned that the best way to be invisible is to walk in dressed in overalls with a toolbelt, and announce "Plumber!" to everyone in earshot. You can walk into a women's bathroom, yell "Plumber!" and none of the women will even notice as you walk around....

    8. Re:Body language is an effective tool by Anonymous Coward · · Score: 5, Informative

      You said this as a joke but that you're actually right makes it even funnier. Sometimes I wouldn't bother taking off my lab coat on my way home from work, and you wouldn't believe how much authority that granted me to those I passed into on my way home. People always think the most ridiculous things when they see a lab coat. Was I a rocket scientist, a doctor? A nuclear physicist? Or was I just just a guy who had to wear a lab coat and didn't really do anything that important? Except no one except those that realize how normal lab coats are thinks the last one.

    9. Re:Body language is an effective tool by Anne_Nonymous · · Score: 5, Funny

      If you wear Wellington boots, a jock strap, and a huge sombrero, people generally don't mess with you.

    10. Re:Body language is an effective tool by krept · · Score: 5, Insightful

      Find a pack of people smoking. They always know the easiest way to get out and back in quickly.

      --
      None of us know everything. Therefore we're all naïve.
  2. Security is about what you're securing. by Anonymous Coward · · Score: 5, Insightful


    You'd think that, of all events, security conferences would have tight security.

    No, I wouldn't think that. I'd think that a bank, or an event involving a US President would have tight security. Security is about what you're protecting, not who's involved in it. For the most part "stealing" admission to a conference is harmless, as long as a few people do it. The security only has to be good enough to make it so only a few people sneak in.

    Security conferences aren't exactly a high profile event like, that appeals to millions (like say a Rock Concert), so people sneaking in is really not a big problem. If you didn't think you could sneak in to a conference before, you obviously haven't been paying attention.

    1. Re:Security is about what you're securing. by Ruke · · Score: 5, Insightful

      Absolutely. There's no reason to have a conference be that secure. Spending an extra five-to-ten seconds per attendee checking badges would be a major disruption in crowd flow. The primary benefit of security at this event was to make the attendees feel special, and the secondary benefit was preventing overwhelming crowds. There's basically no reason to keep out any one person who's not supposed to be there; the panels are advertisements, and the information is as good as public. Security is in place to keep out crowds of people who aren't supposed to be there, and they seemed to do well enough at that.

  3. Why? by hipp5 · · Score: 5, Insightful

    You'd think that, of all events, security conferences would have tight security.

    Why?

    I suspect the cost/hassle of doing more than basic security outweighs the benefit of catching a few people who didn't want to pay the $100 conference fee. I doubt the information being presented is secret and needs protecting. And I imagine of all conference organizers, the organizers of a security conference would have best grasp on this security cost/benefit.

  4. Large Concerts by war4peace · · Score: 5, Interesting

    You can easily sneak into large concerts, gigs, expos, whatever if you have a cap with a TV station logo, dress shabby and carry a large video camera. If you don't have a camera, a set of cables or a tripod would do just fine. Badges? No need.

    I used to work for a local branch of a known TV station, I had access to an old training video camera at all times. Every time there was a gig I wanted to attend to, I went to my workplace, grabbed that camera, went to the gig, got in, left the camera in one of the the tech rooms, achievement unlocked. Sometimes I brought my girlfriend in by letting her carry a microphone. We even interviewed a security dude just for the kicks.

    So yeah, it's easier than expected.

    --
    ...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
  5. "sneak" into a sales presentation? by mindcandy · · Score: 5, Insightful

    RSA 2012 is basically a big sales presentation.
    To suggest sneaking in is a big achievement is like saying you got into BestBuy a few minutes early one day to shop for TVs.

  6. Re:even the subway may not check that close with b by maxwells_deamon · · Score: 5, Interesting

    I was on the commuter train in San Diego. It was run mostly on the honor system but you can get a ticket if you can't show you have paid. It was packed and there was bairly room to stand

    Two police officers jumped on and about 1/2 of the people (most looked like students) suddenly remembered it was their stop. Suddenly you could even sit down,