Recent Posts1
Richard Nixon's glittering half-life sarcophagus / Re: Open Bar: Free Russian Orphans with Every Purchase
« Last post by LMNO on Today at 01:12:15 pm »Copied from previous Open Bar, didn't see this shiny new one:
I've been reading stories of complex social engineering schemes that pentesters and criminals have used to compromise entire corporate networks, and I've just been thinking about how no complexity or effort would even be required to compromise my company's entire network (And all the networks and companies we support). Literally no one would question a single person walking right into our building, and walking up to any computer left open and alone, and breaking into it using publicly available, no-hardware-required Windows 7 boot-time exploits, and installing whatever list of malware they desired.
It's disturbing, actually. Considering we support several of the largest Fortune 500 companies, you'd think we'd spend a little more effort on security.
Oh yeah, I forgot, we have these nice, security badges. Good thing no one can get one at the security desk just by asking for one and providing information that is publicly available. Nope, not at all...
My Google Fu is failing me, but I recall a story about a hacking challenge, where the IT security guy was boasting how strong their firewalls, etc were, and dared a certain hacker to try and get access to a particular server. So, the hacker dressed up as maintenance, walked through the front door unquestioned, went to the server field, unplugged it, and walked out with it under his arm.
Like I said, I can't attest to its veracity because I can't find the link, but it sounds true.
