One of my colleagues back when I was in a cyber security shop used to socially engineer his way into all sorts of places he had no business being, mostly for the fun of it but at least once for some on the job stuff that involved getting into a secured server room to extract some hardware. Social engineering is the top tier cyber security threat. That shit will allow to just walk out of the building with a classified server literally under your arm.
"they're so proud of themselves they don't even care. they are so fat and satisfied they can't even imagine it. that someone like me would ever get into their house, walk their floors, spit in their food."
to me, it was second only to the first season of The Mandalorian. it was lower on the fun factor, but had very compelling drama and very human characters. I think the show was set up to fail by the mouse, probably because it didn't include the exec's favorite characters.
all in all, I thought it was good but not great. a glimpse into what the Star wars tv expanded universe could be if the writers were actually competent.
I've worked in manufacturing and we joked about that a few times. The line was that all you needed was the PPE and a clipboard. With those things you just had to look like you knew what you were doing and you could go where ever you wanted.
One night after a night after the bar I dropped by the office to finish something only to be met by a fire truck and a group of guys claiming to be from the local fire department responding to the alarm being tripped.
I was too drunk to be bothered to do anything other than let them in to do their thing while I did mine, but I always wondered if they were some industrial spies using that as an elaborate pretense to break into the office.
The only thing keeping me from believing that is the fact that nothing I've ever worked on would invite or warrant that level of espionage. Any spy would be better off breaking a window or guessing a VPN password, not buying/restoring an old fire engine in order to con some employee into letting them in the office after hours.
Kevin Mitnick wrote a book about social engineering a while ago that was really interesting. It's probably even easier to pull off now that people are much less competent than they were 20-30 years ago.
One of my colleagues back when I was in a cyber security shop used to socially engineer his way into all sorts of places he had no business being, mostly for the fun of it but at least once for some on the job stuff that involved getting into a secured server room to extract some hardware. Social engineering is the top tier cyber security threat. That shit will allow to just walk out of the building with a classified server literally under your arm.
Correct. The first layer of security... is physical.
Ask Private Manning.
https://m.youtube.com/watch?v=N5S9Vx3-QM0&t=29s
"they're so proud of themselves they don't even care. they are so fat and satisfied they can't even imagine it. that someone like me would ever get into their house, walk their floors, spit in their food."
Torn on Andor... it's barely passable but Stellan Skarsgard's character is captivating in every scene.
to me, it was second only to the first season of The Mandalorian. it was lower on the fun factor, but had very compelling drama and very human characters. I think the show was set up to fail by the mouse, probably because it didn't include the exec's favorite characters.
all in all, I thought it was good but not great. a glimpse into what the Star wars tv expanded universe could be if the writers were actually competent.
Now imagine what an expensive suit and shoes can get you into.
People see those. Reflective vest, tool box, clip board etc those make you invisible
I've worked in manufacturing and we joked about that a few times. The line was that all you needed was the PPE and a clipboard. With those things you just had to look like you knew what you were doing and you could go where ever you wanted.
One night after a night after the bar I dropped by the office to finish something only to be met by a fire truck and a group of guys claiming to be from the local fire department responding to the alarm being tripped.
I was too drunk to be bothered to do anything other than let them in to do their thing while I did mine, but I always wondered if they were some industrial spies using that as an elaborate pretense to break into the office.
The only thing keeping me from believing that is the fact that nothing I've ever worked on would invite or warrant that level of espionage. Any spy would be better off breaking a window or guessing a VPN password, not buying/restoring an old fire engine in order to con some employee into letting them in the office after hours.
Kevin Mitnick wrote a book about social engineering a while ago that was really interesting. It's probably even easier to pull off now that people are much less competent than they were 20-30 years ago.