Deviant Ollam

And I said, this is, so it's not like a data center door. This is just a regular door. And they said, yeah, but you know, none of our badges work on the door. And we don't like the, we don't apparently even the head, you know, partner doesn't have a key. His key, we thought it was supposed to work. We'll have to talk to building management about that.

And I said, this is, so it's not like a data center door. This is just a regular door. And they said, yeah, but you know, none of our badges work on the door. And we don't like the, we don't apparently even the head, you know, partner doesn't have a key. His key, we thought it was supposed to work. We'll have to talk to building management about that.

And I said, okay, well, can I try something for a second? I mean, I'm looking at your doors and I, you know, pick up the equivalent of a TPS report and just kind of rip the cover off of that. And I said, well, here, if I kind of, and I just shoved a, you know, I shimmed the door. I just popped it in, slid, the door popped open. And I was like, well, all right, cool.

And I said, okay, well, can I try something for a second? I mean, I'm looking at your doors and I, you know, pick up the equivalent of a TPS report and just kind of rip the cover off of that. And I said, well, here, if I kind of, and I just shoved a, you know, I shimmed the door. I just popped it in, slid, the door popped open. And I was like, well, all right, cool.

Well, cancel the locksmith, I guess, save you a couple bucks there. And I just breeze on into the room. I'm sticking flash drives in and the old Pnordal NT boot tool. I'm rebooting machines and getting, you know, restoring local admin access. Okay. Resetting passwords. I mean, what was his name? Okay. So I see his user. I'm just going to kill his user.

Well, cancel the locksmith, I guess, save you a couple bucks there. And I just breeze on into the room. I'm sticking flash drives in and the old Pnordal NT boot tool. I'm rebooting machines and getting, you know, restoring local admin access. Okay. Resetting passwords. I mean, what was his name? Okay. So I see his user. I'm just going to kill his user.

There might be maybe backup accounts he made for maintenance, but I don't see immediately a way to... that he's getting in, you're probably fine. I'll send you a bill. We're pretty good, man. And I hand, you know, here's your piece of paper. So here's your new root passwords. And the guy, you know, the keys to the kingdom, he takes it. He goes, yeah, yeah, sure, root password, sure.

There might be maybe backup accounts he made for maintenance, but I don't see immediately a way to... that he's getting in, you're probably fine. I'll send you a bill. We're pretty good, man. And I hand, you know, here's your piece of paper. So here's your new root passwords. And the guy, you know, the keys to the kingdom, he takes it. He goes, yeah, yeah, sure, root password, sure.

And just kind of puts it in his breast pocket. What'd you do to that door? And I was like, oh, yeah, your doors are all installed with these electronic strikes. They're actually – it's a super common vulnerability. You can speak to whoever your integrator was about that. And he's, hey, Steve. He brings this guy. Come here. Can you show him what you did to that door? And I was like, yeah.

And just kind of puts it in his breast pocket. What'd you do to that door? And I was like, oh, yeah, your doors are all installed with these electronic strikes. They're actually – it's a super common vulnerability. You can speak to whoever your integrator was about that. And he's, hey, Steve. He brings this guy. Come here. Can you show him what you did to that door? And I was like, yeah.

Do you want to show it at your office? I'll pop your office. So I'm just popping doors open. And it bugged him out. And they said, oh, my God. And that became the story of the day at the office. Not the sysadmin who quit, but this kid who came in and opened all the law partner's doors.

Do you want to show it at your office? I'll pop your office. So I'm just popping doors open. And it bugged him out. And they said, oh, my God. And that became the story of the day at the office. Not the sysadmin who quit, but this kid who came in and opened all the law partner's doors.

You should do a training at Black Hat. I want you to propose a Black Hat training about lockpicking. And I was like, no one's going to pay money for that. He said, no, trust me, trust me. You know, I think it'll be hot. You should do it. And yeah, so that became my career was a law firm who quit and a dear friend who said, hey, people pay money for this knowledge.

You should do a training at Black Hat. I want you to propose a Black Hat training about lockpicking. And I was like, no one's going to pay money for that. He said, no, trust me, trust me. You know, I think it'll be hot. You should do it. And yeah, so that became my career was a law firm who quit and a dear friend who said, hey, people pay money for this knowledge.

Those two forces together really kicked off the idea of doing physical security consulting for me and my main colleague through all this has been Babak Javadi. He and I have more than one company at this point doing training, consulting, advising, and I get to break into safes on army bases. It's quite a career, all from a few little things that you trip over as opportunities.

Those two forces together really kicked off the idea of doing physical security consulting for me and my main colleague through all this has been Babak Javadi. He and I have more than one company at this point doing training, consulting, advising, and I get to break into safes on army bases. It's quite a career, all from a few little things that you trip over as opportunities.

Someone did the math, and I think they said one of the few people who's talked more than I was the late and wonderful Dan Kaminsky. But again, I just would say yes to everything, and I would drive or fly just because I love talking about this. So yeah, it's well in excess of 300 or 400. That was the last time we checked, and that was years ago.

Someone did the math, and I think they said one of the few people who's talked more than I was the late and wonderful Dan Kaminsky. But again, I just would say yes to everything, and I would drive or fly just because I love talking about this. So yeah, it's well in excess of 300 or 400. That was the last time we checked, and that was years ago.

So yeah, this is the elevator hacking talk. This is the talk that we were told had to be on Sunday. Because... Because reasons.

So yeah, this is the elevator hacking talk. This is the talk that we were told had to be on Sunday. Because... Because reasons.