Jack Recider

so then he starts looking at the whole thing backwards instead of getting into this door how do people get out is there a crash bar that you just push from the inside which unlocks the door and opens it well he looked through the window but he didn't see that he didn't see a handle on this door that you could turn or unlock either which made him realize what kind of lock he's dealing with it wasn't a mechanically released door it was electronically locked

so then he starts looking at the whole thing backwards instead of getting into this door how do people get out is there a crash bar that you just push from the inside which unlocks the door and opens it well he looked through the window but he didn't see that he didn't see a handle on this door that you could turn or unlock either which made him realize what kind of lock he's dealing with it wasn't a mechanically released door it was electronically locked

Okay. Okay, so there's a motion sensor. If Deviant can trigger that, it'll unlock the door. But it's a good 10 feet inside the door. So how? How?

Okay. Okay, so there's a motion sensor. If Deviant can trigger that, it'll unlock the door. But it's a good 10 feet inside the door. So how? How?

And that was on the floor.

And that was on the floor.

Okay, so they successfully made it into the building. Now they need to find an open network jack for the other guy to plug his computer into to try to hack into the network.

Okay, so they successfully made it into the building. Now they need to find an open network jack for the other guy to plug his computer into to try to hack into the network.

A Dropbox in this case is a little computer that you can just plug in and leave behind and then try to access it from somewhere far away, like back at the hotel. But this guy forgot it. I guess he was configuring it the night before and just forgot to repack it. And it's back at the hotel. He said, well, go back.

A Dropbox in this case is a little computer that you can just plug in and leave behind and then try to access it from somewhere far away, like back at the hotel. But this guy forgot it. I guess he was configuring it the night before and just forgot to repack it. And it's back at the hotel. He said, well, go back.

Two hours go by. Deviant keeps messaging the guy, what's going on? He says he had to finish setting up the Dropbox, but he couldn't get the keyboard to work to configure it. So he was trying to use the on-screen keyboard and use a mouse to type out every command, and it was just taking a super long time. So Deviant continues to just sit and wait.

Two hours go by. Deviant keeps messaging the guy, what's going on? He says he had to finish setting up the Dropbox, but he couldn't get the keyboard to work to configure it. So he was trying to use the on-screen keyboard and use a mouse to type out every command, and it was just taking a super long time. So Deviant continues to just sit and wait.

Oh, yeah.

Oh, yeah.

There are three things to test when testing a company's security. You can test the physical building itself, you can test the people in the building, and you can test the electronics. This one tested all three. But there's kind of a moral code that Deviant has when testing people, or otherwise known as social engineering.

There are three things to test when testing a company's security. You can test the physical building itself, you can test the people in the building, and you can test the electronics. This one tested all three. But there's kind of a moral code that Deviant has when testing people, or otherwise known as social engineering.

I mean, here he tricked a guard into making him think he worked for the elevator company, but he also gave the guard many opportunities to check his credentials or verify who he is. Gosh, even if just the guard decided to give him a visitor's pass and took their names down, that would be better than nothing, right? So there were lots of training opportunities for this guard.

I mean, here he tricked a guard into making him think he worked for the elevator company, but he also gave the guard many opportunities to check his credentials or verify who he is. Gosh, even if just the guard decided to give him a visitor's pass and took their names down, that would be better than nothing, right? So there were lots of training opportunities for this guard.

But bad guys don't really have these moral codes. They might wrestle the guard to the ground, tie him up in the elevator, or break some windows to get in. I mean, it's possible to figure out where the owner of the company lives and kidnap their kids, holding them for ransom for some company data.

But bad guys don't really have these moral codes. They might wrestle the guard to the ground, tie him up in the elevator, or break some windows to get in. I mean, it's possible to figure out where the owner of the company lives and kidnap their kids, holding them for ransom for some company data.