Bob Young

In terms of physical penetration testing (i.e., property and building access), a bright fluorescent safety vest and a hard hat will get you into a lot of places.

I’m doing cell site inspections this month under contract with a client. I’m carrying my Letter of Authorization with me, but I haven’t had to show it once. Three of the four sites I’ve visited were urban properties with people milling about.

At each property, after working for a few minutes I introduced myself, but I enjoyed doing the test to see if anyone would stop me and ask what I was doing there. And that Letter of Authorization? Even when I introduced myself, I never had to produce written proof. They took my word for it.

#CallMeIfYouNeedMe #FIFONetworks

Cybersecurity - Networks - Wireless – Telecom – VoIP

May 22 at 4:28pmWeb
Show threadGeek IschMay 23

@fifonetworks Khakis and a polo shirt in the color of a national/global delivery service also often works.

It was unintentional on my part. I'd try to sign in with the front desk for a semi-secure building, and they'd be angry with me. "What do you want, why are you in line, just walk in already, where have you been? You're late this morning!"

It happened more than once, so I gave up on that polo and anything in public.

Show threadGeek IschMay 23
@fifonetworks Oh, yes, I did ask what they meant.
Me: "I have to sign in, what are you talking about? I don't work in this building."
Them: You're [delivery service]. You don't sign in." (etc)
Show threadBob YoungMay 23
@geekisch
A few years ago during the COVID lockdown, one of the hospitals here in Seattle was a client of mine. They had two screening lines outside the main door: one for vendors (short line), and a long line for everyone else. I'm a sole proprietor, no employees, no uniform. But I figured out a way to begin using the vendor line. I printed an "ID card." It had FIFO NETWORKS in big letters, my picture, a made-up "employee ID number," and a fake bar code. I printed it on paper and put it in one of those plastic ID card holders on a lanyard around my neck.
VENDOR STATUS UNLOCKED.
For the rest of the COVID lockdown, I used the short vendor screening line to get in to the hospital to work on their stuff.
So I wasn't really cheating, but it felt like it.
Show threadGeek IschMay 23
@fifonetworks I love this story. :D
Show threadBob YoungMay 23
@geekisch
Great story! I can see how that would happen.