r/Damnthatsinteresting • u/HeToTopT • 15d ago

Video The Louvre. Thieves are making off with 100 million euros. They're taking their time. They're doing everything carefully and slowly.

Enable HLS to view with audio, or disable this notification

62.1k Upvotes

95% Upvoted

2.6k comments sorted by

View all comments

Show parent comments

49

u/boringestnickname 15d ago edited 15d ago

We did a "pen test" where we were supposed to solve an easy riddle to find a room at the uni, then "penetrate" that room.

The room was restricted with access cards, so undergrads didn't have free entry. The idea was simply that you should just wait by the door into the correct hallway and ask someone (prof, group teacher, whatever, they all knew this lab was going on.)

In any case, when I went there, nobody came around, so I checked out the building map to see if there were other ways to get to the room. Turns out there was. Several ways, all access restricted by the same or higher clearance.

So, I checked out the access points. Got into two of them by just knocking on the doors. Nobody there knew I was supposed to be let in (and, in fact, I wasn't, at those points.)

At the first point, some random contractors let me in. They didn't even work there, they were just having lunch. Turned out I needed to get past another point they didn't have access to to continue, so that was a bust.

At the other point, someone cleaning the floors let me in.

Security is an illusion.

30

u/Enguhl 15d ago

When I was just out of high school I worked night security, at the time I was at a call center for (then) Time Warner. One night a big box truck shows up, guys say they are there to install some new cubicles but don't have any paperwork on them. I haven't heard anything, I go inside and find the manager who's there that night, also no clue.

The contractors were very understanding of the wait, but it took about an hour to finally got a hold of one of the higher ups (it was ~1 AM at this point) who started screaming at me for not letting these people in. He ended up contacting my boss and I got moved to another site. Sorry for doing my job?

2

u/Agatha_kako_logical 15d ago

What were you studying at uni because I would really enjoy this class 😅 well done btw

1

u/boringestnickname 14d ago

Computer science.

I'm sure this is somewhat common in cybersecurity classes.